Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
File: xLejOGcjuooupILHtoAxpUEirE8.mft (raw, json)
Hash identifier: iRn/2BEJPAVZnSzZSfLmwy6+OThbCIAOi1K4WEX7oYA=
Subject key identifier: E6:AD:30:CB:90:CC:DE:8F:A5:3C:22:EE:71:0C:50:A3:C1:E5:BC:42
Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Certificate serial: 019FA14DAD7104A57DBF1B02C5E151CF6CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
Manifest number: 0835
Signing time: Mon 27 Jul 2026 02:00:50 +0000
Manifest this update: Mon 27 Jul 2026 02:00:50 +0000
Manifest next update: Tue 28 Jul 2026 02:00:50 +0000
Files and hashes: 1: Mk6KT-G0Nd_n-6Ue0npJ0Pqa4CI.roa (hash: 2cQhzB6rvIgJcWKL8JGJ8AUuDd5CAqSH0lZjme07urY=)
2: xLejOGcjuooupILHtoAxpUEirE8.crl (hash: ksoaPQo46nHPYNki5KlNBFmkgyLL64NUvMhknDExitc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:ad:71:04:a5:7d:bf:1b:02:c5:e1:51:cf:6c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Validity
Not Before: Jul 27 02:00:50 2026 GMT
Not After : Jul 28 02:00:50 2026 GMT
Subject: CN=e6ad30cb90ccde8fa53c22ee710c50a3c1e5bc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:00:51:30:bd:43:a3:09:6b:60:7d:cc:de:
50:18:bb:32:d4:0d:06:65:c4:5c:0c:ba:ad:99:7b:
9f:ed:9c:dd:af:58:4a:c0:36:9b:d9:5a:3f:a0:f0:
b4:3f:f3:50:6f:8a:96:0f:cd:ab:2e:a7:82:03:2d:
fe:62:69:d4:b6:d6:f0:2e:12:76:a2:d2:6a:94:12:
fe:30:64:41:da:9e:59:e8:02:73:27:34:b2:62:da:
81:2f:f0:d2:40:81:fe:49:cd:aa:8d:5b:39:ec:b3:
aa:a2:a3:03:54:0c:31:7c:6d:93:4b:eb:7a:d7:e8:
fb:f1:02:cb:2f:e6:2f:6b:2d:ce:a3:08:66:b8:23:
9e:fe:7b:cc:67:55:ae:0a:59:2c:b7:30:b5:44:82:
5e:ed:96:54:c1:00:aa:88:3e:35:a5:89:4c:fd:60:
93:c6:79:00:de:62:70:1e:60:5a:4b:4b:36:9c:41:
1f:20:c1:92:79:2b:37:33:40:2b:81:b8:20:90:cc:
ed:c3:ff:ae:14:3c:95:ef:da:20:e8:35:5f:60:02:
ba:1f:25:df:78:81:61:d8:06:99:f2:07:2c:7f:8c:
75:ff:da:4a:ba:42:44:fd:20:4c:6c:03:5f:98:8a:
75:5f:ae:92:c6:3b:24:03:b8:a5:71:95:c1:a8:50:
57:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AD:30:CB:90:CC:DE:8F:A5:3C:22:EE:71:0C:50:A3:C1:E5:BC:42
X509v3 Authority Key Identifier:
keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d0:4f:7f:42:20:b0:00:5f:e1:5b:3b:cf:e4:44:e2:a4:75:
3e:54:ee:45:8f:e2:81:53:9c:db:06:cb:36:e1:12:10:b7:eb:
42:44:df:22:1b:2d:55:ac:22:95:55:62:91:3f:ed:5b:93:6c:
34:66:c1:e2:8b:fc:50:11:f2:cd:65:b7:d4:e4:78:b9:d0:4a:
76:8a:4d:f7:16:a2:b1:da:cc:2f:90:9c:a1:44:87:ab:ab:ff:
f4:7d:1c:06:0a:a9:77:6a:4d:51:d2:ca:96:61:d9:48:a9:d7:
45:43:6a:bb:2d:06:5a:ac:c7:6c:10:82:39:06:02:99:62:4f:
1f:8c:ac:28:6e:15:5d:c0:a4:bf:d1:04:9a:e4:d0:0a:62:be:
e3:84:3c:5d:97:58:89:ab:b7:e5:a3:a5:27:b2:c4:59:09:97:
ac:dc:78:77:02:c3:36:14:84:d5:a8:ad:47:d1:67:d3:79:48:
11:b2:ad:ad:43:23:5f:b0:4b:50:f2:aa:bf:12:4b:8b:f2:5b:
c8:ab:08:42:18:34:dd:2b:4d:77:10:56:38:eb:b9:85:24:a4:
37:5d:0e:f3:07:be:ba:cc:14:79:9b:a7:3e:c9:80:12:16:7b:
06:a1:9a:e9:de:b5:89:71:50:ef:e7:75:d0:f3:64:f0:12:ff:
f5:18:c1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:00:31 2026 by rpki-client