Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
File: xqnvrGfjS7iro4n_jw16HFZUM_0.mft (raw, json)
Hash identifier: sASqKCQgjGkQtEq6nFSm91j8SEJV1MhGPqw+Zi1wdd0=
Subject key identifier: 13:99:0B:81:A3:52:85:F4:82:64:E3:93:89:CA:E1:77:A5:49:2C:CC
Authority key identifier: C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
Certificate issuer: /CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Certificate serial: 019FA1168A444A7BE2C34ADC9357EB09F0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
Manifest number: 10DA
Signing time: Mon 27 Jul 2026 01:00:36 +0000
Manifest this update: Mon 27 Jul 2026 01:00:36 +0000
Manifest next update: Tue 28 Jul 2026 01:00:36 +0000
Files and hashes: 1: xqnvrGfjS7iro4n_jw16HFZUM_0.crl (hash: yPdJlGk0Krs7pI8gli+AgBtmUUJjKZvwQeQCdLEmCKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:8a:44:4a:7b:e2:c3:4a:dc:93:57:eb:09:f0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Validity
Not Before: Jul 27 01:00:36 2026 GMT
Not After : Jul 28 01:00:36 2026 GMT
Subject: CN=13990b81a35285f48264e39389cae177a5492ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:73:4b:98:91:7d:3b:e8:5d:58:e2:ab:49:
62:f1:5e:f9:f0:c4:3f:a9:81:5a:d1:10:78:cc:46:
ef:dc:b5:5e:9a:cf:d7:79:64:a7:8e:ff:b2:57:51:
c1:fb:0e:cd:b1:23:70:42:38:b7:79:c3:a1:28:1a:
e3:25:16:17:a3:17:0a:c2:7b:17:68:51:3e:da:e3:
3a:6d:72:45:e3:8b:b1:cb:97:c0:45:54:9c:d1:31:
61:43:84:58:34:1d:88:47:65:82:af:48:42:8c:59:
31:66:8f:9e:f3:01:3c:d2:88:58:6b:8e:83:2e:fa:
29:58:23:0b:75:08:21:b6:a8:59:a9:71:36:7d:87:
01:79:d0:a2:ab:57:af:b6:f8:89:26:20:5e:a0:9e:
36:7b:dc:b0:ef:2e:e0:44:5f:cc:9f:97:65:bb:52:
b6:25:b1:cf:b6:62:fe:47:aa:f9:dd:14:47:e1:49:
d6:9b:71:19:1f:6f:cd:0f:be:58:61:eb:c1:2a:30:
7a:95:1b:c8:24:71:a1:e5:6e:65:33:c9:d6:f1:37:
31:91:a1:91:91:1e:14:b9:cb:42:45:4c:c3:b3:ae:
65:4a:40:ca:ef:6a:de:d7:58:51:d4:f8:c5:1d:ad:
1c:6f:4b:db:d4:cd:fe:2d:8b:3b:87:f1:20:ba:19:
87:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:99:0B:81:A3:52:85:F4:82:64:E3:93:89:CA:E1:77:A5:49:2C:CC
X509v3 Authority Key Identifier:
keyid:C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:21:7a:87:be:2b:32:2f:f7:eb:0d:46:f8:be:5a:53:99:5d:
ac:0b:e1:5a:75:ca:69:f3:48:05:55:e7:1d:00:60:a7:2b:0c:
f6:8d:b1:12:51:83:96:d5:dd:f4:12:d0:1f:22:ef:87:88:8f:
ad:60:dc:a5:e0:96:d4:da:c8:cd:7e:4e:b0:c4:fc:9b:21:b6:
64:9b:20:ba:9a:82:3b:2b:54:60:34:52:8b:ec:af:eb:34:ad:
f4:66:e9:e2:12:7f:7b:06:11:6a:83:32:56:e7:14:cc:70:f5:
ff:27:db:1f:ea:d9:99:25:ff:04:ae:b6:01:1e:cd:9b:a9:81:
8f:97:36:c1:45:ee:50:59:21:c1:f9:c5:b8:4e:96:7c:5e:c0:
97:77:28:6a:39:7e:03:c4:a9:91:3c:9c:2c:cd:d0:80:f2:eb:
56:f1:89:4f:1e:04:b0:e5:6c:37:7f:c8:44:b2:f3:f1:f1:24:
e8:fc:73:f5:ed:c9:9f:98:0b:e4:be:8e:89:05:7e:74:64:a3:
81:d5:63:cc:94:b9:f0:94:8d:7c:26:56:90:f2:cd:fd:e9:9f:
1e:15:7b:39:ea:43:d3:34:e4:57:a3:7b:65:e0:92:a0:2d:54:
c1:53:b8:41:dd:16:07:5b:f9:d7:d8:a3:3e:63:07:62:ac:a3:
c8:db:ec:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:37:55 2026 by rpki-client