Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
File: pXlpaAlFNrk-cervrwEKoeg85-o.mft (raw, json)
Hash identifier: OK16rG53Yd1ykqw8HCqMZOtMsnDE3gJLGE/+dOm4x+s=
Subject key identifier: 2E:0B:24:25:5D:8A:AC:3B:C6:CC:D3:24:80:83:8D:1D:B7:7F:92:4E
Authority key identifier: A5:79:69:68:09:45:36:B9:3E:71:EA:EF:AF:01:0A:A1:E8:3C:E7:EA
Certificate issuer: /CN=a5796968094536b93e71eaefaf010aa1e83ce7ea
Certificate serial: 019F9EF19452F94C61479758BB4143A0BCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXlpaAlFNrk-cervrwEKoeg85-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
Manifest number: 47
Signing time: Sun 26 Jul 2026 15:00:59 +0000
Manifest this update: Sun 26 Jul 2026 15:00:59 +0000
Manifest next update: Mon 27 Jul 2026 15:00:59 +0000
Files and hashes: 1: _DzVp-qQbUGUWJR9yTGDbteQ9eI.roa (hash: JCR4JCzOBUmsSicgbt13vgqc/sqq+RW2fZ4Pr3z6YPQ=)
2: pXlpaAlFNrk-cervrwEKoeg85-o.crl (hash: PXhbShYmEfXmq8Iv48iK5D5AuCPAdQW8x2d55DU54uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXlpaAlFNrk-cervrwEKoeg85-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:94:52:f9:4c:61:47:97:58:bb:41:43:a0:bc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5796968094536b93e71eaefaf010aa1e83ce7ea
Validity
Not Before: Jul 26 15:00:59 2026 GMT
Not After : Jul 27 15:00:59 2026 GMT
Subject: CN=2e0b24255d8aac3bc6ccd32480838d1db77f924e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:0f:77:d3:e3:e1:0d:ac:31:43:1e:a7:6f:
23:f2:34:3c:90:18:17:e0:df:2f:da:60:02:3c:e6:
e7:e9:05:41:71:9b:94:b1:ba:54:db:29:b7:71:d7:
ea:13:9f:e3:96:02:96:de:df:a9:32:cd:ce:00:79:
e3:40:34:03:a9:19:e1:b8:c0:a2:7e:4d:b9:64:f6:
95:f6:44:04:e3:5c:02:65:67:68:35:ca:30:bf:a1:
b7:54:1d:ff:79:90:f7:4b:8b:05:0f:c9:6c:59:9d:
68:b6:03:f8:6c:81:4f:dc:64:5e:37:e0:2a:d0:83:
b8:9b:7b:9d:46:af:c5:a6:52:8a:40:b9:4c:26:13:
7b:4c:df:6c:53:28:53:62:99:50:0a:f8:78:46:64:
82:83:d3:01:3c:6d:cc:c1:bd:f8:2d:78:f0:8a:ef:
97:22:2d:34:f1:4b:eb:b6:53:a4:27:c9:8f:a7:f2:
e5:bf:c6:a6:f6:b5:07:fa:2f:ab:14:3a:e8:03:22:
4b:44:ce:3b:6e:0b:ff:0b:a6:4e:f8:72:c6:55:e4:
1b:7a:4c:47:a2:22:93:fc:eb:4b:f5:6e:21:47:ac:
d6:c7:3b:ff:9d:ef:48:97:b7:f6:af:e5:f3:9e:a3:
38:66:6b:60:1c:4f:e4:e7:cc:55:d4:9e:f6:7a:b9:
57:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0B:24:25:5D:8A:AC:3B:C6:CC:D3:24:80:83:8D:1D:B7:7F:92:4E
X509v3 Authority Key Identifier:
keyid:A5:79:69:68:09:45:36:B9:3E:71:EA:EF:AF:01:0A:A1:E8:3C:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXlpaAlFNrk-cervrwEKoeg85-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:30:7c:80:26:4b:83:a3:5c:9d:5a:93:d6:b1:f7:34:c2:7a:
cb:0f:bb:1a:2a:7c:9f:13:92:8f:aa:b0:58:94:d4:fd:6f:1f:
8c:1c:35:94:02:69:58:4e:f1:63:f1:93:1f:59:f7:27:f4:53:
32:5c:87:f1:22:29:e6:f8:e8:9c:50:20:f9:da:47:8c:e8:0f:
de:99:a1:3d:1f:59:1d:81:3b:49:08:24:f1:32:7f:da:09:e2:
76:f2:a0:5f:5d:f2:d9:68:44:94:3e:03:26:17:0a:2b:88:cc:
ae:dc:78:20:a6:12:12:06:89:ba:d7:25:21:9f:6c:c2:39:db:
2c:30:61:8f:c6:e0:ff:3d:86:e1:3e:b7:f3:01:3e:04:88:ee:
4e:2d:6e:d4:52:74:29:c6:07:e5:ea:25:65:91:c4:fc:39:7c:
f0:ba:0c:de:a2:fb:e8:81:31:1e:2d:d3:65:3c:93:41:92:6f:
c6:5a:eb:62:f2:28:f3:ad:d9:f0:cf:9c:76:0c:21:d3:c5:5a:
c3:52:1f:c4:d8:fe:36:ac:93:78:c6:1c:e2:b8:4e:d9:da:24:
ea:7e:c8:b2:92:90:10:b7:0e:d1:cf:6f:1c:ef:26:82:a6:31:
64:22:4d:90:f6:c0:19:c3:a5:07:96:0c:27:03:89:a5:ea:01:
47:59:19:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:19:04 2026 by rpki-client