Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: GTMTZWfkOQss17NIGV5isyscSMEF+sev35ZJdqOYj3s=
Subject key identifier: E5:69:19:12:97:D9:0B:FA:12:9B:01:E5:F4:0F:23:A3:F1:2B:65:72
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 019FAA88C35D09D64F357B668280B0CE9550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 21:01:57 +0000
Manifest this update: Tue 28 Jul 2026 21:01:57 +0000
Manifest next update: Wed 29 Jul 2026 21:01:57 +0000
Files and hashes: 1: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: Q6kh8nmjjFHh/KVDADvvaYbC7RGf6R00ouGJ6kjqgig=)
2: YboTsZW5E_LquEoNeH4f-DKai2A.roa (hash: rVnU6oaQsX3x5ymp+Ryvp8mswyZTbG+O1Im+gcRa5NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:c3:5d:09:d6:4f:35:7b:66:82:80:b0:ce:95:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Jul 28 21:01:57 2026 GMT
Not After : Jul 29 21:01:57 2026 GMT
Subject: CN=e569191297d90bfa129b01e5f40f23a3f12b6572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:99:90:03:e2:65:9f:73:08:2e:80:6a:a5:65:
a2:26:b6:bc:80:24:82:cd:9a:2d:88:8b:4f:dd:74:
a0:00:08:71:3e:4e:65:d6:a0:f2:94:0e:99:82:9c:
02:77:77:cc:ef:6f:05:70:36:a3:7d:38:30:47:67:
d4:54:48:1b:bd:8e:9a:42:56:c2:53:83:86:99:7b:
cc:03:0b:8c:79:12:85:29:d4:0c:02:95:92:ba:36:
df:9d:fe:75:a6:37:e6:b7:5b:14:23:36:33:37:0c:
9a:98:0c:71:79:d2:e9:9a:95:c7:2c:f8:fa:b0:d8:
20:19:35:97:0e:3c:26:f8:ef:f2:a9:5f:88:07:10:
7d:ae:92:7b:cd:03:6e:1d:9c:4b:1a:25:3f:fc:d4:
84:a8:74:03:86:0b:7a:b4:ff:c4:9d:f3:ab:59:28:
61:e9:d5:27:60:c2:fc:c5:07:26:92:32:9b:00:11:
1b:88:68:35:09:03:e9:90:9b:ca:44:0d:14:f4:63:
9f:5a:6c:62:9b:72:09:e8:21:09:83:f1:3f:30:ed:
88:88:28:22:6a:ae:40:a5:60:d4:af:84:70:0e:83:
92:ff:9b:df:04:1f:cb:25:4c:29:dc:03:32:c8:34:
1e:bb:a2:72:9c:1b:b4:52:70:89:64:51:9d:38:9e:
2a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:69:19:12:97:D9:0B:FA:12:9B:01:E5:F4:0F:23:A3:F1:2B:65:72
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3b:6c:cc:99:79:d2:51:38:b0:bb:49:4f:23:87:c3:ae:f0:
9b:95:bf:24:b5:b0:ee:67:8a:4a:d9:90:67:2f:12:98:77:98:
af:6b:51:09:fb:86:38:46:1a:b9:be:fd:03:f0:12:44:64:25:
cc:6d:54:8b:52:67:95:a5:ad:68:34:17:38:1e:d6:ff:cf:7d:
ff:06:5c:1a:f1:31:4f:59:e1:f7:54:30:1c:3c:1f:4b:d0:ed:
80:e4:0d:52:70:7a:31:74:9d:4f:1e:7c:90:4d:85:3a:ca:fe:
33:82:44:ef:df:f6:26:5a:c5:3e:fe:9f:a9:53:49:a3:41:52:
a5:f7:29:d8:9a:8a:ee:c9:26:51:4a:b2:ad:69:2f:e7:ed:8a:
4a:cc:03:ea:c1:04:73:f6:7e:56:93:73:82:0f:2f:24:be:ad:
9a:9c:f0:73:11:ad:95:2d:53:34:85:24:99:5c:73:1f:e4:50:
8f:23:91:42:ed:f1:63:4e:ee:5e:aa:48:e7:a2:91:b2:da:4a:
23:a4:5b:ad:11:fb:62:e5:3b:87:2f:a9:5d:6f:d3:91:60:46:
2d:83:0f:df:83:ed:5c:fa:6d:24:64:1f:63:b5:4a:83:63:56:
1e:b4:6a:4b:c9:5b:19:87:f1:d1:e0:eb:65:cc:df:dc:70:e6:
54:ae:a1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:36:54 2026 by rpki-client