Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
File: XY9AsSSN49pfXWCX-BBoKTxL7vc.mft (raw, json)
Hash identifier: TeEMwR70B7upyTR9qFIiJvZiQySk0ch+AkfuB7NqPQI=
Subject key identifier: 0F:F5:4E:62:BE:61:BA:40:3D:00:86:DC:D5:0F:E8:46:8E:02:0D:8C
Authority key identifier: 5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
Certificate issuer: /CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Certificate serial: 019FAD51CF5FFC3119F214FA04CCAD399CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
Manifest number: 0300
Signing time: Wed 29 Jul 2026 10:00:47 +0000
Manifest this update: Wed 29 Jul 2026 10:00:47 +0000
Manifest next update: Thu 30 Jul 2026 10:00:47 +0000
Files and hashes: 1: XY9AsSSN49pfXWCX-BBoKTxL7vc.crl (hash: HBWO47ugNK1t2CH7eIMQYeUitLOcW9Ws5lIixxtAYKw=)
2: _a7gNZLlQxgHn1SWkyljxM4Vp8E.roa (hash: riqb9ZgtO6K145lOcaQYpYRovN3sqPG5Tn86hViYkIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:cf:5f:fc:31:19:f2:14:fa:04:cc:ad:39:9c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Validity
Not Before: Jul 29 10:00:47 2026 GMT
Not After : Jul 30 10:00:47 2026 GMT
Subject: CN=0ff54e62be61ba403d0086dcd50fe8468e020d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:43:7d:b2:83:d2:42:32:bb:16:87:ee:a6:
d2:10:cb:45:6a:69:c4:29:8f:ce:f2:a9:43:4b:9a:
be:8f:37:63:4d:f2:51:68:5a:b0:55:6b:00:97:0c:
68:73:8f:c0:28:4b:e5:74:ba:29:aa:c9:9f:0a:64:
ff:66:a6:aa:45:43:d9:78:08:32:fe:e2:08:ec:99:
49:6b:02:49:1f:58:d3:7f:4c:21:35:c1:95:87:2c:
09:a8:a0:d3:c2:b8:fa:c7:02:db:10:cd:ff:54:9e:
b8:d2:8e:0b:63:66:2e:20:0b:e8:fb:80:9c:c9:d0:
72:64:4a:d0:9d:23:a9:26:44:97:b4:81:0f:14:3d:
dd:f0:d6:3c:9a:a2:a0:d4:54:76:49:2c:c2:b1:49:
93:c1:38:4b:13:4f:54:4c:cb:44:03:2e:6a:47:7c:
40:3b:ce:0f:23:bd:7d:81:55:cd:ba:bc:ae:49:25:
6d:dc:cb:75:ff:4b:ca:38:de:fb:cc:e0:53:78:2c:
b5:2a:4e:09:da:cb:30:e8:39:16:6d:3e:3f:8c:33:
72:20:e3:86:95:e6:f2:33:dd:b8:46:3e:44:2c:3f:
d5:3a:b8:44:66:47:39:42:56:24:d5:36:70:3b:f3:
d5:a9:6d:ce:6c:08:05:07:30:cc:d2:d0:96:99:70:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F5:4E:62:BE:61:BA:40:3D:00:86:DC:D5:0F:E8:46:8E:02:0D:8C
X509v3 Authority Key Identifier:
keyid:5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2e:8f:73:ee:21:18:f8:89:ca:a9:41:30:4c:a4:03:f4:b0:
67:d8:52:30:03:09:ef:98:20:36:8b:55:24:25:f1:1d:5d:6e:
b1:53:79:69:db:7f:e7:23:b5:5b:c6:0b:45:0e:1c:ae:30:42:
31:2b:9b:a4:29:63:b9:82:79:f2:c6:85:17:4e:0d:05:e6:0d:
87:df:aa:d8:b2:85:e8:6e:1e:f9:27:f9:9b:4c:1b:1d:b1:96:
bf:87:bf:51:d8:87:e4:31:24:d9:c6:ac:4f:62:40:47:58:61:
5e:82:ed:00:a0:c7:84:56:82:74:a9:f3:9c:03:89:8a:72:e4:
f5:c9:c6:d5:ee:48:9f:40:67:98:39:ec:36:7b:d0:58:ae:02:
2a:a2:e5:28:8b:f2:97:60:72:8a:88:8b:79:0b:4b:9c:2f:04:
af:12:88:5c:f1:0e:2f:18:e9:a4:f2:6e:83:20:25:74:70:10:
70:15:28:9f:eb:3c:42:a1:aa:f4:45:a5:d6:55:09:17:e5:07:
78:f6:2f:2d:f4:23:40:9f:3d:33:ce:1b:83:99:eb:aa:29:7d:
3b:29:50:61:60:76:39:5a:39:39:53:5a:b9:8f:94:08:34:9e:
9a:ba:ad:a2:40:83:ec:78:44:4a:5f:e2:c2:c1:ec:f3:f3:47:
83:15:e1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:04:33 2026 by rpki-client