Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
File: _X5IAbAS8bGZsv0RqqxS13VjRzk.mft (raw, json)
Hash identifier: Z/oncAV2hJppzB0lYy5Qi5VE/QVqbNF9DO72MJitdXE=
Subject key identifier: 39:D2:1A:C2:70:51:B9:02:43:07:4B:B8:9B:D9:DA:1F:FA:D4:47:14
Authority key identifier: FD:7E:48:01:B0:12:F1:B1:99:B2:FD:11:AA:AC:52:D7:75:63:47:39
Certificate issuer: /CN=fd7e4801b012f1b199b2fd11aaac52d775634739
Certificate serial: 019FAC75BA3E592C2BADF645596CD72DE6A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:24 +0000
Manifest this update: Wed 29 Jul 2026 06:00:24 +0000
Manifest next update: Thu 30 Jul 2026 06:00:24 +0000
Files and hashes: 1: YDVKQbfRYIpm7hR70cFm_r3Bozk.roa (hash: aF7PQA8hwmlUZMld6dK9hesrrO56Rkyyowsvq4iO504=)
2: _X5IAbAS8bGZsv0RqqxS13VjRzk.crl (hash: EaQEC9S0iSl4LrkdXogcIT99uuQLRc8o+k5PLFIX3GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:ba:3e:59:2c:2b:ad:f6:45:59:6c:d7:2d:e6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7e4801b012f1b199b2fd11aaac52d775634739
Validity
Not Before: Jul 29 06:00:24 2026 GMT
Not After : Jul 30 06:00:24 2026 GMT
Subject: CN=39d21ac27051b90243074bb89bd9da1ffad44714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:35:45:c2:5e:de:de:9e:88:4e:e3:53:bc:
30:c8:c3:e7:47:86:f2:a0:86:12:0f:2a:29:9c:7f:
aa:1f:99:2a:7a:e3:18:63:1e:a6:43:3b:8b:88:41:
58:74:95:33:b8:1b:97:8a:df:32:bf:f2:f6:fc:e6:
76:75:ea:8b:8a:65:ce:ad:de:0c:b1:f6:77:63:07:
b6:98:e9:a2:a1:ce:a5:ab:0e:60:97:e0:30:0c:bd:
aa:a7:ab:92:ff:20:cf:8e:f3:e2:0a:53:84:ee:07:
0f:60:b1:25:d2:ca:60:45:94:e2:6c:c9:e3:be:04:
a6:8d:91:cc:f0:72:86:e9:d8:5d:2b:da:b8:8c:73:
a6:b7:11:ac:50:8b:19:f4:70:c5:3d:ce:ab:12:d6:
0e:c4:c7:4b:79:e4:8b:80:c4:f6:8d:f1:1a:08:a3:
57:db:55:34:32:bb:cc:c3:4c:12:9f:88:82:36:a7:
8b:4a:32:c7:24:97:c3:06:72:f3:51:dc:e4:bc:85:
8b:0b:cc:71:8a:5b:9d:a6:98:1b:65:79:b1:a0:30:
c2:55:cf:49:f6:a7:38:18:f7:16:68:44:3f:a3:43:
5a:19:a9:b8:cf:21:1d:dc:ea:a7:e7:9d:7d:41:80:
90:08:3d:b8:3d:88:e9:ac:e9:16:a6:29:2e:5b:47:
55:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D2:1A:C2:70:51:B9:02:43:07:4B:B8:9B:D9:DA:1F:FA:D4:47:14
X509v3 Authority Key Identifier:
keyid:FD:7E:48:01:B0:12:F1:B1:99:B2:FD:11:AA:AC:52:D7:75:63:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6f:bd:8d:a7:8d:0f:9b:3e:e3:a0:10:8a:49:08:30:93:ac:
71:10:cd:21:a0:57:2e:39:a4:89:24:0a:9a:f8:86:46:3a:69:
6b:93:fb:47:fa:1e:e8:c4:2d:97:61:e1:ad:cb:1c:bb:77:6c:
2c:c1:12:20:72:fa:6c:51:42:28:80:6c:be:4c:22:e4:a2:d4:
1e:af:f3:5d:4c:99:79:be:84:33:cf:d4:e6:1a:ae:87:f8:f5:
dc:57:a4:45:71:b3:da:41:57:9e:52:4f:ea:d0:71:f8:fe:97:
36:1c:60:1e:f2:a4:ff:35:33:92:cb:c4:69:04:c4:b7:b0:de:
2b:38:fc:9d:df:dd:5a:e8:3f:70:6c:6d:59:80:40:b0:97:a4:
48:14:1e:df:20:7a:e1:88:ac:90:15:3d:65:40:bc:2e:aa:bd:
ee:67:13:5b:2a:84:9f:05:e9:19:87:3d:b9:21:c5:13:a2:bd:
9c:f1:e3:5f:fd:b9:7c:6d:e4:31:02:7b:97:0f:cc:a7:51:df:
16:1e:c2:cb:8e:f5:4b:3c:2b:ac:91:bd:23:18:2f:ce:13:19:
97:a8:a1:f3:72:c6:d5:75:bd:f8:60:15:ac:83:fb:a5:e2:8c:
bf:db:af:eb:3b:5e:61:94:67:59:d3:5d:6b:f3:97:e3:54:f8:
63:a7:9a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:20:34 2026 by rpki-client