Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
File: XpNr6hsMOiCKuifYsQsnXkdN3iw.mft (raw, json)
Hash identifier: Ydo5MH1Yat8lrSYwC/Y9ywECLlz5h1v+fpBs7M7dN7M=
Subject key identifier: 1F:86:D6:8C:F6:51:33:42:31:52:AE:17:15:69:51:2C:CB:73:29:83
Authority key identifier: 5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
Certificate issuer: /CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Certificate serial: 019FAF40B6B307D2CDF361D34ABBEDA6A8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 19:01:21 +0000
Manifest this update: Wed 29 Jul 2026 19:01:21 +0000
Manifest next update: Thu 30 Jul 2026 19:01:21 +0000
Files and hashes: 1: I4H-h-0IvTFBhVPDqjS4bNj_Ebs.roa (hash: sH+OJNMuVDP+q4KSVOmVWCp6qFy7xvvRbWmFSeE0ZQA=)
2: XpNr6hsMOiCKuifYsQsnXkdN3iw.crl (hash: Ad7sYL9RC7zJC6F2wJFjuMoI2FWuRJaLdGwHVXVXJvw=)
3: tAwZU3BOPbTvz3ImjlM559IcNTA.roa (hash: y+WYOBqvK0tCP5OHjWQ0ygtKGjnCPslAmq7bpnA8QLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:40:b6:b3:07:d2:cd:f3:61:d3:4a:bb:ed:a6:a8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Validity
Not Before: Jul 29 19:01:21 2026 GMT
Not After : Jul 30 19:01:21 2026 GMT
Subject: CN=1f86d68cf65133423152ae171569512ccb732983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f3:06:7e:25:d8:bc:75:96:ce:ab:9b:54:22:
63:f1:ec:7e:8c:34:9d:f6:33:da:3c:68:c8:e9:09:
9d:f5:62:3a:00:ac:9f:b2:bc:50:41:d3:ea:4d:52:
ae:7f:ff:4f:ba:ed:a9:8f:52:22:96:81:42:49:fe:
85:51:e6:1f:c0:8a:b1:d1:51:62:c6:d6:35:66:30:
28:a0:2d:5c:da:5e:c7:9d:fb:1b:ba:9a:51:9f:ba:
36:86:67:8c:67:22:52:12:0f:11:89:65:5d:d3:f1:
37:06:19:ca:25:ea:22:40:4a:ae:57:7c:87:35:67:
af:3b:79:7e:6f:8d:8e:04:aa:f5:f7:68:23:5a:ab:
b2:2e:1b:e3:17:22:15:e4:89:8c:4f:f8:c7:ee:34:
4c:a0:b8:4c:bb:ae:56:b1:15:53:fe:9d:b2:b8:75:
58:f7:31:af:a6:11:36:db:92:f9:92:bb:3c:c9:69:
85:17:b0:a0:40:0d:e7:b7:ed:52:e3:24:fa:47:df:
ed:16:82:0f:cc:5b:a4:0d:da:00:15:55:01:2b:ac:
40:ce:68:2a:1a:51:35:1a:49:8d:1b:62:09:e9:32:
db:93:99:50:35:08:56:a1:02:a2:dc:4f:e5:e9:07:
ea:ae:f8:49:f7:fb:62:42:7b:0f:6f:f0:12:85:8c:
d4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:86:D6:8C:F6:51:33:42:31:52:AE:17:15:69:51:2C:CB:73:29:83
X509v3 Authority Key Identifier:
keyid:5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fa:88:c7:27:24:d7:03:a7:ff:36:b3:07:f6:33:df:51:b4:
03:3a:a2:2c:cc:0f:cf:6b:92:d5:1b:ff:e7:c1:5c:5a:d0:8d:
61:33:49:8b:b4:72:46:12:71:d8:10:7a:f3:8d:49:42:a5:ad:
cc:af:76:e2:c7:29:37:af:ea:ff:2a:9d:c2:ba:51:ff:25:e0:
b7:b4:e8:3f:76:17:4f:04:f6:e4:02:92:30:b5:9f:23:81:3d:
78:c5:df:3b:37:63:4e:1a:b5:c6:83:8a:0e:2c:02:1d:02:c3:
d7:b4:9a:4c:47:8d:aa:f2:ba:7f:57:6f:cd:a3:75:d2:6b:8f:
f5:b7:6a:b2:9b:fd:1a:9d:29:e4:e5:53:74:79:87:bb:00:4c:
ba:04:28:9d:3e:ae:88:c9:6d:14:4b:d3:f1:4d:24:93:dd:93:
4c:c0:23:8a:c6:db:10:d6:d7:43:66:02:82:42:05:98:41:d2:
ae:bf:e5:f1:bf:7c:e9:89:53:e3:fe:06:7a:ec:16:24:ac:73:
d1:36:74:5e:82:74:ea:f9:64:00:fa:45:4b:73:42:9e:85:04:
8b:a8:b2:0f:79:38:f2:9b:4f:c9:bb:da:6a:ed:18:03:e9:6f:
a8:16:c3:b4:69:df:b9:dd:85:46:16:c0:e3:c7:9a:d9:dc:43:
07:a2:1d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:41:07 2026 by rpki-client