Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: YYUPUd7Qh4v9z2+NoTsvB0hPpTzRAGJGr4NeXKAkXKY=
Subject key identifier: 76:F0:1D:3E:CE:9D:4C:F1:38:B0:02:C8:14:DA:5E:B5:90:10:59:66
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 019FAD88AFBA03918ACB8FF5EA5505B71C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 095C
Signing time: Wed 29 Jul 2026 11:00:43 +0000
Manifest this update: Wed 29 Jul 2026 11:00:43 +0000
Manifest next update: Thu 30 Jul 2026 11:00:43 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: UubutT50ff+sbOVJBle7ApqT1mY5rjfBQGpAIB8TodQ=)
2: xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa (hash: 4Tr8pcApL7OMPNYK6DHiqFf/BMOwe5lvOFY1rUx8z6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:af:ba:03:91:8a:cb:8f:f5:ea:55:05:b7:1c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Jul 29 11:00:43 2026 GMT
Not After : Jul 30 11:00:43 2026 GMT
Subject: CN=76f01d3ece9d4cf138b002c814da5eb590105966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:3c:d5:39:aa:30:34:65:91:0e:5f:59:a4:
1b:7f:4b:26:ab:26:38:af:f9:04:35:a3:9b:c0:28:
42:4d:df:42:ae:f7:46:07:ee:13:d2:fd:02:c5:f9:
53:da:6b:6f:f1:0b:09:9e:cf:96:e5:bf:e6:8c:25:
d9:24:61:b8:cc:7b:50:40:20:24:60:33:01:69:97:
75:05:9f:e3:19:49:59:73:be:d4:c9:fe:bd:f7:60:
3e:f4:e3:eb:2a:53:56:49:1e:37:44:da:f4:41:d0:
d7:60:ef:91:58:36:46:4d:e5:7b:6f:a5:5e:f1:ef:
3d:3e:51:24:de:b4:da:f8:ed:88:80:62:6f:fe:71:
2a:f2:ba:a1:d9:ad:07:d3:f2:52:3b:6a:0a:42:e9:
d1:30:09:44:7f:2a:85:94:2c:cf:65:83:ac:a0:1d:
e6:d7:28:ca:d5:4f:66:74:79:a3:b8:4f:05:8e:8c:
43:8c:ae:4b:14:4f:60:61:88:ff:c1:29:64:66:59:
d9:a9:d6:25:51:5d:29:c0:42:78:85:25:56:ff:b2:
98:0c:6a:bf:08:7e:5c:0b:dc:0e:41:41:53:79:69:
f8:ce:27:c8:e6:1a:fa:5d:7a:06:53:e8:50:c2:ef:
24:26:9e:69:ea:7e:25:c6:28:35:be:8b:bf:62:02:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F0:1D:3E:CE:9D:4C:F1:38:B0:02:C8:14:DA:5E:B5:90:10:59:66
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:64:b9:dc:91:a9:61:b4:ae:6f:3a:d2:b3:88:ce:63:41:99:
97:06:cc:74:73:26:97:64:98:16:a5:1f:08:95:06:2f:2a:a1:
a6:52:59:cf:18:4d:1a:4d:59:bd:99:ae:10:75:66:af:66:40:
44:87:07:85:91:66:12:2c:a5:a9:8b:a6:02:3d:72:b9:57:7e:
d1:e8:52:d5:e1:61:f8:67:bf:5f:9e:50:4e:29:76:41:e7:8f:
f1:24:f5:c8:01:ef:6f:29:06:ad:ce:88:f4:1d:ec:ec:69:44:
f4:94:57:dc:e1:fa:03:f2:5a:76:46:7e:ce:3f:9e:1d:34:1f:
38:d9:81:5e:2d:bf:b2:50:78:71:97:bf:74:80:d5:c5:2a:02:
87:0c:31:a8:7c:3e:1b:9c:67:13:2b:f6:57:35:2e:a1:cb:4c:
ed:fb:33:32:f7:07:79:83:26:9a:95:f8:7d:8e:af:bd:7c:93:
16:ba:34:13:04:b4:0a:db:0f:c4:87:ec:05:5e:d0:d0:b3:97:
4c:4c:15:34:bc:05:23:a6:ef:99:fd:ed:91:b1:5f:ee:54:cd:
96:34:f1:14:90:18:65:91:e9:35:2b:6d:ec:83:f9:13:9f:a1:
cc:55:4b:e1:45:16:11:2f:3a:f6:62:b6:c9:2e:71:17:3a:c5:
68:03:3c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:44 2026 by rpki-client