Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
File: XSP6gsR1KG22BxT2A2Gg8crCPSM.mft (raw, json)
Hash identifier: wc4GWyORi8C580wbOrIO63mb02WGMKL2I/Err0obpBo=
Subject key identifier: DC:A3:17:FC:BC:2E:60:DE:96:E8:A5:74:0D:69:8E:87:98:CB:C3:AA
Authority key identifier: 5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
Certificate issuer: /CN=5d23fa82c475286db60714f60361a0f1cac23d23
Certificate serial: 019FAA50D5F562EC2A43EE9804F13F2481B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
Manifest number: 017C
Signing time: Tue 28 Jul 2026 20:00:52 +0000
Manifest this update: Tue 28 Jul 2026 20:00:52 +0000
Manifest next update: Wed 29 Jul 2026 20:00:52 +0000
Files and hashes: 1: PSyjanuhqC4f8PoeId-FNS3SNIo.roa (hash: vXnguE1OuAVVzynxYiMUKXKD0YQ4Gbcmn/CdRYPzOQI=)
2: VcYSbieanIHo6vXwXzt_eynZ2hg.roa (hash: tT7q391ckh97qErQP/wSxRxUIvkJpwWEWY/156fqwXo=)
3: XSP6gsR1KG22BxT2A2Gg8crCPSM.crl (hash: J+2TElnpOj+/5o/cAprGYrLtBuCCqLnypxHO08+QzEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:d5:f5:62:ec:2a:43:ee:98:04:f1:3f:24:81:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d23fa82c475286db60714f60361a0f1cac23d23
Validity
Not Before: Jul 28 20:00:52 2026 GMT
Not After : Jul 29 20:00:52 2026 GMT
Subject: CN=dca317fcbc2e60de96e8a5740d698e8798cbc3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:3b:10:c5:d6:df:c9:ac:88:5e:bf:72:d0:
15:18:27:8f:41:a5:4b:2f:9b:88:62:ee:d3:d8:b1:
3e:82:54:3e:c4:af:ae:1b:3c:cd:2c:26:a3:2d:f2:
5e:95:42:9d:0b:fe:4f:8e:cb:41:a1:64:8f:8a:e6:
c7:7c:62:f6:11:b8:0a:77:91:72:b1:3e:a7:4e:8a:
e9:c2:9b:f1:17:ee:6b:d7:0f:0c:fa:1c:c9:5a:00:
b3:fe:1f:3b:ac:17:cf:5c:aa:e5:3a:90:2f:77:e3:
74:61:36:0b:e0:ed:6a:b6:29:cc:6b:bc:09:1e:ca:
b3:89:78:c4:33:41:9a:48:13:ae:63:94:7e:31:29:
65:4a:2d:3c:cb:1a:67:c3:0d:d6:2b:87:33:50:ec:
64:13:07:4c:6d:f7:33:c5:c8:c1:83:e2:ec:04:13:
f6:fd:62:68:e6:d3:8b:7a:af:65:c0:cb:ca:f8:d4:
53:d5:bd:ed:85:de:e1:3c:c6:ca:36:25:47:22:18:
2a:9f:f1:58:0c:6b:02:1f:54:62:aa:10:9f:c6:91:
6b:c0:86:db:8a:ac:e0:00:8c:f5:33:b6:e2:2c:05:
4b:5e:16:85:b9:09:b9:5d:8f:75:a1:d2:e9:31:cd:
ef:d0:74:ec:89:aa:1e:13:78:52:05:fa:f0:3f:ff:
b3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A3:17:FC:BC:2E:60:DE:96:E8:A5:74:0D:69:8E:87:98:CB:C3:AA
X509v3 Authority Key Identifier:
keyid:5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3e:bd:46:a2:3f:51:8a:97:c7:c9:6d:5f:58:a4:db:7b:4c:
f0:e4:22:44:b3:81:74:f8:55:18:96:01:6e:a6:d3:9d:cb:2c:
e3:b2:8a:98:ab:ca:e4:e1:36:af:24:8c:9a:1f:7a:5c:1a:cd:
2e:22:d1:52:38:ae:90:21:8e:da:cc:3e:42:df:77:c2:93:26:
96:af:79:76:db:a9:03:00:48:f6:e0:86:90:f8:11:d5:8e:41:
f2:29:48:76:b2:70:8a:94:ba:80:7c:0f:3d:87:78:a3:f5:03:
94:0b:69:0c:74:14:ac:ea:22:7c:0d:4c:9a:5b:09:47:4f:b8:
6e:9f:d9:a3:21:9a:1f:8f:16:b5:69:be:88:cf:90:f7:20:06:
d5:98:a6:d4:a8:bc:ff:07:68:97:a4:d6:e6:e3:64:1d:ea:26:
45:af:52:f5:34:6e:56:d7:94:04:57:89:7c:a2:17:0c:b1:a4:
4e:33:9b:5e:f8:4f:62:e7:3e:e0:c0:2e:0f:8c:fc:a7:94:3d:
ea:58:ec:6a:80:d6:33:56:b5:ab:7c:ed:d2:88:66:db:b8:02:
f8:db:4a:63:9d:99:a3:02:69:8f:d4:fd:4c:e7:5f:52:a6:48:
cb:45:a9:dd:ed:c7:0e:8a:00:24:3f:96:bb:3b:bc:60:20:bf:
df:aa:3b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:16 2026 by rpki-client