Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
File: 500-XZlL7NPyWMQd858fY-xWPh0.mft (raw, json)
Hash identifier: /uh5EGuL/Si1Rj3QjFTYf0Bx5qyBshVJSvxtBWELGp8=
Subject key identifier: 9B:52:A0:E6:DA:68:9A:83:AE:0E:48:8C:F8:A3:B7:0E:C5:3E:9E:E1
Authority key identifier: E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
Certificate issuer: /CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Certificate serial: 019FAAF58A6D727CFDBE3848A9DF2CD49F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
Manifest number: 137E
Signing time: Tue 28 Jul 2026 23:00:46 +0000
Manifest this update: Tue 28 Jul 2026 23:00:46 +0000
Manifest next update: Wed 29 Jul 2026 23:00:46 +0000
Files and hashes: 1: 500-XZlL7NPyWMQd858fY-xWPh0.crl (hash: QxYgec5E8oZ5CuDY8KTrdEd8s1YCL3Qq/DicmRygG6E=)
2: xJQkEE-myuee2xusX84h4jOXGkk.roa (hash: bgfimRITzgygmGvHr8W4DzraqoP9/oX3mukFAiSIHn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:8a:6d:72:7c:fd:be:38:48:a9:df:2c:d4:9f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Validity
Not Before: Jul 28 23:00:46 2026 GMT
Not After : Jul 29 23:00:46 2026 GMT
Subject: CN=9b52a0e6da689a83ae0e488cf8a3b70ec53e9ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:9e:2a:78:85:27:fc:88:d2:9f:34:67:ce:
34:43:fd:37:c3:ea:45:0a:eb:7e:43:55:60:be:5e:
d4:5b:0a:3c:aa:8d:dc:c5:15:8c:c0:cb:06:47:80:
f6:40:f1:d7:a1:87:80:28:f2:2b:d7:af:32:a4:b0:
88:2c:f4:58:b9:e8:d6:1e:2e:e3:1f:60:9b:3f:39:
c7:4f:fa:17:b3:1c:16:aa:e0:22:b0:b6:cc:f6:55:
cf:b5:14:11:c5:28:39:3c:85:c7:f1:ae:ff:43:07:
a5:06:4e:c2:30:bd:39:07:5f:29:7d:2f:b6:45:c5:
d3:13:05:a6:37:4a:62:59:60:fd:65:b2:5d:66:64:
4d:c5:fd:28:fb:63:cd:f7:0b:a9:64:14:c3:a6:22:
5b:03:b9:05:d0:5d:6b:6b:b1:0d:a2:4a:fa:34:75:
f8:60:f0:62:1c:75:61:f2:fe:3e:48:fe:3c:d4:be:
c1:8a:26:2a:fa:8d:78:b7:9c:07:41:24:74:77:47:
10:d4:67:24:87:8e:d2:11:6f:af:44:6a:cc:63:2b:
28:d3:f4:46:40:a5:20:ec:22:a5:ac:d7:1b:c1:6e:
07:63:89:d5:91:de:94:34:eb:41:e8:a7:f1:82:87:
fb:95:2a:36:b0:4a:b1:e5:92:2c:81:97:af:06:82:
93:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:52:A0:E6:DA:68:9A:83:AE:0E:48:8C:F8:A3:B7:0E:C5:3E:9E:E1
X509v3 Authority Key Identifier:
keyid:E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:39:de:eb:c6:be:fa:be:da:9c:01:74:78:15:04:7c:7f:a0:
cc:37:ca:c0:42:4d:43:eb:df:fd:ae:11:a8:f3:8c:98:33:b7:
66:6f:80:0b:36:5c:b7:e2:5a:8c:7c:09:d5:78:81:43:b5:d4:
72:7e:84:e2:2b:37:b1:ae:d5:2e:db:80:f9:69:32:9f:14:25:
d5:a6:d7:c5:c6:2b:f6:1b:3f:67:cc:c8:2f:db:f4:d7:dd:f4:
e3:6f:ee:bc:08:c9:46:0e:6a:d6:0e:fb:2d:20:b7:67:8a:65:
38:3e:21:86:b6:3b:19:69:35:c8:65:c6:84:f8:e3:b4:c2:e4:
9a:7d:a6:eb:12:38:eb:f6:5e:d1:56:bb:d5:72:9b:50:93:11:
9f:f0:01:0d:d4:b6:7d:72:5e:6f:ba:83:ad:c1:17:db:8f:eb:
41:5d:4e:53:31:f0:66:ff:87:42:53:28:8d:af:8f:9b:15:16:
4b:cb:93:d8:ad:a6:ba:75:f8:dc:c8:04:a9:43:fe:28:93:40:
71:95:15:17:8e:4b:2a:d8:88:ee:41:df:1e:89:a2:28:83:c7:
fa:57:af:86:3b:2e:c5:cc:24:cf:84:6c:77:d5:79:91:c8:70:
04:fd:f2:11:c9:40:55:32:19:47:b9:8b:2c:e1:f7:33:aa:f2:
1a:cc:65:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:08:06 2026 by rpki-client