Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
File: XX9jQBQHwcx5excDToE9IlT5dz4.mft (raw, json)
Hash identifier: JSf1Y5Xh3xaCPlV2UUvMDDkrdJrIjArZmJvelIBVRi4=
Subject key identifier: 71:DF:27:B8:9A:64:37:51:C2:9E:A1:8B:46:38:6B:15:9E:A3:13:96
Authority key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
Certificate issuer: /CN=5d7f63401407c1cc797b17034e813d2254f9773e
Certificate serial: 019FAD1B25552A3C5A458544A0FD5312B4B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
Manifest number: 106C
Signing time: Wed 29 Jul 2026 09:01:04 +0000
Manifest this update: Wed 29 Jul 2026 09:01:04 +0000
Manifest next update: Thu 30 Jul 2026 09:01:04 +0000
Files and hashes: 1: IJctrhezjfWjiA84ZaayWYeZh1k.roa (hash: VetyKsjNSyH6fNCp1k97xHgv6Vja8yJIQbMcO2qIjkU=)
2: XX9jQBQHwcx5excDToE9IlT5dz4.crl (hash: qLrwnLZnxngRZP/DheemcF34nNWpg8g4E+jN0cH1boA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:25:55:2a:3c:5a:45:85:44:a0:fd:53:12:b4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7f63401407c1cc797b17034e813d2254f9773e
Validity
Not Before: Jul 29 09:01:04 2026 GMT
Not After : Jul 30 09:01:04 2026 GMT
Subject: CN=71df27b89a643751c29ea18b46386b159ea31396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:ed:ef:dd:60:75:4a:45:25:64:bb:00:52:
a1:78:46:2a:ab:6e:db:47:d4:3c:be:67:45:ba:3e:
be:d4:3e:6b:1a:c8:ae:0e:b4:00:a9:ca:45:ff:ec:
89:99:8f:8d:fa:f5:db:ce:d0:29:65:8d:d1:e1:ba:
8e:3b:fe:24:b0:66:f8:85:c1:6d:ce:fc:20:90:48:
7e:ea:08:68:b3:b1:6a:8d:fc:d7:32:2e:ae:9e:53:
eb:4e:69:bc:5b:83:66:bf:9e:03:a3:8a:88:59:48:
4e:39:e0:e3:f0:75:82:7e:af:5b:e8:91:cc:6a:dd:
1c:63:c7:d6:b5:77:7a:d5:bc:19:7e:84:d9:9d:3a:
ce:f0:17:0f:85:e5:35:60:56:a4:61:59:a5:c9:58:
4e:48:7e:82:b0:43:a3:d8:76:5b:d7:fb:ee:30:2b:
6b:08:3c:f2:14:ba:c1:2d:b9:7b:ec:e9:55:c3:69:
0e:a2:cf:83:b8:ca:a1:76:4d:a9:5a:4d:5f:c0:ea:
ad:ad:4a:16:ff:97:5e:51:b7:e8:0a:76:f7:a7:2c:
55:69:a8:45:d4:4c:8a:73:8a:c9:85:6f:19:74:1f:
22:3f:8c:4c:57:05:6e:26:84:ba:ab:12:f1:45:57:
e6:d9:af:26:91:0e:d1:a7:8b:b9:aa:b3:b4:5f:19:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DF:27:B8:9A:64:37:51:C2:9E:A1:8B:46:38:6B:15:9E:A3:13:96
X509v3 Authority Key Identifier:
keyid:5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6c:f4:db:7a:6b:dc:08:9d:47:0b:a8:7c:88:18:35:a9:10:
28:1a:6b:18:0e:f7:a0:7d:fb:b5:0e:c0:af:77:5f:00:12:00:
d5:96:bf:77:9e:cf:74:59:e6:67:f4:38:64:f4:ee:74:2e:d1:
ce:4b:fd:6a:85:ab:48:35:b1:12:8f:47:f3:fa:de:52:33:e3:
02:0e:17:6f:b1:ce:25:14:10:5f:25:9b:d5:b6:84:f0:f9:4d:
6c:98:23:1c:4e:28:aa:98:19:05:68:a4:2f:a0:6b:95:18:88:
b4:f5:c3:3a:bf:0e:20:6f:f7:fd:72:55:a0:e6:80:fa:d0:a0:
43:9c:1a:d4:09:59:c8:69:6a:bf:66:6b:f6:49:dc:29:00:1f:
25:6a:ed:dd:18:3c:cf:68:99:c3:ae:60:ba:c1:41:89:32:cf:
8d:b7:3b:b0:7f:88:44:86:fb:82:de:32:2e:68:15:f3:a3:38:
de:41:28:8b:83:f3:ca:e6:c7:4b:6c:78:3c:f8:04:8c:9d:0b:
40:4e:c5:83:52:ea:17:a8:49:b9:01:7e:3d:68:08:e9:f0:23:
e9:47:59:52:ea:33:53:df:56:e8:90:ac:f2:06:fd:24:7a:58:
4f:f4:b2:7b:8f:4d:79:2a:ac:de:f7:3e:b4:31:8d:91:ac:64:
80:c4:fc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:00:47 2026 by rpki-client