Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: qW3gGP3rl/kqvQF2laivsaNqpyKbEQNkXkcOahUR188=
Subject key identifier: 9A:BC:C5:2D:BB:26:38:26:CE:65:9B:5D:B5:5A:FC:07:4E:F3:15:63
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 019FA8D032E6F6C06FE6652418EA26A524F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 0D69
Signing time: Tue 28 Jul 2026 13:00:44 +0000
Manifest this update: Tue 28 Jul 2026 13:00:44 +0000
Manifest next update: Wed 29 Jul 2026 13:00:44 +0000
Files and hashes: 1: EmJaWy9ErTq18djeUNfT6TYwXlA.roa (hash: 4n7tztgrwrUxD6WI3OMeFvCbZPJYYWR7ZCZusKoAv2Y=)
2: I-K9nqaL8isdaQPATdz15jV472A.roa (hash: IzWVmalHZuVa9srOGb7K8LfnsGA4gkEh+RLBEqMh0oM=)
3: RcwVn60BAjXaSKd54kN8HvE9mEI.roa (hash: HMzOnWY8MpFn7ebVHAu3c09I2xVaAKGb1gijWHIVX6I=)
4: VMEOZBTbdat5Ej2FDGSSyvWxON4.roa (hash: il5PH5NsJiNfZtmLceTZARbKmqNBVyPmTfnq15PGTB8=)
5: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: 8U5j2BSAcA0CnUyhxz33y7OKfZovRZbnrwnVcQV6ehg=)
6: lIxTSYsNmmcqNIHLrqXgnkuovB4.roa (hash: KyCy7f0RC+Gah0kPcXWSGeJFDqftrveXwrbOBQUq7gE=)
7: n6hUs8ScD2JiUwNfl89-e_tCc6w.roa (hash: /7fv2sWCDJbqb4l7iyEbmK73ArodpdBZ+jyH4nyo2WE=)
8: roenOOlAGA0_OFjwrFwDRIQ0Y_Y.roa (hash: HW4LBYiaQzfwjk4eYDYDeite6KGRHXlfiOHLKtkmNeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:32:e6:f6:c0:6f:e6:65:24:18:ea:26:a5:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Jul 28 13:00:44 2026 GMT
Not After : Jul 29 13:00:44 2026 GMT
Subject: CN=9abcc52dbb263826ce659b5db55afc074ef31563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:55:bc:74:e6:57:cb:46:ac:f6:10:e9:49:
d0:40:40:d1:24:53:bc:c6:18:ab:9c:3f:4b:fb:fe:
45:bd:15:96:10:f8:31:c8:49:fe:04:26:fc:dd:f5:
08:8b:73:ef:3e:55:aa:b4:e4:9b:c2:29:25:85:c4:
20:d5:ef:6f:db:01:ea:4e:3b:c9:d8:4d:8b:66:ab:
56:c3:6b:51:38:24:47:b4:65:33:1e:e4:0a:43:65:
21:56:51:35:90:68:06:eb:f6:db:f9:53:ee:cb:c6:
e5:2b:ff:b4:1d:17:29:19:89:5f:11:f1:14:a6:e9:
f5:c2:7f:75:7c:82:e8:17:14:73:cb:ee:08:33:28:
d5:57:ce:a8:82:7a:ae:fc:78:a0:9e:6e:e4:8c:1e:
04:2d:fa:de:9e:fb:54:42:67:05:ee:5f:08:b2:12:
c7:11:6e:38:9e:92:d6:ff:4b:78:7c:6d:15:81:b7:
a1:e3:b9:da:94:af:e4:e8:18:e5:3d:cc:50:59:d7:
61:b8:66:53:a2:83:fa:88:d7:c2:fb:f4:c1:cb:52:
45:39:53:65:02:57:4b:a0:3a:17:85:77:3d:35:20:
60:0d:5e:2b:70:cb:42:1a:cb:96:f0:59:3e:1b:09:
07:eb:35:3a:97:0c:f0:aa:cf:b6:b3:73:73:bd:52:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BC:C5:2D:BB:26:38:26:CE:65:9B:5D:B5:5A:FC:07:4E:F3:15:63
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9f:2b:9d:01:2a:b1:b4:4e:23:b0:1e:d2:8f:8e:e6:d1:1f:
56:e1:62:e7:fe:4c:e7:6e:45:7c:52:f3:e5:76:73:0b:3f:c6:
f1:c7:51:88:e5:97:8f:9f:0b:c6:af:ec:26:d3:9a:ee:e0:f5:
01:24:61:7b:9e:a3:f6:15:ca:f1:bd:e7:51:36:7a:86:46:e7:
71:16:2e:e0:c2:c4:0b:64:3b:1f:3e:68:a2:f5:ff:d5:81:5e:
6a:52:5f:96:0a:63:0e:b7:44:91:a1:36:1b:db:76:2e:4e:b0:
f1:e5:86:06:36:ae:d9:4a:98:9f:f3:a4:2c:ee:0f:32:ae:e9:
b9:64:fb:92:6c:98:ca:9a:af:79:fc:7d:68:ef:62:19:54:1e:
d4:f4:8e:1c:23:e2:15:5c:d6:78:57:b2:d5:54:5e:07:82:ee:
88:ce:61:e7:b9:ba:5d:1c:a4:32:3d:5e:95:c2:dd:12:c1:98:
9d:ee:bf:fe:d2:a8:97:10:c5:c2:2b:79:3b:96:bd:4d:11:1b:
bd:b9:3e:64:f0:e1:24:cf:7e:7b:63:69:73:52:45:74:64:0b:
43:07:f2:1c:c0:6f:dc:9d:17:61:2c:12:f8:a4:2f:42:db:3a:
02:28:62:ad:20:e9:73:70:6f:20:cf:99:b0:82:4c:55:9d:15:
9d:be:1f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:54:02 2026 by rpki-client