Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
File: XgSwLaV7ADebVhowISLnjl1Qick.mft (raw, json)
Hash identifier: DJG9ynY4KkRFC41g5YEfErUobm8JWRKE/bZKPvRzycY=
Subject key identifier: DC:FD:10:3D:DF:5C:59:A4:ED:F4:5C:13:43:99:97:24:E4:0E:B1:3A
Authority key identifier: 5E:04:B0:2D:A5:7B:00:37:9B:56:1A:30:21:22:E7:8E:5D:50:89:C9
Certificate issuer: /CN=5e04b02da57b00379b561a302122e78e5d5089c9
Certificate serial: 019FAC76F72DE1C6FAAEB4FB91833066022B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:45 +0000
Manifest this update: Wed 29 Jul 2026 06:01:45 +0000
Manifest next update: Thu 30 Jul 2026 06:01:45 +0000
Files and hashes: 1: Dj9kuZWr9tyLTs78iAEnZEz4gVs.roa (hash: NhBr92QCCO8QbowM/v9LvYLKA9Dujq44YfaPAibmCTM=)
2: TQ0wM6huTqh458ZZSQM0KI52teM.roa (hash: nBLiANju/5qfI/HxdXcGxBhrz2L2pBNw4FU6t8WZ4B4=)
3: XgSwLaV7ADebVhowISLnjl1Qick.crl (hash: /nXNJg/E5vp11dhHoTPjw1ziB+THAJsL7cVWuB4fnPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:f7:2d:e1:c6:fa:ae:b4:fb:91:83:30:66:02:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e04b02da57b00379b561a302122e78e5d5089c9
Validity
Not Before: Jul 29 06:01:45 2026 GMT
Not After : Jul 30 06:01:45 2026 GMT
Subject: CN=dcfd103ddf5c59a4edf45c1343999724e40eb13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:d6:80:16:c9:b5:74:31:44:6f:f7:24:28:
aa:2b:44:58:c6:d3:0c:d8:32:4e:7e:95:fa:de:6a:
84:00:bc:80:48:7c:71:70:5e:16:5e:07:70:76:58:
3c:0c:af:a2:c6:43:40:06:6d:8d:43:80:3d:c0:45:
f6:06:c4:b2:d9:46:d1:d5:9a:3c:4a:09:97:33:5a:
0c:86:57:e6:0e:76:80:bc:49:87:a6:b5:56:47:d1:
25:18:36:0c:03:21:dc:e0:3e:d1:ea:58:45:59:fb:
78:70:bb:89:e4:dc:18:37:3a:b8:cf:7b:15:f2:37:
be:aa:50:2a:af:2e:96:e9:10:92:26:5f:91:e8:c2:
20:c6:0e:2b:38:91:1c:62:54:9e:72:3f:e6:3c:95:
95:f8:7e:e9:82:3f:2d:6a:bc:db:21:34:9d:c2:98:
4e:eb:b7:5c:f2:41:aa:1d:8f:04:59:05:1f:50:2a:
7f:84:57:40:52:9b:f9:1f:01:3e:7e:7f:98:49:84:
17:ba:32:e0:e6:2d:19:98:41:41:7c:42:54:31:0b:
ab:cc:c1:6d:aa:94:ff:4c:dd:46:56:ef:90:bf:30:
b3:8d:b5:09:e5:72:ba:8a:12:20:cb:1b:50:e7:41:
ca:bb:85:2b:2c:e2:0b:33:32:d6:cc:7e:25:9e:ff:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FD:10:3D:DF:5C:59:A4:ED:F4:5C:13:43:99:97:24:E4:0E:B1:3A
X509v3 Authority Key Identifier:
keyid:5E:04:B0:2D:A5:7B:00:37:9B:56:1A:30:21:22:E7:8E:5D:50:89:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:30:c3:5b:b0:6b:9a:00:2f:ed:60:45:ec:99:c2:9c:e3:26:
85:00:9a:42:30:b1:a3:da:11:04:d3:fb:42:d5:46:e0:df:da:
3a:ae:1c:e5:85:04:a7:33:34:6f:ea:65:41:fa:53:41:d9:7d:
c1:aa:32:b9:f6:5c:fd:03:7f:b4:cf:43:48:f3:1a:6b:fc:c2:
52:c9:e4:73:d0:96:2f:5b:df:66:f1:0e:4c:c1:3c:e2:18:56:
57:e1:4d:05:e3:ed:6a:1e:4e:80:55:1f:b4:af:51:d1:d1:b0:
fd:4f:df:ba:42:df:d6:7d:63:d1:3e:90:27:d9:9e:cd:c5:30:
28:66:ed:56:cf:78:24:2a:28:12:57:1e:b8:a8:41:51:16:85:
55:65:da:9a:bf:3c:3e:5a:9f:51:f5:b9:ed:9b:d2:b6:a9:54:
9f:c6:8e:7f:c1:85:48:12:28:3b:8d:d2:45:96:fe:8c:89:db:
c3:86:94:84:d1:8d:73:29:29:5d:4b:2b:91:d9:ff:43:28:62:
0a:9a:4f:20:df:0c:c4:ce:ad:db:39:b8:ec:aa:96:c2:bf:d6:
5f:20:d0:04:05:f3:22:55:b9:00:82:d8:24:8d:cf:b8:bc:63:
db:86:b3:25:f1:44:83:d0:39:49:31:da:98:79:68:2d:6a:a9:
00:78:8d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:56:37 2026 by rpki-client