Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
File: XLtvfRHev55LqLH2nDg7j8PErhI.mft (raw, json)
Hash identifier: WvK+OzqWt8QjHJPzxek2wF8kBya9LyPH/meE6C4Esmk=
Subject key identifier: 05:E5:D7:BF:8F:79:E9:AB:03:EF:00:85:54:9E:FC:40:A8:FC:A5:B7
Authority key identifier: 5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
Certificate issuer: /CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Certificate serial: 019FAC768DE16F817B9A3A585265711C9057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
Manifest number: 0DFA
Signing time: Wed 29 Jul 2026 06:01:18 +0000
Manifest this update: Wed 29 Jul 2026 06:01:18 +0000
Manifest next update: Thu 30 Jul 2026 06:01:18 +0000
Files and hashes: 1: XLtvfRHev55LqLH2nDg7j8PErhI.crl (hash: R6DHGqwlEFXeFP2V0BXWB94ZvICySIupMtQOw8UYL6E=)
2: eO46gXXoSZwATk8MoN76YPpN1jQ.roa (hash: F/WomuEJ+uQlAxaPHkR6qqNqSNUL0B0LVxqFRNytneU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:8d:e1:6f:81:7b:9a:3a:58:52:65:71:1c:90:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Validity
Not Before: Jul 29 06:01:18 2026 GMT
Not After : Jul 30 06:01:18 2026 GMT
Subject: CN=05e5d7bf8f79e9ab03ef0085549efc40a8fca5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:e2:42:ba:86:a3:87:67:d6:a8:a6:79:71:
5b:16:1a:e0:f7:54:86:2a:7b:14:77:f7:f2:0a:85:
2b:0f:ab:aa:e4:76:4b:1a:7d:b4:08:1e:8d:96:7e:
31:8d:b9:72:d4:76:c9:98:aa:f7:95:45:a0:a3:ee:
4f:89:5a:37:3a:65:ef:df:6c:8b:96:29:da:6d:c9:
24:de:7e:f8:6a:72:c7:1d:09:15:dc:c4:5f:89:34:
a5:c8:0f:24:17:f9:86:a7:e9:42:d7:a6:37:bb:55:
a1:5e:d3:84:62:e0:bd:33:49:a5:d4:60:a4:16:ff:
81:c2:6f:12:5a:14:33:87:7a:89:d7:34:e1:e5:85:
91:9b:ab:4a:9d:db:3b:be:df:42:d5:9f:92:0a:de:
8b:d0:56:3f:18:95:cc:96:5e:eb:ad:86:92:cc:de:
ce:aa:56:3d:5f:f7:72:4d:07:28:dd:41:5e:59:03:
47:36:24:c8:57:28:31:9d:78:e1:a4:8e:90:73:31:
8d:5d:35:2e:8e:3c:5a:fd:d9:6a:18:d3:d0:a9:2c:
c7:15:ec:6b:46:89:fd:2a:e8:49:bb:18:b1:28:b7:
96:b9:19:43:4d:ab:4a:2f:62:4b:b8:24:40:11:42:
bc:24:cf:b7:b9:db:53:06:42:1e:fb:98:74:bd:c7:
81:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E5:D7:BF:8F:79:E9:AB:03:EF:00:85:54:9E:FC:40:A8:FC:A5:B7
X509v3 Authority Key Identifier:
keyid:5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:04:57:00:ab:66:cc:03:3d:9c:10:f8:4f:09:11:db:ca:d8:
30:d3:96:33:ce:9f:9a:b6:a3:8a:48:2b:5e:a2:16:59:5b:bc:
d8:e7:74:d0:31:1a:d9:89:99:ef:9a:56:fb:19:9e:70:fe:db:
fa:9c:69:d2:be:91:20:fc:c8:a3:73:19:37:20:79:c4:bd:0c:
02:f7:9a:f1:91:d1:49:15:1f:ae:68:a4:e2:0f:d5:f0:21:04:
29:55:c5:29:e6:da:f0:cf:db:b0:69:32:4c:3d:a7:64:bb:ac:
d1:c1:da:d8:fb:0d:5c:25:cd:d5:a7:4e:eb:05:44:2f:59:33:
b6:f7:39:31:b9:dd:e7:58:74:44:37:42:42:32:be:97:24:46:
71:c7:c8:ca:95:d2:10:d1:0a:3b:e9:5f:01:3a:8d:5d:6b:cb:
ae:6f:df:98:cb:19:f7:1b:66:f2:4d:b8:d2:cc:84:25:6f:d6:
ce:18:e0:88:bb:bd:1f:88:58:83:99:cb:73:c5:9b:7a:af:5c:
14:d1:11:12:68:2e:3a:9d:6a:f7:e0:fb:e2:9a:6e:89:4d:a6:
c1:a6:3c:0e:5f:a4:ad:30:87:90:14:cb:11:ba:d1:cd:17:92:
f2:36:df:16:55:c9:c9:4c:81:1f:0b:4e:04:37:d3:dd:b9:aa:
c2:9c:b9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:40:31 2026 by rpki-client