Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
File: XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft (raw, json)
Hash identifier: ce5rdk5CMp6R8tPodjXZzqH7Yfm6Lf1PWrWFAnsaHdk=
Subject key identifier: 85:20:70:DF:8C:BE:F6:46:BC:2C:05:EC:60:37:8E:65:A9:BF:0D:0E
Authority key identifier: 5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
Certificate issuer: /CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Certificate serial: 019FA9079F712202A1C7344425D8EA872CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 14:01:16 +0000
Manifest this update: Tue 28 Jul 2026 14:01:16 +0000
Manifest next update: Wed 29 Jul 2026 14:01:16 +0000
Files and hashes: 1: XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl (hash: w89Vs2pp/v8QYJjBr+/1DkSKL99YQ3jy+/6gBbeC6Js=)
2: dtDYTTev40_KP4gDD8l2B4FoWRU.roa (hash: KG4iIFsSaxHV4OzMuERalzQ2ir8/nTV6jkLr4CLycfo=)
3: lldCsQ1hgTCDcrFWBWU0S5eC1nE.roa (hash: PQn0MUfrufkEibOpWiDwl2hJpMI+Yw+jzN0Z4rlm5DI=)
4: whybmoJ3UH-tZcQj28IxhxnuNWU.roa (hash: XoXTuKuWN/G+ZqFwydqG+jUtoRxuSHXL1j3ltwwohOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:9f:71:22:02:a1:c7:34:44:25:d8:ea:87:2c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Validity
Not Before: Jul 28 14:01:16 2026 GMT
Not After : Jul 29 14:01:16 2026 GMT
Subject: CN=852070df8cbef646bc2c05ec60378e65a9bf0d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:58:e1:7d:39:a9:e3:c8:cc:72:9e:cb:a5:e1:
c2:78:d4:3f:d7:77:7c:a1:46:29:f9:51:fb:58:26:
88:b0:40:ff:2d:24:15:a2:6f:bf:76:12:e4:6f:23:
50:27:ef:9e:25:48:2d:fa:d9:90:ed:1a:be:c6:3c:
14:96:bc:36:da:68:cc:34:be:50:fb:e0:3a:99:b3:
65:b0:51:f2:40:93:8f:c9:a4:d5:f9:d3:70:5f:b0:
d4:60:9c:12:11:6e:89:a0:89:2e:71:8a:0b:89:ab:
2d:4d:7a:9c:75:de:63:17:6a:a6:8b:97:ae:36:ed:
d4:8d:56:ea:2e:5d:71:43:08:c9:9b:5f:94:4e:f3:
07:71:a5:1a:e4:2f:f9:e5:4f:61:57:2c:91:6b:5b:
2f:dd:68:0f:c4:81:5e:18:a6:25:d3:57:6b:9b:9e:
7a:36:79:b5:94:68:de:b8:5a:fb:96:43:bf:d2:6e:
95:a8:e2:d4:af:c7:37:9b:4e:a5:aa:1b:68:5e:53:
cd:ec:74:83:dc:fd:84:11:f6:31:3a:57:b6:e9:c8:
90:93:6c:3b:6f:ee:28:bf:4f:7b:7e:63:ee:51:e8:
db:c7:a3:e8:d2:4c:d2:09:7f:0b:2f:a2:db:83:54:
6f:aa:1b:02:9a:d6:31:70:10:1b:47:a6:0f:ea:f4:
e1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:20:70:DF:8C:BE:F6:46:BC:2C:05:EC:60:37:8E:65:A9:BF:0D:0E
X509v3 Authority Key Identifier:
keyid:5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:35:cf:ae:cc:4c:76:36:3e:74:fd:b7:dc:bf:ff:f5:7d:88:
50:7f:63:d0:7e:9e:a8:b8:8d:09:7a:21:e4:1c:81:54:c0:bd:
63:39:96:d5:41:e1:5c:c1:2c:bf:cf:c4:6a:93:ec:f5:6a:17:
d4:8c:10:8f:ca:40:60:5c:79:ac:2b:70:a4:49:1b:f7:d3:76:
a6:ec:4c:fc:74:98:55:0a:e7:c2:42:b0:47:eb:81:42:2d:5e:
40:50:9c:4e:11:d6:97:a2:f2:e8:20:0c:70:0f:1c:3a:87:a7:
e2:2c:25:90:e7:35:82:9d:65:48:65:2b:02:7d:ec:5c:69:bf:
e3:ca:f8:8a:e5:01:ea:5a:b8:f3:d8:97:51:64:67:19:70:3a:
0f:0a:0c:4b:c8:39:74:25:5b:0e:20:2c:12:ff:2a:89:24:c3:
6b:c4:d7:8f:3d:64:c0:50:62:ce:65:22:8f:33:d9:28:0b:9b:
65:70:83:a4:90:fc:81:c9:03:17:21:86:01:3b:43:1c:b4:ec:
56:a1:d7:29:d1:85:54:d5:c3:a0:76:98:b5:a5:15:7c:19:48:
54:fe:65:29:14:c8:39:6d:08:fd:8e:97:d9:20:87:d1:9e:d4:
f2:c3:4d:2b:4b:e8:ab:e8:55:df:46:2f:69:ca:0f:db:dd:e9:
35:4f:30:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:56:08 2026 by rpki-client