Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
File: XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json)
Hash identifier: kyAYztzoGld7z6rv37/WyVfmYv2b11Jhay0HR4CesAw=
Subject key identifier: B4:71:B4:13:D7:10:0A:02:80:1C:A6:35:C7:83:77:C3:D3:DE:D0:07
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial: 019FABD0F5EAD7219337102F9B8907F48AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
Manifest number: 18C5
Signing time: Wed 29 Jul 2026 03:00:26 +0000
Manifest this update: Wed 29 Jul 2026 03:00:26 +0000
Manifest next update: Thu 30 Jul 2026 03:00:26 +0000
Files and hashes: 1: Oanj9HZBO6pjmAia4pctaEcwILk.roa (hash: XGqLRhTKxqFHvcnOJ1VVsX5xFgoIImSw0HHatVrIKYA=)
2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: 6+mHov1Ag9AQjUZFpqtTn6W65xwRL9LHx4sZ0CY7U9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:f5:ea:d7:21:93:37:10:2f:9b:89:07:f4:8a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Validity
Not Before: Jul 29 03:00:26 2026 GMT
Not After : Jul 30 03:00:26 2026 GMT
Subject: CN=b471b413d7100a02801ca635c78377c3d3ded007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:e6:eb:b4:90:63:0f:d2:e1:c5:4d:95:4d:
2f:a2:93:b2:75:3f:df:e2:3f:9b:46:ad:0f:1d:bf:
01:da:c4:d5:e3:19:6b:40:d8:be:04:59:84:7a:05:
3a:3a:67:8d:90:53:77:99:6c:fe:94:9e:92:f5:0a:
f4:28:bb:9d:b4:76:3e:a7:60:38:a7:98:e3:3c:aa:
d3:42:d7:e6:f9:2d:d8:0b:a7:67:27:00:d9:a1:ba:
60:ed:9f:a1:f3:f0:a7:25:40:b9:ad:90:a2:de:d2:
f2:a1:6b:28:1b:3a:e4:54:ca:54:2c:bf:87:da:c8:
95:28:e7:b3:db:b2:c3:3a:52:d0:81:41:18:2c:3f:
df:55:95:1f:37:fe:b8:94:29:d5:cc:9e:c4:a3:0a:
d4:19:cb:4a:00:50:d4:4c:2e:f7:02:fe:9d:a1:55:
20:61:5f:00:c1:63:a1:67:5f:56:27:ba:e7:fc:96:
a7:b7:0f:43:68:4e:ee:ae:34:99:88:fb:10:70:d5:
1c:26:dd:45:81:04:bc:9a:73:4e:da:d5:bb:0b:7a:
46:c4:45:3f:37:e5:86:a9:21:9f:41:8d:b0:b1:45:
37:ad:09:59:49:1d:02:4d:25:ee:b2:d6:75:76:c9:
45:7f:05:13:1e:81:fd:12:9a:0a:14:51:bb:b9:4e:
fe:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:71:B4:13:D7:10:0A:02:80:1C:A6:35:C7:83:77:C3:D3:DE:D0:07
X509v3 Authority Key Identifier:
keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e5:89:94:f2:91:94:bf:4b:4e:03:b7:83:73:c4:75:9a:1c:
3b:75:fd:31:da:2a:b3:ce:b1:f5:76:af:ce:4c:51:79:c3:2b:
7a:f3:8b:54:af:f6:c4:a4:fb:00:21:cd:14:ed:93:2c:d0:f5:
5e:13:20:46:6a:e6:55:1b:df:87:6f:4c:00:a8:2c:a2:b7:ae:
3f:55:73:5c:02:27:34:84:92:1b:bb:37:9d:14:5e:3b:3a:b9:
8a:9a:aa:66:52:80:0e:06:15:c2:2a:e5:20:11:61:0c:1a:39:
9b:72:da:07:ec:11:31:69:0a:2c:45:5f:c6:ce:9f:d2:80:82:
02:a0:0e:b4:52:11:49:24:f6:13:b5:da:8e:54:e9:ca:0a:6c:
86:56:9b:29:28:64:84:c2:d3:8d:4c:98:1e:61:9d:73:78:d1:
97:4f:07:5a:99:ee:39:ed:5b:78:f6:0c:0e:b2:b5:d0:e8:f5:
40:61:df:53:73:ca:f2:20:3d:a2:1d:17:2b:c2:7d:85:17:d9:
13:12:46:7e:33:c7:bb:02:66:11:00:ef:49:08:fb:78:7d:9f:
22:24:0e:f4:10:fc:33:ea:43:2e:2d:c9:22:7f:8b:33:7d:7f:
5d:6a:77:a1:14:8a:83:f8:3b:1a:df:c6:2c:53:51:bb:cd:0f:
69:e2:72:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:45:58 2026 by rpki-client