Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: g3lH8NqlkwC9ouVE0x2ATvgu2b3kBhfJY+m49p3s02o=
Subject key identifier: 1F:35:19:F9:05:EF:68:D2:9E:67:EB:33:22:9A:EF:07:81:5F:A8:18
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 019FACACD3EC4962555BB11FB8DCEC674395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 07:00:35 +0000
Manifest this update: Wed 29 Jul 2026 07:00:35 +0000
Manifest next update: Thu 30 Jul 2026 07:00:35 +0000
Files and hashes: 1: RB5D86Eez18oD-QABqEilaFp2nQ.roa (hash: cNT5vI1+Epdr8/RiwTV50sHhN6dBP41X/USYdNru1kM=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: ggZlLSJTat4C4IbySsaM0rhairWAYX4Ctzdc6Y38tRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:d3:ec:49:62:55:5b:b1:1f:b8:dc:ec:67:43:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Jul 29 07:00:35 2026 GMT
Not After : Jul 30 07:00:35 2026 GMT
Subject: CN=1f3519f905ef68d29e67eb33229aef07815fa818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:4f:15:90:07:a7:40:bb:0c:da:f9:59:1d:
42:c2:28:9c:44:34:d0:6f:d3:44:60:ed:15:a8:bf:
fe:74:ca:d1:92:b2:86:96:87:44:53:34:32:39:12:
dc:a5:aa:46:10:d6:6d:f2:15:f5:e0:8c:71:55:ee:
8d:12:90:e7:0f:4b:15:08:4b:85:c8:98:32:01:16:
0f:a2:90:7c:82:1e:9f:52:5c:dd:7d:7a:da:e0:6a:
c9:48:8b:6e:94:36:49:2a:2b:49:bb:d6:7f:7d:9c:
2b:57:f5:72:77:bb:be:39:93:e3:11:30:ad:93:36:
f9:3b:f7:b6:82:3a:91:17:8d:6a:17:2e:3a:64:fc:
f1:1c:b9:24:ff:53:37:c6:1c:f3:82:d4:8f:e2:d6:
b6:76:1f:cf:4c:77:d6:7e:33:a9:cc:51:65:b9:6c:
fb:b5:30:5e:4d:25:46:19:d0:64:c1:86:ac:2d:94:
99:51:47:10:fd:6b:d0:72:3c:0c:07:6b:40:f2:a0:
63:ce:61:7d:ee:0b:e3:86:90:c4:55:fe:62:13:6c:
0b:12:21:c2:c1:3e:3b:93:dd:e0:10:fe:7d:56:d9:
6b:21:5e:25:ee:23:33:7a:13:cf:e4:b4:de:16:f3:
88:22:f7:06:20:14:0e:a2:67:9f:52:ac:84:06:61:
c0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:35:19:F9:05:EF:68:D2:9E:67:EB:33:22:9A:EF:07:81:5F:A8:18
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:56:89:34:b4:41:8b:aa:84:3b:c3:0d:c1:ab:e6:1e:0e:ee:
08:31:21:03:5e:02:c8:c0:21:e4:c1:b8:87:f0:12:45:99:7f:
3c:0f:25:cf:b0:bc:72:02:70:79:52:05:16:7c:9c:cd:fc:5b:
85:1d:4f:69:9b:f2:0f:d1:fb:52:20:aa:ee:42:5f:c7:92:d5:
fb:af:68:4b:37:eb:bf:95:9a:5f:a8:ad:6f:96:d9:59:98:49:
fd:25:01:d7:a1:f1:d2:70:64:f1:a8:47:5b:7a:3b:a7:66:c7:
76:e9:97:82:b5:2c:d7:f0:85:9f:75:b8:fb:6f:5f:6e:5f:e3:
ab:4f:7a:32:73:72:27:35:8a:5e:7e:67:fe:9b:45:28:79:bf:
50:ec:03:07:75:d2:1b:69:48:fb:ad:8f:fe:1c:a0:3d:c0:c0:
56:ed:16:3d:d0:2b:8c:37:5f:50:78:78:9a:d3:71:82:ff:55:
dd:35:55:8e:e9:e1:20:6f:18:0c:79:90:fc:53:ef:1d:43:ef:
33:6e:64:37:9f:e1:eb:bb:fe:35:ad:22:0c:d6:d9:18:74:4b:
9f:2f:a3:22:37:36:ee:7e:e0:a2:7b:02:6c:b2:45:dc:54:e3:
d4:a3:0a:a8:fc:6a:bf:ba:84:93:e3:02:1f:90:ef:96:05:fc:
14:29:52:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:48 2026 by rpki-client