Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
File: XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json)
Hash identifier: V803aaaMlgg0wgO8sjjaiyDKMygIQxCgh997+If2xNQ=
Subject key identifier: 52:99:B2:71:00:06:8E:1F:5B:17:C3:9F:E4:06:B7:98:83:FD:D5:59
Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
Certificate issuer: /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Certificate serial: 019FACE3D8E2DA810C9223AE34D10E4729CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
Manifest number: 1000
Signing time: Wed 29 Jul 2026 08:00:40 +0000
Manifest this update: Wed 29 Jul 2026 08:00:40 +0000
Manifest next update: Thu 30 Jul 2026 08:00:40 +0000
Files and hashes: 1: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: LUZLQy2tBBArROJP1gH+3vz/CPWMbHcr+nLZ0mCWRos=)
2: z7DQCTMfSpxYNEqc8NdY7ztXAQY.roa (hash: 0f3C1JOESj8A6E71R4wmJYEbq8aExFFVXotwYdP1hio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:d8:e2:da:81:0c:92:23:ae:34:d1:0e:47:29:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Validity
Not Before: Jul 29 08:00:40 2026 GMT
Not After : Jul 30 08:00:40 2026 GMT
Subject: CN=5299b27100068e1f5b17c39fe406b79883fdd559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:b0:33:16:e4:07:5d:0f:0e:02:55:b9:41:
09:f5:ff:04:18:95:e2:6e:52:bb:7c:fa:db:92:4c:
62:aa:a4:d6:79:dd:c2:1f:3f:86:e5:6f:ab:0d:a0:
0c:cb:69:33:4b:46:aa:42:3e:dc:87:34:f8:67:fe:
eb:ec:a6:2d:c1:72:3a:4a:11:81:4c:1f:aa:64:95:
0d:68:e5:63:76:a2:90:d2:14:7e:0a:00:29:c5:43:
87:55:14:e2:f3:47:2f:f2:6a:9b:2e:f1:de:02:44:
8e:6c:95:04:94:fe:c7:f5:8e:1d:ca:40:2e:e3:f4:
c6:ee:04:10:ac:de:f6:26:2f:a3:2d:21:0b:82:62:
33:db:fc:78:70:eb:b5:12:44:1a:d6:b7:6c:16:b1:
8a:c2:ea:4b:a4:4e:86:a7:c3:85:73:82:a2:34:72:
7d:8d:89:a5:fd:a8:6e:ef:2b:cb:80:f3:fa:f4:9c:
73:ee:57:51:ac:89:84:9b:bc:8e:04:da:b5:d0:0e:
36:ce:94:72:d3:62:f1:84:d7:58:d3:5c:90:9b:07:
3e:9c:c9:4f:26:5e:3f:1d:20:cb:3f:a7:75:74:2e:
64:eb:98:0b:24:1e:22:22:64:b5:4e:21:2d:38:b1:
bc:b3:e5:af:42:8d:c1:e2:b7:9e:fd:89:63:55:2d:
27:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:99:B2:71:00:06:8E:1F:5B:17:C3:9F:E4:06:B7:98:83:FD:D5:59
X509v3 Authority Key Identifier:
keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:87:e0:21:2d:af:cb:3c:1d:5c:79:69:7f:db:ce:d9:4f:a4:
48:ef:b7:b0:04:dd:6a:82:51:cd:bd:b9:fe:90:70:04:07:79:
1a:6b:22:22:50:56:b3:51:67:47:95:da:bf:27:14:53:24:48:
b7:f3:6f:b3:02:d6:35:66:5c:15:47:d4:5e:6c:7d:0c:4b:84:
5b:ae:13:d2:1a:56:94:81:34:3f:52:71:87:5e:70:56:22:6e:
21:a2:72:c8:fd:4c:d4:5a:73:d3:94:b9:5d:8d:2e:ef:2a:ed:
31:74:e6:52:cf:98:44:68:84:fd:9a:be:fd:44:1c:80:9b:74:
6f:61:96:6b:f8:48:1b:b4:27:5a:9d:0c:21:bb:35:59:02:ef:
68:71:bb:a3:f6:08:42:2d:a7:c2:95:19:67:c8:12:9c:e5:cb:
e0:49:d4:37:fa:9f:a8:75:02:94:43:7c:5f:49:44:18:6c:09:
6d:93:1f:21:6a:6e:b1:3c:81:aa:46:b7:d3:f1:f4:a0:a9:85:
cd:ca:5a:4a:31:8c:f3:fe:d4:49:cd:a8:34:7f:a0:f7:2f:a4:
c3:42:0c:41:68:dd:d1:ec:37:33:44:c7:9f:8c:6e:0a:ff:32:
7e:84:e8:f8:d6:2e:bf:d1:e4:2c:91:57:e6:d1:a5:52:63:7c:
74:6d:a7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:07:14 2026 by rpki-client