
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
File: _XTetBhEJvpiIlthIMNnBvc3uOI.mft (raw, json)
Hash identifier: Ok42C+Mnpwx74G/7TrGb6RVfe4lCdm8ZjnlX4dYwJXM=
Subject key identifier: EB:8A:90:E7:2B:FB:C0:45:FF:8E:2F:43:D4:C9:8E:D0:FB:9E:9D:AB
Authority key identifier: FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
Certificate issuer: /CN=fd74deb4184426fa62225b6120c36706f737b8e2
Certificate serial: 01A00326A4E04202709CFBA5D5383A4CFAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
Manifest number: 1A02
Signing time: Sat 15 Aug 2026 02:00:59 +0000
Manifest this update: Sat 15 Aug 2026 02:00:59 +0000
Manifest next update: Sun 16 Aug 2026 02:00:59 +0000
Files and hashes: 1: 4H3kqbZKgvCRJ41TW2E8J1NDC88.roa (hash: ah0Wo037A9MM/sUCKBiJ/BqofxWUcKYL1Cq5STwAUy8=)
2: _XTetBhEJvpiIlthIMNnBvc3uOI.crl (hash: axyJLWpE2y2tlUWjgaPn8XS2TPmNXabACqRQsN5Z7Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:a4:e0:42:02:70:9c:fb:a5:d5:38:3a:4c:fa:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd74deb4184426fa62225b6120c36706f737b8e2
Validity
Not Before: Aug 15 02:00:59 2026 GMT
Not After : Aug 16 02:00:59 2026 GMT
Subject: CN=eb8a90e72bfbc045ff8e2f43d4c98ed0fb9e9dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:d7:ac:ee:b1:42:ea:c8:d5:4e:4a:76:ff:
2b:2b:36:e4:29:0b:a5:d8:26:46:ff:f2:e9:b7:ea:
cd:31:fe:32:aa:62:dc:26:52:9d:50:ed:58:96:5c:
4c:71:01:b2:94:93:47:a2:6f:03:cd:30:95:6a:22:
2e:57:29:2c:b2:58:70:28:cf:46:a8:26:fd:e6:67:
da:1b:e5:a5:d6:b8:c4:fe:5c:35:7d:bd:d8:8b:90:
4b:10:81:c0:09:be:da:d5:87:26:98:0c:b7:26:df:
e2:3c:c5:c7:53:f7:16:35:e6:42:c8:4d:8a:2e:9a:
eb:f8:54:79:65:c2:c6:75:57:7f:1d:bb:f0:35:8a:
ee:93:55:22:a0:c3:20:03:27:df:74:cb:5d:63:6f:
8b:06:f4:6c:3f:d4:3d:df:f8:fd:d4:dc:8a:e4:d0:
91:8b:5c:0a:e7:91:af:19:c3:a6:83:66:e8:92:2a:
c0:a9:ee:2c:66:27:49:96:62:64:a7:42:ce:3c:75:
35:8e:92:81:73:f7:07:9b:41:e6:3f:5a:14:09:bd:
0b:f6:68:65:bb:1f:c0:d1:13:1f:51:f4:6d:2e:4d:
31:2a:a3:0c:52:78:10:70:8c:6d:d4:17:f8:ce:5b:
88:26:ea:6d:d5:15:ac:5d:f9:22:77:2a:2b:a9:2d:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8A:90:E7:2B:FB:C0:45:FF:8E:2F:43:D4:C9:8E:D0:FB:9E:9D:AB
X509v3 Authority Key Identifier:
keyid:FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f4:00:53:de:2a:dc:a9:c9:fb:99:c4:a4:d6:f1:11:36:9c:
f2:0c:92:aa:29:08:c1:53:cd:50:0d:45:91:83:e3:55:fb:c8:
a3:d8:2f:3d:a4:9f:5a:d3:a5:7f:6f:68:e8:dc:38:c9:e6:46:
e6:c2:31:c1:fd:b9:4d:21:15:f4:44:c4:0f:a8:b9:e5:21:4f:
8f:46:02:35:13:7d:78:8e:47:16:93:64:af:17:a3:99:d6:3a:
fd:71:c6:0d:7a:ac:62:83:1d:e2:00:4f:14:83:1a:83:9b:49:
99:36:be:26:c0:fd:86:1d:9b:80:c1:7b:d8:90:2e:64:46:88:
72:70:a9:f1:7e:d7:96:96:a5:71:0d:ee:99:00:5b:b2:14:86:
b2:ae:6a:ae:1d:61:2d:bb:1c:2c:19:f3:5a:ba:50:21:59:b9:
8b:be:1c:5b:3b:a7:96:27:07:98:4f:2d:4b:a9:09:b0:49:c6:
a7:8c:fc:f4:d5:b6:70:77:96:4f:9e:b3:0b:97:22:3e:e4:cc:
a5:4c:15:c7:37:24:91:ba:6d:6a:87:d1:07:cb:9e:1f:01:2b:
25:f8:18:61:94:33:9d:24:87:fb:ce:81:64:fc:09:5f:9d:3b:
f0:90:2c:99:b1:c4:7a:f3:f5:36:ff:a8:f4:b7:54:79:67:24:
ad:59:c7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:27:02 2026 by rpki-client