Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: B1BA/zPc3VjnHeKXWartB7HjLHPA8Du22WpewL8tGuY=
Subject key identifier: 6A:97:D0:97:2F:49:82:04:94:8B:57:65:8E:71:AB:6D:A1:17:34:83
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 019FAC08D24758B51651BD6ACD56799C44AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 19DD
Signing time: Wed 29 Jul 2026 04:01:26 +0000
Manifest this update: Wed 29 Jul 2026 04:01:26 +0000
Manifest next update: Thu 30 Jul 2026 04:01:26 +0000
Files and hashes: 1: L40pPH6TicBG2s3pYm_kCH0QuH8.roa (hash: T9wzscjITMGr1trkfg1j7FXPyni8Fc+OiviUYZ5c/0E=)
2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: q8caYjzqC18WVVh2Us8H7fFhNXIG7nzZUo2Z8wo4fr4=)
3: swnpl4td9eb6_J81u2GZTHQvUnM.roa (hash: OzZo/a2puN3YVDYWaueHcqlnkjv3aKzrJf+DmBTG+js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:d2:47:58:b5:16:51:bd:6a:cd:56:79:9c:44:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Jul 29 04:01:26 2026 GMT
Not After : Jul 30 04:01:26 2026 GMT
Subject: CN=6a97d0972f498204948b57658e71ab6da1173483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:1a:20:27:01:c9:e7:e8:82:51:ab:7a:ef:
8e:20:f8:c0:ce:9b:c6:48:53:7e:47:11:1b:61:11:
af:4c:0d:01:21:2e:ad:7c:6a:d3:d6:c8:5b:30:46:
fc:9b:f6:e5:c4:f2:f9:a2:55:0a:28:55:a5:ea:a7:
9c:71:bd:4e:e6:0b:c6:15:c2:54:88:75:70:ac:2e:
05:b3:85:01:fc:47:3d:75:39:e2:52:29:66:79:76:
f1:ef:50:ce:ec:46:f4:6e:8e:9b:15:65:9c:05:1c:
28:39:c5:c6:12:8c:c0:c9:a3:76:86:52:e5:9c:c1:
a0:d2:ff:ac:b0:4b:b8:86:71:af:16:e4:f9:cc:84:
a5:6f:dd:71:47:f3:e3:5b:55:8a:e4:c3:ea:f8:98:
25:76:dd:46:c8:c5:42:0d:b4:fb:15:06:5f:17:5e:
f0:d9:d0:d7:47:23:62:bb:e5:68:e0:10:62:12:cb:
82:3d:30:1e:a7:80:25:39:53:82:eb:c3:93:ad:1e:
96:33:f4:86:59:b6:2b:68:3a:56:11:7f:c5:a1:c4:
1b:3d:0f:4a:d9:78:91:5f:7f:bb:04:c2:4e:92:20:
14:c5:1f:a6:7e:6e:14:07:98:7f:38:6d:3f:3d:45:
28:df:ae:09:ea:c2:aa:ac:47:33:38:88:ca:3f:0c:
e2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:97:D0:97:2F:49:82:04:94:8B:57:65:8E:71:AB:6D:A1:17:34:83
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:94:4e:b9:a9:1a:83:33:8c:02:cb:d2:e8:b4:2b:12:c7:0c:
93:e3:d5:5f:ce:ea:75:e3:f6:2b:cc:96:2b:aa:39:2b:db:f0:
86:fb:90:f6:ba:8a:4b:39:ed:f5:cc:1e:b3:22:88:72:7c:9b:
86:46:40:94:78:ff:12:d9:ff:68:c2:cc:37:16:eb:d0:c9:6c:
93:82:44:4e:cd:ef:97:2f:a1:d2:36:06:bb:90:66:0f:02:dc:
ac:e7:89:d7:65:81:c7:2a:51:79:a9:15:7d:55:b5:b8:51:5a:
0a:88:7c:2d:a5:b7:48:f4:3f:4a:17:07:95:7f:6a:e4:9e:e3:
c7:ae:3e:f2:69:93:5e:2b:8b:47:a1:38:ea:bd:63:79:78:6c:
49:12:e6:98:7a:0d:49:cd:5a:35:fe:0e:3c:9b:98:f9:ab:2e:
8e:b4:63:78:43:32:40:29:05:45:b8:e4:84:eb:d1:58:ca:71:
9c:89:b2:d1:98:cb:bd:8c:8d:e9:19:ac:49:8c:aa:dc:f6:64:
b1:d4:43:0a:45:f1:4c:23:54:a4:22:3d:57:10:3d:75:f0:3a:
80:76:0e:0a:bc:80:25:41:44:63:0c:15:10:6f:8d:93:eb:ff:
3c:78:94:59:c4:c8:bf:de:f7:ae:1e:1f:2f:98:53:57:9f:9a:
8d:05:35:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:26:07 2026 by rpki-client