Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: WcVco6M7D3hF7tUQlCxYUgzttU2k40vY4RMq3WnNxKI=
Subject key identifier: A1:31:3C:17:B6:B9:1B:27:83:B8:7F:53:05:97:9D:57:5E:18:A7:71
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 019FA899BA8013A942863135EED2B5142AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 12:01:14 +0000
Manifest this update: Tue 28 Jul 2026 12:01:14 +0000
Manifest next update: Wed 29 Jul 2026 12:01:14 +0000
Files and hashes: 1: 0m0w4NNU4NOo-8_y3zxSZs-Hcdw.roa (hash: d/QLJQ6M0z3RViK7W5MP6w1Y/VAa68ow0nmGzD8+98w=)
2: HKYjGRXbhcsbgj-zO-lhhp8iHf4.roa (hash: r0qRRb9G05Y3zjQIakuz14pzZ5PruwE51RJizxy5NMg=)
3: OXzsf9355x_Po1YlBAMmXxH7YfM.roa (hash: HyUx0AM/t82HDbhNTlK93mKwtwtfVGbEby4qtiM7vwI=)
4: SD-pJr4ttUBaZ1S20Tz4AuB6P1I.asa (hash: +ZZUrq34lcu1uY7HrOMrXNxK/Du8JITTl9RrFi410RY=)
5: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: rcFSoJRr3k+LOCJfaLyXixBKgIVSMOMA5dRiuwTZQd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:ba:80:13:a9:42:86:31:35:ee:d2:b5:14:2a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Jul 28 12:01:14 2026 GMT
Not After : Jul 29 12:01:14 2026 GMT
Subject: CN=a1313c17b6b91b2783b87f5305979d575e18a771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0b:54:5c:2a:cc:f0:af:3c:47:e1:84:df:b1:
6d:6c:a5:2a:a7:96:a8:ea:4e:7e:61:1d:12:51:88:
f7:bb:7e:1f:69:fa:92:75:0f:3d:ad:22:f2:7f:a3:
e7:b2:cf:b5:ea:55:23:36:af:46:bf:7d:2f:96:23:
62:f8:2d:4d:cd:a2:ae:cf:cc:f1:6b:f8:b3:66:23:
f5:7c:3d:97:68:23:59:e3:13:0d:be:69:12:57:a2:
b0:38:69:89:04:08:9d:fb:5c:9b:bb:d7:9b:99:a6:
dc:ef:e9:8a:06:f0:c2:53:59:d6:34:0b:63:d0:72:
3a:10:8c:f8:51:de:50:3a:0e:15:dd:fd:eb:ae:b0:
70:a0:f9:9e:3e:35:82:67:ad:fb:b1:1e:e3:f5:c8:
30:0f:63:59:93:8a:4a:67:0d:5a:c6:38:9f:22:5b:
6b:d1:1c:0e:3c:26:5f:a9:a7:c8:17:69:40:10:63:
df:1a:03:de:db:14:30:1f:3f:55:90:8b:35:0f:75:
85:90:a9:02:c1:11:74:b5:93:3c:f5:95:46:f4:93:
ee:58:4e:50:3d:92:f2:d4:0c:0e:31:84:16:d4:22:
3e:8b:e4:b5:a1:b8:ba:25:bd:9b:c4:01:95:18:91:
72:aa:84:c6:5c:de:f2:a1:d0:5b:cd:7a:b2:1a:62:
4e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:31:3C:17:B6:B9:1B:27:83:B8:7F:53:05:97:9D:57:5E:18:A7:71
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:82:99:8d:b5:d1:f5:2c:cb:ba:10:db:64:f8:c7:64:42:8b:
1a:cd:6a:d1:7f:f3:17:19:1b:d0:ac:30:79:ed:fa:6f:8a:7b:
77:66:32:9a:95:13:7e:cb:39:23:12:c9:b5:4f:2c:be:9a:78:
93:78:ea:3c:1b:6f:6e:87:3c:47:ab:57:6d:b8:dc:47:3d:fa:
81:1a:41:2c:00:54:7d:5f:5b:f6:ae:90:b3:3a:8d:1c:90:13:
1c:8e:45:d7:c4:6b:10:d1:06:05:b9:62:58:d1:2b:a1:e0:a3:
f5:2e:03:c9:52:0a:25:16:e3:48:ce:a8:72:55:21:30:c9:1a:
22:5a:b9:c3:86:4d:ad:ca:e8:15:6e:5d:ba:b3:e7:f3:8a:cd:
e5:ff:f0:89:03:c8:5b:cc:99:52:af:9d:5c:a3:93:98:e9:21:
ec:4f:24:a0:60:33:82:3a:a3:18:78:b0:cc:3b:eb:7f:0d:67:
c5:b0:b5:76:bf:12:b7:e3:a0:1e:1c:87:34:38:dd:14:8f:ba:
03:4a:2e:18:e4:09:99:26:ba:cf:26:d6:66:b7:5a:2d:44:89:
0e:5d:ef:a4:48:5d:db:e4:67:cc:df:42:db:8b:17:b0:a1:7a:
16:7e:89:f2:c6:ac:34:ca:b1:79:31:b1:26:df:94:82:46:5c:
06:ac:fc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:51:23 2026 by rpki-client