Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier: aIuJCh97YMK9Q0gSwWQM28cttdBydQsE2MWfHy8IDXI=
Subject key identifier: D2:65:A0:80:2D:02:64:9E:A8:F9:E9:6C:42:FF:49:E2:16:48:38:AF
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 019FAB9A2B3145266ACF215E088EB7A2D1F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number: 16E5
Signing time: Wed 29 Jul 2026 02:00:35 +0000
Manifest this update: Wed 29 Jul 2026 02:00:35 +0000
Manifest next update: Thu 30 Jul 2026 02:00:35 +0000
Files and hashes: 1: F7EvqKPuCJrRbauscLqXiKU0tSU.roa (hash: Rn1QP+hzXdWW26eL4q5uEtv+FD1RDx8ao69irkAES9U=)
2: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: UBpLAjxwoCh1c+XGk9o97dWw3q5IMJVbLj9jjkUk/qI=)
3: a7oKAtXpujbjcSp7xIWIBbpbuwo.roa (hash: uOToHNzKGxHUJP96PSZDBVfJ0h4D91Ag2KcuZFpXViQ=)
4: bklYzzrT2LyqE_eolbd4uJqpn88.roa (hash: hL8JImvIqT8exdBOwwwQRZtRNMgq3QcD8ZDf3TXxPgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:2b:31:45:26:6a:cf:21:5e:08:8e:b7:a2:d1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Jul 29 02:00:35 2026 GMT
Not After : Jul 30 02:00:35 2026 GMT
Subject: CN=d265a0802d02649ea8f9e96c42ff49e2164838af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dd:fb:24:0f:7b:cc:a8:4e:d0:ca:22:40:fa:
21:dd:e8:be:99:1e:42:33:06:9b:ee:09:08:74:74:
76:1e:c5:b2:8b:8a:6c:48:c0:7a:31:3e:88:49:42:
da:49:f4:a6:c4:40:f3:f9:12:01:9d:8d:2e:5a:af:
c8:0b:5f:ab:51:cc:7e:6c:65:a4:35:ef:87:0d:78:
0f:c7:2c:04:6d:8f:54:8d:1e:be:80:f1:59:d3:56:
e0:23:87:c7:0e:a6:0f:af:bf:53:ae:84:5f:52:cc:
4b:bf:a0:63:c1:d9:e1:24:1f:91:ac:77:78:1b:89:
86:93:f9:0f:ab:12:d8:a4:b5:ae:0b:0f:e8:63:b2:
6b:e4:22:29:84:96:ad:a9:40:60:21:01:cd:d8:51:
a9:6d:92:b8:b6:3a:b3:57:1d:2e:10:2b:7b:bb:81:
4c:66:14:ff:2f:32:59:e3:47:db:0c:47:e8:8d:82:
6c:6d:18:65:20:d2:cb:eb:5b:43:d5:76:e4:9c:d9:
f0:04:2c:11:e6:32:03:29:e5:80:69:44:08:ac:48:
58:39:da:2a:3d:13:1e:a4:9e:8b:77:a0:49:b8:3c:
85:d6:5d:41:a4:b0:c7:16:bc:fd:a0:03:64:4f:d1:
6f:8c:e8:58:41:00:4f:c1:86:e8:f4:e8:58:31:87:
d8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:65:A0:80:2D:02:64:9E:A8:F9:E9:6C:42:FF:49:E2:16:48:38:AF
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a8:ea:62:4e:f8:79:a9:b6:8d:00:fd:92:2f:2d:81:04:26:
46:f7:43:5c:11:4d:71:9c:25:9e:b3:b9:e5:ca:b0:ea:f0:d1:
90:ea:bf:be:70:6d:b0:d5:21:df:b8:55:a2:e3:70:53:69:8e:
4f:e9:05:85:d8:1f:f5:0d:62:8d:8a:8d:b1:49:2b:c3:f1:bd:
f8:7d:16:38:13:1e:98:ec:40:1d:de:09:d9:83:9b:53:2d:36:
bf:1b:c5:ac:bd:a9:d6:09:90:2b:89:40:af:9f:46:6c:c2:5e:
90:e4:1b:83:99:82:d5:2f:b5:0e:02:05:b6:00:4d:81:14:3a:
1d:4a:55:4a:1d:d1:d8:ac:d1:77:dc:9b:3d:72:2f:52:84:b6:
53:fe:3e:1b:af:43:d9:bb:3c:1e:2e:45:91:6f:b5:c2:11:ec:
a7:b6:0e:1c:dc:74:02:18:76:af:cd:ca:3d:72:a0:d2:c7:13:
f6:94:c5:71:41:f1:48:e3:79:76:50:a0:51:bd:71:79:36:17:
36:43:41:27:6e:0e:c3:58:56:f1:d8:05:36:eb:16:04:ac:1d:
cc:ed:9d:19:d5:11:5e:8a:43:5c:05:07:17:75:c4:7a:7e:d6:
53:2a:f9:5d:a4:4c:6b:5e:d9:61:bc:c5:5a:80:34:8a:f3:53:
87:02:ee:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:09:03 2026 by rpki-client