Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
File: xnQBIsYDCziYVCPXx8Zo7y266Rw.mft (raw, json)
Hash identifier: QffNfs5Fcx4xXAP1SZD2VZQdKHA+9DzisDBMuVXtT3o=
Subject key identifier: 89:13:74:AE:F2:48:C4:2E:61:8D:75:D7:92:3D:23:1A:2E:9C:26:83
Authority key identifier: C6:74:01:22:C6:03:0B:38:98:54:23:D7:C7:C6:68:EF:2D:BA:E9:1C
Certificate issuer: /CN=c6740122c6030b38985423d7c7c668ef2dbae91c
Certificate serial: 019FA899358F2C5DC67439E72FAD6EB17963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:40 +0000
Manifest this update: Tue 28 Jul 2026 12:00:40 +0000
Manifest next update: Wed 29 Jul 2026 12:00:40 +0000
Files and hashes: 1: 60TOPVfsN5pgJZGd8in-8hmiCDQ.roa (hash: wz0fI5J0oyRKc9opLJ8t6/QjHmyjX9i2OHs+2QaT2hE=)
2: BGqJYKbvXZQ9-EfJqdZJcmAAnEg.roa (hash: qwCTOzoAcAD8dBvfuZm2kT8FIK+IVROmdCz+Tdiv4eY=)
3: IjL5CW9zeWcOtWHWu3HJVWlDRuQ.roa (hash: HqeQTODPPkmuOhSBibsyQNBnS1QebGdzSoSsvCtv9f0=)
4: IjYD_4iJnSpw60hSl6hLQ78-_Ak.roa (hash: I2O8TskpKH95NKy5gMH0QHO0yhDdq5oUwAlZ1jCSCf8=)
5: Mer11hQ15D-jrLouYRlyFBNsr9k.roa (hash: pFGvLBy0OAKz3OIzWOuN1/pjfeO7iP38PaUND1hqokk=)
6: ebSyejuxZjmc3dCqgBY87Hl9RjU.roa (hash: pq+UZYWSdr5GA1Ri1WMIM+xPCym7E3lqGvtGITBuoD0=)
7: xnQBIsYDCziYVCPXx8Zo7y266Rw.crl (hash: ZcDLoFOnR/zBQh2zwBf0lUXcqdN02Ds1NUKIVygOGhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:35:8f:2c:5d:c6:74:39:e7:2f:ad:6e:b1:79:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6740122c6030b38985423d7c7c668ef2dbae91c
Validity
Not Before: Jul 28 12:00:40 2026 GMT
Not After : Jul 29 12:00:40 2026 GMT
Subject: CN=891374aef248c42e618d75d7923d231a2e9c2683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8c:81:c2:dc:14:28:f9:e9:78:47:ef:ed:c6:
cf:eb:d9:80:f0:78:71:22:44:e3:a4:df:39:47:3a:
f8:ac:35:0e:de:bc:c9:17:82:1c:07:a9:bf:f3:ac:
e7:d8:fc:39:91:2b:91:93:5b:a3:75:68:6f:80:dc:
d4:73:65:45:3f:ea:3a:aa:27:77:95:f0:b5:bf:3c:
64:e8:5c:73:77:7d:29:07:d4:2f:de:a5:d7:b7:c1:
61:ab:09:0f:15:1d:12:0c:59:f0:74:a3:dd:94:47:
0e:b8:d4:ed:79:dc:04:72:5b:c6:b3:30:dc:10:ae:
5a:a7:6d:3b:ea:a1:50:b8:6c:c5:86:57:2e:81:2e:
c8:fc:8b:af:b4:10:2a:be:b9:52:af:26:22:ce:32:
18:7f:bc:72:ca:33:31:cc:5e:93:86:ff:eb:ac:64:
cd:8c:cd:6f:ae:e4:82:54:9a:71:f8:4a:c1:4d:f7:
f0:a7:15:3d:7f:25:4f:3a:d0:40:3e:6c:7e:e8:24:
32:49:93:fb:a2:cb:0e:30:c8:13:a9:69:ab:75:e6:
d9:e4:81:76:5c:e4:66:82:21:39:48:82:0d:95:fb:
0d:f1:71:e4:7d:30:b1:11:33:4e:d3:dc:69:36:84:
05:53:8c:7a:d0:e4:c1:12:54:f9:36:6d:7d:0f:62:
d2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:13:74:AE:F2:48:C4:2E:61:8D:75:D7:92:3D:23:1A:2E:9C:26:83
X509v3 Authority Key Identifier:
keyid:C6:74:01:22:C6:03:0B:38:98:54:23:D7:C7:C6:68:EF:2D:BA:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c0:e9:ff:29:3d:43:2d:9b:d1:71:4b:76:9b:4b:0a:1d:18:
54:34:ae:53:2f:d9:2e:97:ce:df:c6:c9:00:60:c9:3d:94:f0:
9a:5d:fd:6f:f9:f6:b0:59:34:b1:44:ba:1a:c5:24:4e:2d:0d:
77:bb:bf:01:0d:68:e4:82:5c:a2:51:47:07:59:f3:e6:e9:40:
bf:d8:dc:70:e5:45:0e:75:cd:28:2e:a5:fe:c9:30:1f:bd:ea:
77:59:ad:33:10:6e:a8:7c:ab:2e:f2:25:ca:ac:67:71:86:63:
2b:fc:22:96:71:a7:11:75:14:64:1e:d6:01:18:52:ad:a1:ef:
6e:0e:66:6b:7d:29:5f:28:e5:23:4b:ca:9c:d8:7d:e6:4a:4d:
1e:d3:2b:18:2f:3e:74:c8:d2:34:0d:f9:ed:e5:aa:85:85:5f:
ac:59:ea:97:d3:95:03:4c:d0:68:e2:df:13:02:07:54:c8:0a:
2d:4f:cc:c0:7b:00:82:c5:f2:a3:ac:30:5d:b1:76:95:b4:ba:
0f:1d:c6:e8:10:d5:e4:ef:8f:6e:12:34:29:d1:7b:23:4f:ed:
a2:d5:30:7b:3d:53:fb:79:b0:4d:8f:da:95:6b:a7:7a:50:ac:
af:9d:91:5b:aa:c8:7d:f7:69:31:cb:d3:ba:00:02:c1:74:94:
11:d6:87:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:17:34 2026 by rpki-client