Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: bkHhSzHq8qW2D4hiZGquwI2G+MEOnP8qc0I5WaQGPjQ=
Subject key identifier: 81:BF:06:4F:AE:06:4E:63:93:59:7B:7A:38:B0:FD:CD:68:80:B0:71
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 019F84FA9A5A2BCFA1A6AE1A610BC6A45979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 19C3
Signing time: Tue 21 Jul 2026 14:00:43 +0000
Manifest this update: Tue 21 Jul 2026 14:00:43 +0000
Manifest next update: Wed 22 Jul 2026 14:00:43 +0000
Files and hashes: 1: 8bjq5CLAkMYnJtGthdYrockLCPY.roa (hash: eDG4zg9ilYUKjh0gJA5+ITJl6INuXH1V6df209hapIs=)
2: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: kwF07uSbBNYTl3lVN4WVwHVNbloaFwBpBaFtmZjy90c=)
3: y6q-4aOfHflX0pozAnd7z21SiEw.roa (hash: BNrcMKA3+AgY/9eYfHPZuG3AM/va4c4zSTiZb/uHiLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:9a:5a:2b:cf:a1:a6:ae:1a:61:0b:c6:a4:59:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Jul 21 14:00:43 2026 GMT
Not After : Jul 22 14:00:43 2026 GMT
Subject: CN=81bf064fae064e6393597b7a38b0fdcd6880b071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:c8:2d:c2:7f:19:87:3d:25:ee:07:76:99:
30:08:44:9c:92:30:82:54:5b:4b:28:00:3c:90:2f:
4d:21:36:58:27:55:12:3b:e0:5f:31:ba:9a:70:3e:
15:90:9e:eb:39:25:1a:20:7d:bd:a2:74:12:e8:c4:
f7:c8:fe:29:af:65:11:27:3f:e9:44:c6:a9:69:32:
87:02:5a:4c:38:7b:67:ed:d6:05:2a:e0:4b:01:5b:
72:89:d2:f6:db:c9:f0:8f:83:84:82:72:fb:5e:63:
84:c7:91:d0:1f:9c:43:f4:8c:0c:dc:80:d2:18:24:
28:55:05:66:a9:95:5c:e3:44:c6:03:6a:26:8d:d5:
91:ed:ed:fc:b2:75:37:cd:a2:c9:41:63:cd:5f:b0:
5b:26:35:4b:6d:70:71:0c:99:40:1d:9b:a1:16:48:
21:e6:a7:a5:f5:ce:a3:d6:9c:09:8f:47:31:7d:a9:
1d:44:b7:6b:87:dd:3a:b2:a0:9f:25:b0:e6:d9:4f:
fd:75:61:b7:f2:30:47:ca:24:d9:9b:9c:3d:b3:13:
b1:fc:02:fb:f1:d0:c1:e3:c2:6b:07:90:ef:d6:16:
3b:da:47:04:6c:29:10:24:ef:ce:9b:6d:f1:70:fe:
7d:df:af:61:63:ff:11:c8:52:24:4c:b8:8b:d9:48:
e6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BF:06:4F:AE:06:4E:63:93:59:7B:7A:38:B0:FD:CD:68:80:B0:71
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5d:0d:53:50:7d:b0:fa:da:23:b3:e8:14:3e:23:9a:39:7b:
cf:ac:bf:db:66:23:3f:55:a9:c9:79:9a:5d:9a:d0:6a:23:1f:
b1:d7:c8:15:7c:dc:0c:b6:04:8d:00:4c:c0:4c:c9:ec:80:76:
33:29:de:9c:23:59:bc:40:77:a7:24:16:9e:ac:69:0b:f1:d1:
3c:82:c6:d5:c8:75:9b:21:7f:4d:b8:c3:7a:a7:07:b4:7f:dd:
20:12:9e:16:77:6f:57:14:db:6f:46:d7:07:7a:78:ce:3e:b5:
e6:8d:af:55:1b:6f:d3:02:68:ea:16:8f:69:75:40:3c:76:8e:
66:40:4d:c3:03:5e:c9:dc:0b:5a:7d:7e:ae:4e:c5:e5:e5:ff:
67:b0:39:a7:e6:d6:04:51:eb:a3:79:0d:5c:ff:d6:49:c3:ca:
48:ff:a5:64:51:b8:6a:df:95:84:23:62:99:52:77:a0:7f:72:
2e:db:bc:51:56:47:1f:8e:85:18:46:1e:1b:b4:bc:5e:37:ed:
7e:b3:48:d8:d5:1c:5a:7f:4f:f3:5f:5c:3e:61:68:c7:2a:5b:
b7:c3:f1:15:f0:d3:f2:75:03:ba:f4:f6:8e:fd:bf:57:8c:7f:
f5:68:7a:f7:97:94:50:16:e2:b2:9c:bd:61:10:9d:b5:bf:3d:
fd:69:37:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:26:42 2026 by rpki-client