Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: o4/u7qVq9D1fNv3qL0SyumXt6WZNIJ0CxAcUTcCmN84=
Subject key identifier: C3:C6:E4:18:A9:96:BD:C0:B2:CA:A9:2E:1F:32:29:F8:C8:17:01:A1
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 01A00394E7942C64D4261F49484D4D01CF0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 1A04
Signing time: Sat 15 Aug 2026 04:01:25 +0000
Manifest this update: Sat 15 Aug 2026 04:01:25 +0000
Manifest next update: Sun 16 Aug 2026 04:01:25 +0000
Files and hashes: 1: RB5D86Eez18oD-QABqEilaFp2nQ.roa (hash: cNT5vI1+Epdr8/RiwTV50sHhN6dBP41X/USYdNru1kM=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: GqyjgBItfceL+x6M2DSIFP2EPg+TuWz66f6uPbSNJvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:e7:94:2c:64:d4:26:1f:49:48:4d:4d:01:cf:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Aug 15 04:01:25 2026 GMT
Not After : Aug 16 04:01:25 2026 GMT
Subject: CN=c3c6e418a996bdc0b2caa92e1f3229f8c81701a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:53:d1:c8:1f:63:39:f9:2b:54:c9:d7:80:
49:d4:0a:e5:bc:37:b0:99:79:55:c0:8b:7e:1d:cd:
d6:21:75:7c:77:49:96:26:08:28:06:25:4d:1f:5d:
98:c2:7e:96:77:27:9e:50:37:ad:5d:6c:ad:2f:2b:
ec:c8:f4:ed:7c:65:de:e4:67:ee:fc:7a:31:8b:9e:
39:01:73:53:10:6f:da:22:27:01:e5:df:90:da:5d:
9f:08:c3:1a:8b:c6:93:3d:84:6f:66:e1:00:87:14:
40:47:b9:d6:d2:12:26:19:40:fb:c8:aa:7b:40:fe:
4e:d1:59:b5:17:98:ba:66:cb:6c:d7:da:38:94:e2:
0d:8b:50:da:53:70:9e:23:3e:67:b9:42:90:51:6e:
bc:49:5e:0a:2c:94:b0:c7:29:96:fc:55:4e:ca:45:
97:b3:e4:77:a5:32:91:6c:e1:0a:e9:3c:81:47:e7:
65:cc:65:27:4f:4f:1e:0e:47:3b:86:82:1a:b2:f2:
8f:59:0c:ae:1a:f7:65:25:3f:b2:5d:a4:9c:17:34:
e6:9b:b3:f3:d3:59:10:23:4c:da:a7:8b:61:a9:73:
c3:f2:2c:04:b0:ae:d9:c8:7f:d8:76:58:c0:2e:06:
c8:c7:d4:15:e8:c7:3a:75:1a:76:17:c3:df:0c:38:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C6:E4:18:A9:96:BD:C0:B2:CA:A9:2E:1F:32:29:F8:C8:17:01:A1
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c6:10:05:34:cd:bf:2a:bf:67:e7:cc:e6:13:c6:b6:e3:3a:
f6:a5:58:01:60:bc:07:c5:57:d0:7b:2f:c0:e5:62:56:c9:76:
f2:9d:44:51:93:ca:62:0c:14:8f:e0:7b:a2:ad:0b:fe:9f:3c:
27:55:ec:83:3a:49:b9:55:a6:aa:a8:7f:85:1b:48:45:1f:65:
a7:e4:62:49:93:7c:1c:52:2d:f0:25:44:41:cf:09:b1:d7:f8:
e4:60:bc:e5:8c:3a:0c:fb:68:55:ff:b5:8d:e7:60:e9:81:48:
28:b4:47:ee:81:fc:37:92:fe:74:d6:f0:3e:a0:a8:08:05:d5:
be:ba:38:0d:76:20:c6:ee:13:86:e3:18:6c:20:2e:7b:27:fe:
78:1d:93:b8:53:4d:37:d4:a9:ae:1e:be:6d:ce:29:63:e8:4c:
6e:12:aa:a0:c6:1f:1f:87:b4:7e:b7:ac:5b:5c:63:81:01:f1:
1d:ee:3a:54:2e:c9:f5:a3:92:c9:67:71:9b:8e:b2:c8:cd:35:
fe:b0:4e:12:78:f4:26:8f:a3:a3:b5:11:c0:98:1c:a7:49:e8:
db:61:48:9f:a2:c6:26:b4:c1:ca:08:12:f7:1d:72:83:a6:99:
89:19:a3:bd:2e:e2:28:bf:9c:47:8b:28:1d:d2:a0:de:da:63:
dd:d0:e0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:43:41 2026 by rpki-client