Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: kcvgeTh8D7QeAduI+k9AVEVzJLlDMO0CmwyRNYE2Kr0=
Subject key identifier: 67:78:66:88:4A:14:EB:CB:28:E7:00:B2:CB:BF:0B:76:26:FB:13:E7
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 019FAC08B5F53B514FE1510F487B36B198E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 0A26
Signing time: Wed 29 Jul 2026 04:01:19 +0000
Manifest this update: Wed 29 Jul 2026 04:01:19 +0000
Manifest next update: Thu 30 Jul 2026 04:01:19 +0000
Files and hashes: 1: DNO1I-TkpArSeHYJmcY4l5DFhts.roa (hash: cJ58Vzw7QL+cL/8OgW9JpclMRUS3i5GfX5DaYn+9oUA=)
2: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: xS8Q+SwSN9myWtnMMonULifvRtNrKEvYdLYiFn1rEik=)
3: zZWY_IAZTfyBj8nKZJLyKtz1FcA.roa (hash: yYASwQEw3rfD/lPBPxCKrlCfAsDJXhJw/JiI9s5QDDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:b5:f5:3b:51:4f:e1:51:0f:48:7b:36:b1:98:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jul 29 04:01:19 2026 GMT
Not After : Jul 30 04:01:19 2026 GMT
Subject: CN=677866884a14ebcb28e700b2cbbf0b7626fb13e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:a0:8d:6f:9c:42:f2:5a:4f:38:b8:80:45:
17:e8:21:6c:ef:69:f5:a9:62:0b:05:51:6f:6c:31:
ec:e0:29:03:dd:16:58:3b:72:97:83:9c:1c:0e:83:
e9:f1:7b:77:bd:9a:75:63:54:94:b9:40:3a:92:18:
c4:ea:06:8d:0a:01:30:83:d2:be:88:de:36:49:51:
db:98:74:43:43:fa:c2:22:67:28:24:c0:a8:7d:15:
83:68:46:3d:63:8a:20:ca:04:16:45:a9:e2:fe:f6:
23:d9:f3:f3:40:21:1f:1f:66:20:91:37:c9:6e:eb:
14:58:40:13:fa:78:60:de:66:85:ff:ca:8f:b3:13:
57:04:0d:db:b8:b3:b5:1d:13:af:69:98:ba:e6:49:
67:cd:c9:dc:a1:19:5e:7d:30:da:ad:28:0c:ff:a4:
29:22:1b:fd:b7:0c:cb:6a:6e:48:87:51:13:73:6d:
cb:87:16:73:16:92:3b:14:75:16:c0:2c:41:e1:1f:
28:f1:c3:e1:b8:94:eb:36:7f:69:d0:93:33:6e:cb:
33:db:32:7f:df:38:e6:23:5b:df:83:cb:bc:10:0e:
83:73:6a:59:1d:f6:19:4a:3a:c4:fe:6b:e2:6e:75:
d5:f5:3a:cf:10:9d:28:64:3b:bd:1b:95:76:04:a9:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:78:66:88:4A:14:EB:CB:28:E7:00:B2:CB:BF:0B:76:26:FB:13:E7
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3a:e5:f8:97:93:7f:de:39:23:28:b9:63:b1:16:7a:3e:0c:
b6:7b:bb:72:00:22:32:22:c7:86:c6:16:09:29:59:7e:ca:8e:
f6:6e:c6:90:79:da:77:88:c0:95:7d:48:60:55:25:1e:bf:eb:
f0:c8:04:8d:d6:c4:e5:88:8c:97:5b:36:a1:71:7d:ff:8f:e6:
a8:9a:6d:ad:ed:12:6b:d7:45:4a:bf:82:0d:e2:85:07:7b:34:
5a:da:6e:aa:b0:91:ff:fb:81:00:75:ef:86:39:b3:87:73:38:
d9:9c:6e:4c:c0:ab:b6:e2:d1:04:a4:59:8e:21:e4:be:b0:e4:
9a:d0:76:0b:b9:6e:86:e6:c4:4d:8b:37:22:3c:4c:86:3d:2c:
9a:ef:d0:bd:7d:69:c9:10:70:3c:62:64:8e:81:21:c7:48:e5:
37:c2:14:96:6a:ce:89:4a:96:6a:5a:4d:a1:7e:06:b5:dc:22:
8f:8d:dc:f3:d9:b6:df:c5:30:9c:d8:f9:86:aa:68:57:bb:14:
25:53:fd:72:a9:9e:65:57:74:95:62:b9:4c:8f:9f:6f:fa:30:
0c:1a:48:31:b4:e7:bd:a0:fb:c6:3d:9e:b6:75:e4:e6:05:ac:
c7:fb:08:3a:33:3d:81:bb:22:57:92:21:5a:4c:07:1f:05:07:
4d:c0:61:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:37:14 2026 by rpki-client