Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: RvvUhzB40FljZSiqXIHLt+oIPM2TSQGs9vt+4ZFaSJw=
Subject key identifier: 99:BA:63:44:93:14:F0:51:0A:E6:B6:E4:8F:EC:73:4A:E4:6D:5E:1B
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 019FAD1AE6EBACB42327668E7AE4EC72C6B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 09:00:49 +0000
Manifest this update: Wed 29 Jul 2026 09:00:49 +0000
Manifest next update: Thu 30 Jul 2026 09:00:49 +0000
Files and hashes: 1: 017yR2AH3nhtreOuYgsNpqkrBt0.roa (hash: jH8rFvA13JhY4szX2F6JGpx37/sl3RxTDMuhAZiU224=)
2: OOfgMgyirAjAQpzlSeWvWZ7kZIQ.roa (hash: wpPBvbubRrWqOyJudWgmsWq2Hw2lni+AI3RKu2B28mg=)
3: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: kZzd2asaTUDkV1tMxsFn0m9M3mzgq+rpmGqCZbkzwjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:e6:eb:ac:b4:23:27:66:8e:7a:e4:ec:72:c6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Jul 29 09:00:49 2026 GMT
Not After : Jul 30 09:00:49 2026 GMT
Subject: CN=99ba63449314f0510ae6b6e48fec734ae46d5e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:09:92:1f:ad:fd:37:cc:46:4b:1b:a7:e2:54:
5a:f4:57:fc:af:4a:ad:30:3d:95:f8:f4:1f:4b:50:
8b:3f:04:bd:66:e2:af:fc:fe:ea:38:a4:9f:9b:e9:
31:80:62:a7:1d:87:fc:16:9b:1b:a6:9c:c9:a5:b5:
d1:01:91:3c:80:60:a1:8a:b9:ca:04:bc:54:2f:d3:
ea:a2:e7:97:ff:85:d9:ab:69:e0:5b:d4:5a:29:22:
a7:77:05:82:52:10:3a:34:d0:ee:ba:1e:4c:4e:4a:
e5:56:4b:ce:cb:51:e1:5e:62:e5:9d:96:1d:2a:cb:
54:d2:7c:af:46:d8:4b:84:a7:d7:dd:b7:a0:04:07:
96:b2:80:d5:0b:84:88:11:e4:ab:51:5a:d3:75:d1:
4e:a0:28:6e:43:85:be:be:00:31:a1:ea:ce:b5:0f:
71:37:76:5b:e9:d9:b3:8b:66:ad:9e:f7:41:78:64:
8a:86:5b:c5:9f:d1:a0:e7:18:14:76:66:74:a5:a8:
b4:9a:55:03:1a:4e:96:2c:aa:41:e6:28:37:2a:03:
0d:64:e0:b7:59:7c:10:35:36:1f:12:a0:ac:d9:a4:
6b:fe:a7:13:5d:f5:1b:85:96:19:62:eb:c7:ee:50:
03:3a:9f:ce:83:18:eb:35:ec:86:4c:bf:31:67:7f:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BA:63:44:93:14:F0:51:0A:E6:B6:E4:8F:EC:73:4A:E4:6D:5E:1B
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3e:d6:3f:e3:c4:25:a8:04:56:b1:ec:49:41:cc:69:f8:d9:
1d:41:c6:5a:a9:4f:22:b3:22:36:0c:5c:2b:3f:a2:8f:73:24:
b6:82:7c:9a:27:a0:3f:e7:96:e2:70:fa:cb:61:a1:09:87:c9:
9a:be:f2:7f:32:39:ad:db:49:91:44:29:18:ac:45:03:0d:aa:
b4:60:e4:c4:27:e5:18:93:be:59:95:bf:e9:5f:63:f4:a3:ea:
61:3a:60:73:d0:d4:3a:b6:9a:78:95:e3:d4:8e:8d:0a:e7:9c:
d7:f9:53:cb:9d:76:5c:e8:b7:04:35:e1:0a:35:45:66:7a:dd:
61:00:2f:06:8e:1c:f2:fc:a4:cd:c6:43:9d:1c:73:10:64:14:
d3:8a:2a:0a:9b:0d:0d:44:23:a4:67:80:9a:f4:d3:f3:79:a3:
9e:1a:28:07:82:8f:e5:fa:a6:29:29:86:de:c3:8e:f3:55:06:
40:34:f7:0a:97:89:dd:57:98:54:71:18:db:ea:01:22:f5:12:
1a:34:82:76:8f:3f:30:94:2c:7f:b3:e9:d7:85:bc:9a:4b:82:
02:2e:b2:b7:6c:e4:b1:54:f9:e1:08:e6:9d:f6:57:35:42:dd:
95:a9:37:68:5f:9e:a0:a5:4e:5c:f2:a3:f9:cb:cf:ff:00:bd:
70:ef:e8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:31:54 2026 by rpki-client