
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
File: xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json)
Hash identifier: lBwE6EwZIvgJcZ7osWZanuzRUFFdOQDwWal632qJSPw=
Subject key identifier: C2:96:56:49:F9:39:85:FC:C1:5B:67:14:33:93:FD:43:32:C1:79:E0
Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
Certificate issuer: /CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Certificate serial: 019FAA505A12B83B1273359924B717856DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
Manifest number: 08EC
Signing time: Tue 28 Jul 2026 20:00:20 +0000
Manifest this update: Tue 28 Jul 2026 20:00:20 +0000
Manifest next update: Wed 29 Jul 2026 20:00:20 +0000
Files and hashes: 1: OBYyhiA-o_Lu_Sii3K0csw4HB8Q.roa (hash: losaCS7PxxPceDw56uDFnzA7tz476/wdte0ltw/SmOk=)
2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: 4zfMqO1OX3k5aqWij2bu0/QSxNhthrpGmxoG8RhJ6vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:5a:12:b8:3b:12:73:35:99:24:b7:17:85:6d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Validity
Not Before: Jul 28 20:00:20 2026 GMT
Not After : Jul 29 20:00:20 2026 GMT
Subject: CN=c2965649f93985fcc15b67143393fd4332c179e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:38:7e:c4:71:01:26:dd:61:6a:6a:9b:cf:
88:49:c6:ff:22:a8:93:de:34:09:2a:b9:8d:38:c5:
99:63:c8:d5:52:0f:61:f2:bb:f3:b1:1b:8c:85:44:
f3:6f:06:ba:a7:11:24:15:d0:4b:1b:21:87:ee:91:
22:44:bb:ae:73:7e:55:a0:82:81:a4:90:3a:6b:1e:
92:97:5a:86:6b:04:75:61:f5:fd:a2:1c:f5:9d:e7:
39:7e:87:30:8b:8d:bd:20:52:11:c4:ab:82:79:af:
b9:4a:38:1c:dc:dc:65:d9:bd:e2:17:19:e5:f0:66:
09:9d:b1:82:9d:5c:e4:3b:cd:e5:e8:b8:be:ea:41:
f2:0e:52:fc:71:1f:6a:20:d6:f3:2b:be:49:f4:99:
d7:3c:24:08:69:eb:f7:56:6e:5b:74:b1:de:d4:cf:
7d:a0:89:5a:f4:f9:69:c2:00:c0:33:98:a8:0f:ae:
cf:7c:e5:ff:f0:fd:f6:d5:b0:e6:cd:63:3c:31:6c:
81:6d:e6:bb:63:8c:94:7c:eb:bf:74:c6:32:dc:d7:
aa:9d:9e:22:7e:44:f8:fe:b7:3a:37:6b:5b:2d:7e:
82:0b:e1:40:c3:d8:42:da:39:7c:67:e4:b2:f3:fd:
3c:92:1b:24:98:ed:97:51:b4:7b:1b:b9:b5:be:b4:
00:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:96:56:49:F9:39:85:FC:C1:5B:67:14:33:93:FD:43:32:C1:79:E0
X509v3 Authority Key Identifier:
keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:cf:84:ad:1d:50:72:c1:cc:6c:d8:aa:55:10:05:0e:cf:ba:
d6:dd:c9:be:db:b1:cc:03:a1:6b:6c:a3:0f:f4:76:b9:85:a3:
d5:3e:1c:15:d7:7d:59:1a:11:74:a7:59:07:15:eb:36:be:ae:
ec:06:c4:01:57:be:a0:e0:10:cb:1a:6f:22:9c:2f:20:79:ea:
ee:13:61:9f:4c:0d:06:cd:b9:82:e5:67:5f:0d:6d:30:4e:e4:
f6:d6:4a:bf:ce:ca:b3:de:17:0f:96:f4:44:1e:2d:55:e4:b6:
df:dd:88:74:09:4e:26:77:d1:0c:3b:60:c6:ba:99:82:50:6b:
d2:8c:8c:64:e3:1f:8f:a8:9d:ef:ed:6f:d1:fd:56:09:30:3a:
e3:2e:64:bd:97:00:06:7a:59:64:59:23:31:3c:72:67:c0:db:
54:73:48:af:d8:67:59:09:66:35:03:33:9c:58:94:49:f7:36:
6c:27:b9:15:22:19:b6:d3:0a:b1:ba:31:b6:14:e6:99:4c:19:
a1:60:71:9e:e0:09:57:ad:32:22:a7:e5:6e:d4:4f:5e:70:91:
68:7e:b4:7f:bb:82:56:8d:e1:1d:37:b2:cc:30:26:4b:81:58:
2e:d2:82:2c:ce:c2:82:2b:a3:64:1d:06:5b:da:93:6e:3a:08:
82:6e:dc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:29:12 2026 by rpki-client