Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json)
Hash identifier: pqGJuJ13gMrWwm6SwX1u+aSw77ybnUj08fwrMdGnKsU=
Subject key identifier: 08:9D:FD:30:3D:C7:84:45:03:D2:B0:7B:FB:4F:60:45:70:68:C5:09
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial: 019FA116BC030A5F41A3F282CE7F90B5E4A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
Manifest number: 06B5
Signing time: Mon 27 Jul 2026 01:00:49 +0000
Manifest this update: Mon 27 Jul 2026 01:00:49 +0000
Manifest next update: Tue 28 Jul 2026 01:00:49 +0000
Files and hashes: 1: EhoGVGxSzJ85EDf-pwsVPGfHrjk.roa (hash: bYaigFFh4NG+rmCpPKbaSMIoScBrwWuRStJPl8NxmHQ=)
2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: 409ymh4drAp0XiU86Ed4m/ptF5Jo0uPxYwBd2q70Zio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:bc:03:0a:5f:41:a3:f2:82:ce:7f:90:b5:e4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Validity
Not Before: Jul 27 01:00:49 2026 GMT
Not After : Jul 28 01:00:49 2026 GMT
Subject: CN=089dfd303dc7844503d2b07bfb4f60457068c509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:7b:28:f5:ae:89:2b:27:03:cb:ae:95:f2:
5c:05:fd:0c:4c:8f:95:d4:c5:3e:3d:dc:c9:17:5f:
dd:b8:43:86:62:cd:ca:53:c6:69:2c:d1:71:38:75:
9c:69:7f:87:3e:04:38:cf:7b:3c:cd:9b:ca:85:92:
c7:7c:e5:19:70:93:09:37:21:d7:74:50:1e:2d:66:
f6:6f:9a:de:f7:6a:66:3c:d7:06:d7:54:14:a3:60:
40:97:1f:66:65:3f:d7:be:95:e4:5a:93:6b:7e:bc:
09:87:6a:24:2d:23:da:e4:4c:cb:cf:8f:19:81:b1:
ef:e5:73:ba:74:6a:3f:13:6d:82:a5:8c:fe:38:b3:
55:32:1b:84:2c:62:ef:c1:82:c6:82:26:4d:6b:d3:
ab:05:5e:bd:56:8f:32:46:95:98:4a:08:b5:4d:34:
9c:1e:f6:99:e5:cf:8c:61:76:d8:d1:ff:9d:00:b7:
38:30:a4:31:f2:88:2a:df:15:f1:7f:b1:8d:a2:ca:
87:a0:d9:60:f2:2d:6d:32:cb:1a:04:cb:57:c3:b1:
a7:d2:c1:18:41:b4:0b:e7:ed:7c:15:1b:e5:b0:d8:
0f:68:37:fc:3e:66:f9:4a:9f:22:2a:67:b8:2f:66:
33:cc:74:af:20:73:2f:2e:7d:6c:23:b9:08:68:7f:
3a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9D:FD:30:3D:C7:84:45:03:D2:B0:7B:FB:4F:60:45:70:68:C5:09
X509v3 Authority Key Identifier:
keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fa:7c:fb:d5:a3:a1:34:6b:3e:bf:0d:cc:f6:ec:4e:8e:39:
0c:40:d9:7f:1f:ba:fb:36:0d:62:52:87:4f:e9:c2:42:b2:90:
39:d8:02:2d:c9:59:11:c9:c4:7d:a4:f9:d0:31:50:9c:53:25:
37:0a:b0:e8:d4:56:28:3f:80:6c:a5:cf:2e:5c:d9:40:62:44:
e9:57:a6:f2:a7:2c:d6:c9:80:42:2f:de:e8:8a:9f:70:74:d9:
c9:c0:0e:9e:52:4f:74:0f:4a:19:2a:f9:33:e2:eb:42:6b:71:
2b:e7:7f:3e:27:74:d2:1c:9f:77:ac:41:12:af:1a:c8:66:97:
17:28:3e:c3:b5:4a:f2:2d:91:0e:9c:e0:32:b4:af:ad:11:2c:
f8:cc:77:fb:df:2e:9e:b4:a8:a2:95:f3:4c:51:01:12:b6:8a:
da:02:b9:73:e3:59:fb:b0:38:71:37:21:67:48:ad:f0:28:c9:
1b:bf:80:69:85:84:61:5c:a4:6a:94:44:02:7e:8d:91:fa:87:
70:d4:f9:fe:bf:97:b2:27:a0:3f:77:d0:82:17:8e:de:b2:93:
0b:21:15:00:26:b6:fb:a0:7c:b3:f4:1e:86:ae:f6:c8:81:d4:
f1:82:ae:3e:87:64:62:b7:32:ed:f2:ce:4c:f5:1f:b8:22:5c:
1c:96:5d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:05:19 2026 by rpki-client