Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
File: xg8yRv3WG6G1eS_hrsStypjXWlw.mft (raw, json)
Hash identifier: G4u6JdoJ7HZ4cKnYBw682/M4Qj0KLf3V8f5absNzV2I=
Subject key identifier: FF:FA:A7:E9:8E:21:BA:BB:7C:FC:4F:9F:C7:6B:DF:58:2F:13:17:DA
Authority key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
Certificate issuer: /CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Certificate serial: 019F72F42F53DB719023542401FAC9197A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
Manifest number: 0398
Signing time: Sat 18 Jul 2026 02:00:33 +0000
Manifest this update: Sat 18 Jul 2026 02:00:33 +0000
Manifest next update: Sun 19 Jul 2026 02:00:33 +0000
Files and hashes: 1: MmQGKSoH5LF3BVkr3ibrE-H9I9E.roa (hash: yWJCfOrBqqRptAvrnSvVrhM/S/WywcoV/IXeHHMd0es=)
2: xg8yRv3WG6G1eS_hrsStypjXWlw.crl (hash: waX+YFAbPMsLUvXtrqJJtplWxUAKOr5BeNRLGeNSUl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:f4:2f:53:db:71:90:23:54:24:01:fa:c9:19:7a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Validity
Not Before: Jul 18 02:00:33 2026 GMT
Not After : Jul 19 02:00:33 2026 GMT
Subject: CN=fffaa7e98e21babb7cfc4f9fc76bdf582f1317da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:2f:cd:4f:cd:78:c0:95:99:ac:82:5f:87:
7c:aa:2d:be:87:76:f7:87:30:2a:dc:e8:8d:94:ad:
e0:bc:e4:1b:c7:47:11:bf:d1:2c:88:b3:41:06:cd:
32:51:92:81:b4:cb:d8:12:d2:76:49:39:5e:4a:d3:
d9:98:3f:ae:1f:ec:0d:1a:39:15:31:86:d5:b1:b6:
3f:65:5f:21:8b:e6:ae:9f:ee:45:43:50:84:5e:e3:
78:c4:d9:bd:7e:9c:6d:de:e6:c0:17:15:f4:99:2d:
1f:cb:c4:5f:8f:a0:ef:1e:04:86:99:91:8a:ae:b1:
02:fd:68:f7:23:d0:15:0a:d1:f3:f6:ba:ab:c1:ef:
fe:b8:6b:bd:e1:2c:a9:52:43:45:f0:d8:75:f5:a5:
b3:c6:43:7c:2d:67:33:10:4b:ac:18:eb:15:ad:3e:
52:80:f3:bc:dd:00:45:25:11:bf:77:4f:2d:e6:91:
b2:e6:74:95:1d:04:27:5a:a4:f7:fa:b5:dd:22:a5:
8e:2d:92:2d:ad:3c:18:8e:77:bb:25:e8:5b:20:e4:
33:f8:7b:ef:ff:8b:52:d2:94:43:53:43:5d:01:9b:
9e:82:ed:2f:32:c7:47:e0:11:0a:16:62:a6:d8:c7:
e3:c7:c8:fa:d9:22:e8:f9:52:e5:c1:25:55:65:81:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FA:A7:E9:8E:21:BA:BB:7C:FC:4F:9F:C7:6B:DF:58:2F:13:17:DA
X509v3 Authority Key Identifier:
keyid:C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:68:17:4b:7e:90:44:94:94:98:89:d6:6c:f0:fc:cd:a6:d8:
93:97:51:a8:2b:de:70:15:55:6d:59:68:b2:af:ad:a9:7e:1f:
3b:2d:5e:b5:8f:2a:2c:7f:c9:89:c0:13:34:52:34:f3:49:15:
dd:ae:54:a6:43:66:f5:ab:fa:5e:db:9b:7d:40:b3:ae:2e:56:
58:86:25:bb:bb:59:7e:ea:2c:44:72:6a:ec:6a:d5:a3:85:89:
4b:7d:0f:69:80:b8:ee:12:20:a1:fd:f5:d9:c9:e1:08:90:09:
e5:d5:99:74:a1:1c:6a:51:be:e2:f7:9c:2f:1d:9a:56:9e:12:
4d:31:50:c7:bf:84:55:bb:5c:06:69:37:b5:29:c0:35:a6:62:
6e:ae:93:95:a9:d2:ed:8c:e6:a3:64:90:3c:bc:f8:8a:a3:2d:
59:97:99:34:b6:28:9c:49:6d:17:66:60:50:d9:90:93:64:82:
8a:d5:0b:a5:04:99:84:53:eb:e3:42:0e:e3:c1:b7:86:2d:ba:
34:4b:f9:3a:7e:7b:8f:8f:fe:57:7a:21:03:ef:52:d6:d5:6a:
02:16:3e:cf:26:46:f7:bc:bc:2f:0a:1f:be:f6:e7:41:2e:c5:
c8:96:95:1e:6a:4f:7a:e8:17:f2:24:c2:c6:19:23:52:27:e8:
aa:53:3e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:39 2026 by rpki-client