Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: ZHlXeMN6zUtOQFicMWdQbT65R6H1UIBnT8pcVFrdFNg=
Subject key identifier: 0D:3D:45:45:86:F2:CD:D7:66:6B:30:8E:AC:6D:6C:ED:96:44:EC:51
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 019FA74FF32DB113438A0F3EDFF10ACD6899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 06:01:02 +0000
Manifest this update: Tue 28 Jul 2026 06:01:02 +0000
Manifest next update: Wed 29 Jul 2026 06:01:02 +0000
Files and hashes: 1: E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa (hash: Uscjfda3vNy/cunwHUUok4ph0ZEvFOV3pV/NuXcyZJ4=)
2: jQxMjcdrhmgG348-FC6ZQ2XBhWA.roa (hash: zzN6qYWykA9k6vddc6gAA5bY2rFVt0NTvTAU0BcNrqQ=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: hxW66xJIwgCG5TyuMrylypiSXi21FNRRZRb2XPbsT6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:4f:f3:2d:b1:13:43:8a:0f:3e:df:f1:0a:cd:68:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Jul 28 06:01:02 2026 GMT
Not After : Jul 29 06:01:02 2026 GMT
Subject: CN=0d3d454586f2cdd7666b308eac6d6ced9644ec51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5e:6b:42:f9:71:df:ea:0f:d5:4b:15:a8:56:
2d:06:63:72:36:b7:d8:8e:cc:26:33:45:b5:0e:bb:
2b:b7:00:0c:bb:70:79:9c:62:4d:ca:b5:4d:2d:15:
ba:c4:59:85:57:d3:05:47:61:5e:20:74:41:c6:a4:
f9:df:cc:dd:4d:db:92:8a:4e:93:8f:e0:14:0b:80:
13:e2:f6:7b:cb:9a:65:53:e4:85:7b:07:8d:37:5c:
fb:67:07:64:b9:b2:50:99:92:b3:90:76:d0:46:37:
b1:25:f5:59:86:7e:94:bb:d0:a7:f1:02:00:d7:5c:
dd:cc:40:3f:31:e5:2d:61:a4:e8:6a:30:16:56:d0:
89:3c:da:71:ee:e6:45:9f:15:af:eb:02:91:6b:3e:
c3:ad:8a:d7:e9:0c:a3:d3:6c:de:6a:6f:1e:cc:5d:
13:f9:fa:3e:bf:bf:ad:16:5d:8a:a0:ae:28:9c:e7:
50:60:54:58:0a:70:03:66:e9:d9:48:22:3c:6c:21:
a8:bd:38:50:10:3c:33:59:88:83:9d:93:e0:f2:cf:
f4:f2:53:75:7e:4e:5b:d4:21:9c:02:8a:14:3e:67:
f1:f0:be:eb:89:2f:f3:ef:27:74:41:87:17:85:a9:
11:40:14:a1:30:b2:fe:9f:a7:d6:eb:7e:15:16:1b:
d0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3D:45:45:86:F2:CD:D7:66:6B:30:8E:AC:6D:6C:ED:96:44:EC:51
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5c:fc:2f:ac:c1:ab:65:1a:3c:bf:28:10:ff:ca:4a:dc:bd:
ff:59:eb:61:76:13:b3:64:12:be:ab:01:51:57:92:0b:b8:92:
35:65:c7:bb:8a:1f:0c:3d:66:ba:00:1c:83:26:f1:08:19:d8:
56:29:c2:e2:ba:80:9c:a9:df:b6:36:df:4a:e6:34:86:3b:61:
a4:70:33:88:53:87:61:09:ea:dc:eb:85:58:bc:15:75:07:1d:
0f:54:26:4b:34:37:98:aa:9d:c1:19:e3:23:e4:8f:af:70:8a:
62:ff:ce:4d:dd:96:4c:0c:1e:13:97:94:d0:cd:52:0e:05:57:
55:e9:30:f0:a0:51:1c:56:46:9b:b7:1c:50:7c:a9:06:73:3a:
eb:b4:43:7a:d9:28:4b:92:f3:b2:08:7e:55:11:6b:d1:ca:67:
d3:8c:91:74:58:76:76:ac:e8:6e:ee:af:e0:a2:4c:34:c5:76:
cc:35:37:e8:ff:f4:ad:1d:21:ee:5f:39:90:5f:9c:74:5b:78:
38:f0:32:60:f0:1e:dd:75:5e:24:dd:3e:f7:68:ca:1a:26:0b:
03:4c:1f:2b:4f:e8:07:64:7e:df:23:21:da:39:08:c9:4e:5a:
88:20:18:17:6e:4a:d5:73:9c:1c:9b:1a:dd:00:22:df:d5:78:
31:f9:dc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 09:35:24 2026 by rpki-client