Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
File: xNoGacxfwdqe7YsKEzphv-PfWFY.mft (raw, json)
Hash identifier: B9FT7yJs04pRB4jw8BpxiUo1blr09o4mAEw075AMwNY=
Subject key identifier: CD:A8:9B:22:2A:9B:DD:E0:53:B2:13:3E:49:F5:6E:16:9F:23:AC:46
Authority key identifier: C4:DA:06:69:CC:5F:C1:DA:9E:ED:8B:0A:13:3A:61:BF:E3:DF:58:56
Certificate issuer: /CN=c4da0669cc5fc1da9eed8b0a133a61bfe3df5856
Certificate serial: 019F9F27EF5BB7E99DA6E6BFF3431495724D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
Manifest number: 41
Signing time: Sun 26 Jul 2026 16:00:22 +0000
Manifest this update: Sun 26 Jul 2026 16:00:22 +0000
Manifest next update: Mon 27 Jul 2026 16:00:22 +0000
Files and hashes: 1: i4ZMx8XiQ-a_zUvx2M6HCqvrY74.roa (hash: hpsDw2pZ0DBvAOgm+bdbqvL0ShlWV31Jn+1J+8xpu30=)
2: pYUYQEf2s7Z-P_vS-0K2KryHc60.roa (hash: HUauXiB8EmNlBFz7vLwqL2QKaYGDn/MlUmtQHsbrszw=)
3: xNoGacxfwdqe7YsKEzphv-PfWFY.crl (hash: Pys6V1rOwD7qYg7lhccGpbH35uD+Cp1xohkTOimV1rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:27:ef:5b:b7:e9:9d:a6:e6:bf:f3:43:14:95:72:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4da0669cc5fc1da9eed8b0a133a61bfe3df5856
Validity
Not Before: Jul 26 16:00:22 2026 GMT
Not After : Jul 27 16:00:22 2026 GMT
Subject: CN=cda89b222a9bdde053b2133e49f56e169f23ac46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:d6:d4:70:6e:f7:0b:9d:3d:71:12:bd:a7:
4d:4d:1d:5f:f5:ee:1a:8f:7d:ce:c2:c6:83:e5:99:
67:57:ea:63:47:db:ea:d9:98:86:48:0d:2b:73:97:
56:28:9a:7a:e9:cd:bc:ba:5f:6e:20:97:59:18:5c:
97:a3:ca:8c:52:32:c5:29:b4:8f:33:1b:01:b6:3c:
33:f9:92:b6:5e:f7:71:97:48:53:21:73:2f:f9:7f:
1d:90:c8:c8:9e:5d:4a:c9:12:26:a8:78:42:b6:2f:
ed:bb:9d:16:1e:9f:00:66:ba:37:99:c0:38:12:d0:
f5:a6:6b:4c:0c:6e:6d:e0:4f:e5:ab:c6:fd:ae:10:
49:63:8b:60:fe:26:7d:b9:62:32:77:ac:59:fd:fc:
71:68:aa:bb:1d:07:c8:da:8b:87:04:5a:3b:5b:f4:
d7:86:f9:af:64:b5:02:c9:0e:90:7c:ce:0c:c4:25:
54:0f:0b:67:32:24:82:b6:c4:7d:0d:62:c2:ca:ab:
3f:9c:62:36:b5:b6:b2:a7:42:98:eb:68:e6:9c:34:
fc:7f:5d:55:51:46:65:68:72:0a:1e:20:22:d4:f8:
00:0d:0b:65:3f:13:31:b5:84:95:58:d5:d3:96:e6:
ce:e8:41:1b:53:c8:e9:a6:55:01:b0:f0:5f:55:48:
ce:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A8:9B:22:2A:9B:DD:E0:53:B2:13:3E:49:F5:6E:16:9F:23:AC:46
X509v3 Authority Key Identifier:
keyid:C4:DA:06:69:CC:5F:C1:DA:9E:ED:8B:0A:13:3A:61:BF:E3:DF:58:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f6:3b:17:e5:d6:8a:f8:bb:19:8f:0d:7e:c4:f9:bb:d7:af:
bf:15:cc:e5:f7:e4:82:4a:21:d0:ec:df:02:f2:a5:b8:f8:16:
b3:71:15:49:12:dc:62:c8:4b:83:54:1f:ae:2c:03:0f:bd:79:
e8:39:d6:87:6c:ea:1f:cc:52:1d:9a:ac:ad:45:4d:68:18:24:
3a:5e:14:04:5c:6b:e4:e4:86:cd:d7:c7:f4:08:fe:91:e6:3e:
e0:79:c3:ec:a5:93:0e:75:68:61:62:91:07:31:6e:5b:a9:03:
1b:dc:ab:c6:af:a7:85:6d:b4:0b:ca:67:cc:bd:01:05:6f:72:
fd:a2:2d:bf:d6:5e:29:81:a3:66:c3:ac:7d:fa:99:71:42:ce:
27:f3:43:61:92:c4:6e:66:ed:84:63:24:0a:2e:db:4f:f2:fd:
bc:15:cb:c4:80:fb:ce:4d:0c:29:70:c8:90:04:c2:22:9b:2d:
31:6f:0e:86:0d:c7:68:18:c2:a4:d4:1a:b3:4c:d0:f2:02:63:
f7:c3:fc:5e:d6:d8:8c:82:df:bf:d2:c1:80:09:97:24:86:01:
16:10:36:c4:57:20:21:88:9d:12:92:38:96:60:ee:df:ff:25:
2d:b1:2a:9d:fc:7f:3c:93:f2:ee:25:40:3d:b1:a9:0f:15:09:
8d:23:41:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:51:52 2026 by rpki-client