Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
File: XfEaGA3xeZTkitMxhyz9AK2augQ.mft (raw, json)
Hash identifier: N65SwxOhJ/qefJJMlOF4rkLAIRIVrqoCISuWusW+4ys=
Subject key identifier: AF:1F:06:89:BC:08:CD:1B:2F:3D:90:03:4D:89:C1:BF:0C:AF:E0:EC
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial: 019F9FCCDF9D19BF68577C0657888FED8D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 19:00:31 +0000
Manifest this update: Sun 26 Jul 2026 19:00:31 +0000
Manifest next update: Mon 27 Jul 2026 19:00:31 +0000
Files and hashes: 1: XfEaGA3xeZTkitMxhyz9AK2augQ.crl (hash: xG9MSIimCT4KnT+QhZ/TCtb6SqtNVXBIHpmaBfQ0v0U=)
2: vOvUH4QL3euA8n5Zs-p3s8pu5OU.roa (hash: qqJCGshMa7lPJa7oCp0UWM6NmrUrD8W4y4uDd4fxLLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cc:df:9d:19:bf:68:57:7c:06:57:88:8f:ed:8d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
Validity
Not Before: Jul 26 19:00:31 2026 GMT
Not After : Jul 27 19:00:31 2026 GMT
Subject: CN=af1f0689bc08cd1b2f3d90034d89c1bf0cafe0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:45:fa:70:45:08:a6:ee:ba:d2:05:bc:8e:
58:0e:c5:b6:fd:7d:7b:04:15:6d:b6:17:11:ea:99:
61:11:18:e9:95:f1:c7:f7:a3:42:c6:a0:9a:41:41:
70:4d:eb:e1:d1:e1:7e:f9:6c:40:75:58:23:f2:b0:
ca:ed:c5:af:2f:48:c3:56:47:52:5b:68:d2:f6:5c:
41:11:74:d4:19:25:39:0d:a4:15:48:1f:b0:a5:6b:
a7:89:46:2d:47:b9:1b:7e:14:1e:b2:2d:18:28:9c:
95:4d:34:fb:93:78:57:09:d6:5f:5c:46:f3:f7:ad:
b5:85:41:db:92:68:6a:9b:9f:41:3b:c7:81:11:f7:
d4:37:c2:93:b1:79:f2:fe:c7:dd:4c:7a:b0:86:0e:
44:43:23:a1:54:cd:6a:2d:69:19:e2:a1:d9:9f:93:
c4:3e:a6:4e:65:f0:63:01:56:35:e7:82:cb:9b:c4:
2d:58:af:99:fa:a7:8f:19:55:9a:1e:93:fe:d9:b6:
ed:a2:1f:09:4e:cb:c9:36:9b:de:b5:7b:79:6c:b6:
7f:b8:f0:fb:2b:0f:f6:fc:d1:11:b1:91:81:21:ef:
7c:83:91:f3:de:47:7f:17:b4:a5:d7:db:bb:c9:b5:
56:ca:cc:d9:74:df:2f:d2:d7:45:a0:11:6e:27:92:
47:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1F:06:89:BC:08:CD:1B:2F:3D:90:03:4D:89:C1:BF:0C:AF:E0:EC
X509v3 Authority Key Identifier:
keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6e:59:66:8e:df:05:ad:29:2e:21:cc:26:6b:fd:1b:68:79:
e3:1a:ff:6b:b8:90:7d:6d:85:b3:10:27:2b:8c:e6:0b:60:f4:
12:3e:7d:f6:20:c4:c3:e9:3f:39:9f:1a:18:e9:71:fc:1a:be:
50:86:34:00:a0:db:dc:83:35:27:82:11:a4:f0:1c:5f:84:81:
8b:ae:93:9c:90:82:12:ca:3c:db:4e:a3:b4:e8:ce:d0:41:8c:
32:40:bd:2d:d1:71:c2:12:a3:0a:fa:9d:67:62:91:bb:2e:66:
ad:75:cd:64:9e:36:bc:ca:5f:98:c5:7b:28:c4:ae:69:fa:72:
59:2f:8a:40:10:e7:7e:9d:59:7c:72:e8:55:73:5e:9e:4c:b9:
d6:67:be:26:fb:3c:59:fd:58:4d:a3:d0:44:6e:d2:46:b7:d1:
f9:40:55:0f:d8:ce:14:dc:f5:bc:08:fe:5a:ff:19:cd:0f:88:
b2:a7:42:3a:5a:ae:45:ad:59:32:71:46:39:72:2e:e6:ef:25:
7d:8c:c1:7f:ba:40:da:ed:26:ea:01:59:9d:4a:bf:9f:65:38:
0b:5c:95:91:7f:a5:8d:2b:6f:f7:d8:1f:29:a1:28:b0:ef:4f:
c4:e5:9d:2f:e2:e2:23:19:99:3d:d6:38:cd:61:3c:68:06:18:
22:57:df:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 22:29:05 2026 by rpki-client