Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: loVy9iHzpuefc3ko0OZ0Z1izg5leXW7Id57+4ODJxME=
Subject key identifier: A9:F6:0C:D3:15:B0:5C:55:81:BA:AC:D3:1E:3E:B1:AD:E2:7D:69:E2
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 019F86E8CEBE3E88A150EA0C4D31F02276E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 19ED
Signing time: Tue 21 Jul 2026 23:00:31 +0000
Manifest this update: Tue 21 Jul 2026 23:00:31 +0000
Manifest next update: Wed 22 Jul 2026 23:00:31 +0000
Files and hashes: 1: A68FGxDlgvGi2ExLVyu1Rtus6jY.roa (hash: OAq7I962/haIw/8uA0XXyCPjF4pVghhaZk8tZjEL3zU=)
2: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: zVm8jwu+yhBUalhpYs+Sc4+cxbcgXFa5h3tSVIMNC+U=)
3: sVAfKvrvvhMbIUsWh385vVnIquc.roa (hash: M9eQGOQqKf4XTtZds1m1OGeYS0UwjPbRi7yLdnFl6LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:e8:ce:be:3e:88:a1:50:ea:0c:4d:31:f0:22:76:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Jul 21 23:00:31 2026 GMT
Not After : Jul 22 23:00:31 2026 GMT
Subject: CN=a9f60cd315b05c5581baacd31e3eb1ade27d69e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:32:35:78:73:0f:58:80:a4:d3:41:5a:0d:
79:9d:b4:fb:06:34:24:40:bf:87:a0:1b:68:b2:82:
32:f8:89:a5:66:27:87:8d:63:ba:b9:31:f1:54:d9:
a9:4b:08:16:d4:a0:47:9b:d9:85:79:08:7d:a0:b8:
bc:e9:fa:f1:4f:24:fb:12:63:c1:9d:b2:38:e0:49:
f0:1b:fa:96:c9:0c:94:41:5f:3a:f7:de:f2:33:7b:
63:aa:11:92:78:06:5f:86:fe:16:8f:10:3a:51:45:
2e:c1:95:2c:52:f2:3a:7a:2c:ed:1b:d0:d6:71:29:
17:73:b4:f4:69:c5:42:2d:a6:3b:63:56:b3:37:d8:
2b:63:44:4b:bd:60:d6:2f:91:ac:5d:c2:45:93:85:
1e:95:53:17:be:3a:57:e5:b8:76:4f:15:6b:d5:0f:
50:60:19:c6:ed:e5:0d:e3:8f:33:61:4b:37:7f:fd:
61:ee:35:11:77:f9:2f:8f:16:61:43:98:2b:f6:ed:
46:a2:36:6e:13:30:28:d2:93:7a:5c:29:15:cb:7c:
0e:94:71:ee:c4:d2:27:11:ee:fe:ff:97:0f:cc:42:
fb:6b:30:20:30:f9:ae:96:fb:d5:34:5b:07:4a:68:
1e:c3:60:a3:82:46:7c:92:cb:72:1c:ce:c6:20:85:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F6:0C:D3:15:B0:5C:55:81:BA:AC:D3:1E:3E:B1:AD:E2:7D:69:E2
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e8:5f:ae:62:a5:d5:d3:82:a4:1e:78:15:ad:f7:1a:4b:b6:
80:7b:93:6d:49:28:83:c3:06:20:f9:d0:01:ff:66:a0:66:80:
03:52:57:05:63:f8:ef:ef:80:fa:d6:c8:d7:8b:63:c3:9e:08:
55:6d:f3:dc:52:f9:91:4b:22:ad:07:f3:81:ec:fe:80:af:74:
60:0f:ec:94:55:92:84:b9:f9:8d:85:a3:cc:bf:58:fd:8b:16:
df:69:d5:fa:51:2b:8d:f8:6a:c5:6d:92:1c:2b:b9:95:06:56:
ef:a7:68:20:66:6e:2a:14:15:a7:ca:d4:52:9d:51:8e:28:9d:
74:8e:96:77:8b:a0:39:0c:be:10:2f:3d:9d:21:27:3f:45:9f:
71:18:2f:ab:7a:e2:28:d5:90:54:16:6b:bd:58:21:b6:ec:82:
32:d5:4a:00:8e:a5:61:23:a7:77:05:9b:f2:59:9d:11:0d:87:
a8:ae:60:7d:7e:f8:04:6e:47:69:8b:69:04:82:78:15:a8:ca:
b4:92:a1:8b:34:b9:24:86:b0:5a:45:ba:b9:6c:f0:a3:f8:ff:
d2:32:4d:be:f7:33:59:58:f5:6b:88:d4:17:ee:09:a2:01:23:
ad:46:ca:6b:45:91:2e:e7:57:d0:83:4c:60:23:94:db:df:92:
70:fb:ed:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 06:32:37 2026 by rpki-client