Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
File: xcidUmDLNP27s7wlv0rbr0zcaKA.mft (raw, json)
Hash identifier: LzT6A9wA2aLnfgtt0GVjHZmFe/SPjOkAATj6HJJwm0A=
Subject key identifier: 29:BB:58:83:29:91:42:F7:51:32:42:41:83:CA:95:11:DF:47:D8:78
Authority key identifier: C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0
Certificate issuer: /CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
Certificate serial: 019FA8620E41DD517A2D93178C2E5A7219CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
Manifest number: 098F
Signing time: Tue 28 Jul 2026 11:00:26 +0000
Manifest this update: Tue 28 Jul 2026 11:00:26 +0000
Manifest next update: Wed 29 Jul 2026 11:00:26 +0000
Files and hashes: 1: JD_hILTLs5WiN-GGz9cnjaMmPmg.asa (hash: w3ngbPPlSEh0i5ZlPs9dJQ8lVMYy1vGnqLwn37EOyHY=)
2: xcidUmDLNP27s7wlv0rbr0zcaKA.crl (hash: LgjQe3u1MSy61t5C6hCYoIU/MatSrdYZDlILnRH1iIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:0e:41:dd:51:7a:2d:93:17:8c:2e:5a:72:19:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
Validity
Not Before: Jul 28 11:00:26 2026 GMT
Not After : Jul 29 11:00:26 2026 GMT
Subject: CN=29bb5883299142f75132424183ca9511df47d878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:f1:40:7f:28:3d:0e:00:9f:23:c0:ae:3e:
14:79:e0:2c:d3:cc:10:84:61:ca:34:95:c2:c7:fd:
f7:fe:8a:12:db:d9:f1:04:19:ed:1d:f4:8e:e1:e0:
5a:77:5e:39:4b:3c:06:b7:5d:16:df:bc:5b:40:70:
0e:70:03:4f:c9:fd:ba:78:76:7c:cc:f9:e0:ea:d1:
d4:47:b6:bb:c4:44:a1:ef:e0:af:f3:43:6f:34:61:
39:92:d6:52:39:95:cd:72:7d:18:39:7d:21:d8:fb:
4e:dc:e6:7c:d0:41:10:29:be:65:40:90:64:14:74:
50:6e:92:01:6e:fb:f8:4f:5e:bd:ca:43:44:88:4f:
41:db:f0:ce:8b:1a:f0:9d:89:3b:70:2b:84:46:f7:
16:5e:e0:8f:cb:34:6c:61:3c:61:2b:ee:90:78:50:
2a:d8:a7:0c:aa:6d:38:7f:26:58:f4:06:71:17:32:
44:de:35:5f:f6:ff:39:ee:20:8c:d7:29:e2:46:e5:
2b:59:32:92:c5:bd:0e:df:26:7f:6a:9f:e3:d5:88:
a4:1b:d5:c4:8b:d3:7c:fc:48:11:95:d2:c6:61:24:
b2:0f:72:45:6c:55:22:4a:42:84:9d:90:5e:ce:15:
1c:30:25:6a:79:a3:b3:f7:71:c5:c1:ad:81:92:8f:
40:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BB:58:83:29:91:42:F7:51:32:42:41:83:CA:95:11:DF:47:D8:78
X509v3 Authority Key Identifier:
keyid:C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:47:fe:8d:27:74:01:a8:8e:7c:77:c8:f6:a6:e3:1c:44:80:
1a:65:d0:d8:e4:c7:45:9b:f7:af:2b:43:ea:a4:c3:85:20:19:
da:6c:c2:f9:24:b6:d7:39:e5:19:3c:2a:37:05:29:b9:71:09:
af:5f:e1:da:0a:2a:2b:19:54:3d:d2:ba:71:81:a7:b4:a1:73:
c9:49:d2:93:d4:b9:21:05:23:08:d4:f3:78:f1:66:cd:47:0f:
d6:92:d9:2a:1c:2d:a7:d7:fa:08:9d:c5:1b:96:d2:86:2f:0c:
08:a2:76:98:ce:94:2a:d7:6b:a1:fb:87:a9:24:6c:71:53:fa:
dd:e9:65:50:b9:16:16:cc:69:ba:52:a9:ec:6b:5e:36:c5:5c:
c6:07:95:21:d2:10:70:3e:f9:fe:0e:c8:58:92:74:50:4b:dd:
ea:83:08:31:a2:f3:16:72:40:7d:4c:01:7b:1b:d6:6d:5f:37:
66:1e:75:b6:71:b5:02:42:92:a3:5f:4b:4f:30:fc:d4:ec:af:
d3:3c:07:9f:69:6c:4a:eb:86:d7:d7:5b:11:7e:96:5d:43:f8:
9c:e7:40:d0:07:a8:66:33:0c:78:45:4c:cd:5d:ed:a2:a7:c3:
71:61:38:23:90:68:d0:c1:45:1d:eb:8f:a0:dc:f8:8c:f2:9b:
0a:ec:ca:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:46:34 2026 by rpki-client