Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
File: xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft (raw, json)
Hash identifier: ahXhWRI3BrVdFM1Rn2UGxfvC706qNaWOBaDr2LfDjqo=
Subject key identifier: 42:C7:D2:03:49:24:26:74:3F:C0:2E:A6:7F:77:3F:3C:09:AF:DD:3A
Authority key identifier: C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42
Certificate issuer: /CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
Certificate serial: 019FF6B5339C1B1356864AF51433B81ED3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
Manifest number: 0141
Signing time: Wed 12 Aug 2026 16:01:38 +0000
Manifest this update: Wed 12 Aug 2026 16:01:38 +0000
Manifest next update: Thu 13 Aug 2026 16:01:38 +0000
Files and hashes: 1: YPZjGGUztC1i2ZNYvGgdAsuXTgo.asa (hash: K4CEQz/XSFN1g13QszcoyDmffxNfF6QeHPnFTt4rvN8=)
2: xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl (hash: M0fa3DYGp33oADpRLQi1216sv10MoeX9jBzD7/Cm9wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:b5:33:9c:1b:13:56:86:4a:f5:14:33:b8:1e:d3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
Validity
Not Before: Aug 12 16:01:38 2026 GMT
Not After : Aug 13 16:01:38 2026 GMT
Subject: CN=42c7d203492426743fc02ea67f773f3c09afdd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:c0:4e:a1:b3:ed:2e:c4:9a:e7:e6:66:ef:
3f:0e:6b:d1:ce:e5:3c:bc:cd:52:62:88:f8:2c:85:
a4:11:59:ba:79:0b:15:ef:9f:b8:8d:c0:df:a1:67:
2a:b8:5a:ca:d6:73:be:bb:e7:9f:29:45:f0:7e:ba:
9e:44:08:b7:5f:37:15:c3:91:3a:23:5e:84:07:de:
a8:2f:7a:d2:40:b1:87:bd:5f:d2:19:24:f4:18:d7:
5b:82:62:c3:2a:8b:71:48:15:5c:32:2c:f5:7f:5d:
f9:73:4b:db:79:8b:dc:0f:00:3a:5f:98:19:39:34:
3d:fe:12:5a:c6:b9:00:6f:50:7d:d9:f3:2f:8e:43:
35:3a:56:fc:23:c3:2d:8d:b4:99:cf:d6:ad:75:36:
e2:2b:b7:ab:73:fb:e3:9b:3d:db:e9:70:a1:7c:dc:
08:21:61:e6:52:ee:d4:18:46:8c:37:a2:ae:c2:e4:
81:c7:08:9b:1e:9b:dd:04:62:d6:5b:62:32:56:e0:
ce:b4:e4:7d:ed:39:76:19:1d:1d:56:64:50:2f:27:
0c:56:02:2a:7c:20:4a:87:f1:97:82:aa:12:dd:11:
3a:3c:d5:45:4e:cd:16:80:d6:91:d4:fa:2e:47:fd:
44:b0:f6:e7:42:57:c0:87:5f:0d:1b:b3:c0:0c:5c:
10:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C7:D2:03:49:24:26:74:3F:C0:2E:A6:7F:77:3F:3C:09:AF:DD:3A
X509v3 Authority Key Identifier:
keyid:C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:af:dc:bd:2f:47:eb:a8:14:e0:15:b7:4c:e8:61:eb:7e:8e:
98:fb:2c:e8:38:16:05:a5:3f:cd:38:9f:2d:a7:a1:0a:ad:83:
de:db:20:c0:e6:f7:46:a6:69:ab:e3:1a:6b:7d:5b:da:a9:41:
65:e5:1c:40:03:04:0f:4f:ae:70:64:69:ba:14:6b:0c:bf:06:
83:a0:73:74:27:6b:ba:d8:cd:6c:46:e3:6e:79:81:43:33:00:
fb:85:63:27:e8:61:35:89:2c:36:e9:0a:0f:ab:06:f3:42:b3:
ff:ac:3e:fb:1b:f5:91:48:2a:21:ef:20:2d:44:54:36:c2:96:
64:ac:48:9f:a5:25:ae:7b:ed:39:ab:36:98:c3:a9:44:c9:94:
00:6f:4e:17:78:a5:9c:2f:3a:cf:fc:ce:3c:13:8b:99:d0:19:
f2:de:5c:5f:53:b5:f5:6e:60:09:40:05:a8:82:33:b4:4a:e1:
ea:16:9c:3f:4d:93:e4:50:51:c2:9b:53:3b:15:bc:9a:4d:f1:
6f:f3:6b:45:56:f5:d2:e0:f0:fe:bb:4b:d2:c9:08:3f:a1:41:
9f:98:80:90:c1:05:c8:f7:38:ed:a1:f7:02:c6:37:55:ba:e1:
56:3e:38:c3:2c:32:37:51:1f:74:37:e3:17:5c:d2:a2:bc:21:
54:03:eb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:28:57 2026 by rpki-client