Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File: x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier: doSVXBzKuuOrOmQC6fJXdkmNHSXdkZtqkxXqy/Q5Yj0=
Subject key identifier: C1:6A:F8:DB:7E:8A:F5:9E:98:8B:C9:2F:F7:4A:53:B0:22:71:46:0D
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 019FAC3ED04AF65C34D6819730979F1432CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number: 161D
Signing time: Wed 29 Jul 2026 05:00:25 +0000
Manifest this update: Wed 29 Jul 2026 05:00:25 +0000
Manifest next update: Thu 30 Jul 2026 05:00:25 +0000
Files and hashes: 1: VVO2x6L7LFTZsVY_zaZrcjz-CLU.roa (hash: mrQRCF7HAxobAPy4OykpZkTQroOOHVdF+aZo6ajUous=)
2: XSKluvUTTgVd2egTpJ08l-exvKw.roa (hash: k4WvTC/++ULE/2LzyeolM06KPsDEfc4ZDC8+guSUNtQ=)
3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: BgvPl+6Uxc+x63NrttZ0vuVL5dxNUAZu4F7xxdjxstQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:d0:4a:f6:5c:34:d6:81:97:30:97:9f:14:32:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Jul 29 05:00:25 2026 GMT
Not After : Jul 30 05:00:25 2026 GMT
Subject: CN=c16af8db7e8af59e988bc92ff74a53b02271460d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:22:c2:89:88:e0:f1:b6:9e:f7:2a:8c:6d:
98:c7:9d:cd:44:e6:2b:32:ea:6b:2e:be:57:23:47:
67:82:e0:e4:e7:c4:f4:00:d2:cb:a3:f3:d9:d4:90:
ed:47:5c:d6:b8:89:93:35:d7:2b:c9:a2:84:b8:4e:
0b:09:88:0c:0e:9c:c3:52:74:68:25:48:0b:90:0c:
03:ed:3b:53:ee:81:cd:89:61:70:5d:d0:f8:48:0a:
a8:75:51:dc:ca:37:6c:2e:38:83:79:2e:ea:24:bb:
1f:95:a9:42:2f:75:0d:7e:42:70:92:b3:c8:fa:35:
7f:f9:04:b1:e4:e3:5b:5a:91:64:fb:16:c6:c2:e1:
b3:8a:6c:6d:01:13:7c:c3:03:c5:c7:c1:66:62:91:
e2:0b:c9:08:3b:99:84:f5:76:b4:bd:4a:ad:73:d7:
2d:11:9b:e2:13:c9:20:f8:57:5c:9b:cc:8f:b5:67:
91:80:3b:29:98:6d:d6:76:28:b5:ce:8f:04:3e:e4:
4b:49:51:62:09:0a:e6:16:d0:6b:31:25:61:80:a4:
03:f6:82:73:c2:4d:99:5f:b3:84:88:9e:ac:08:b4:
d5:55:86:40:1e:ec:25:7c:a0:b7:dc:7d:87:fc:27:
04:7c:88:8d:59:26:d4:9e:43:81:f8:5a:0a:c2:c4:
7d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6A:F8:DB:7E:8A:F5:9E:98:8B:C9:2F:F7:4A:53:B0:22:71:46:0D
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:b6:0d:09:b4:fe:a8:91:bc:ec:ad:bb:8a:e4:3b:f2:4e:12:
72:43:ed:6f:cb:65:fc:43:4e:87:c9:72:fc:0f:fd:f5:b6:3b:
d5:dd:25:28:c1:f1:10:0e:d8:b0:67:74:88:86:a6:d9:de:80:
be:c6:80:6f:9d:45:67:b4:48:09:25:ef:90:83:73:94:c3:54:
27:b3:16:3a:71:d9:10:71:ad:1c:9e:05:6b:e7:b8:0d:44:c7:
56:63:54:a7:c7:e8:68:66:b6:2e:86:45:88:7c:48:a2:84:42:
68:5c:6a:d4:4b:e5:5c:65:3f:b4:9e:a7:97:d7:34:ef:4b:81:
7d:47:3f:9f:f4:32:54:64:08:76:cd:4b:0a:48:31:08:2b:cb:
ba:e3:c8:83:20:2f:a0:48:60:bc:76:a0:2f:77:38:9a:24:8e:
a5:55:d0:5b:1d:1a:e5:cd:2c:c4:27:bd:8e:38:b8:4e:92:4a:
d9:03:13:be:d3:5a:c3:7f:7f:74:3a:8a:39:68:8e:03:e6:d8:
db:7e:69:b1:90:9b:33:80:d4:08:19:e9:94:ba:30:a5:89:4a:
e5:09:26:a8:b5:4b:e7:89:e5:e0:81:4b:03:22:95:d3:27:14:
03:31:b8:13:a1:fd:91:72:ab:a7:24:2c:d7:9b:15:76:fe:f2:
25:7b:98:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:10:27 2026 by rpki-client