Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier: r9DMW2EgRCGqu/UDF9vGJ+P/hivDVT5k4tK3TYm16bQ=
Subject key identifier: 0E:49:3A:3E:3A:A2:A2:4E:44:0A:C1:0F:9F:71:06:58:18:22:70:84
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial: 019FDB3DCD2BE8BCE6E318DCCCE3BBE5D621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number: 1842
Signing time: Fri 07 Aug 2026 08:01:28 +0000
Manifest this update: Fri 07 Aug 2026 08:01:28 +0000
Manifest next update: Sat 08 Aug 2026 08:01:28 +0000
Files and hashes: 1: RA_P8M2CbE3vpnTaUf4TR1pQq4c.roa (hash: sqZi/SBA/dg8k8Qf9vK6EYY7YFO+mp6oMfC87nRDLEY=)
2: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: cG+vi2r9drCnhjY6DgEpsSeugV+WKquVjRNlN5d4f44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:3d:cd:2b:e8:bc:e6:e3:18:dc:cc:e3:bb:e5:d6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Validity
Not Before: Aug 7 08:01:28 2026 GMT
Not After : Aug 8 08:01:28 2026 GMT
Subject: CN=0e493a3e3aa2a24e440ac10f9f71065818227084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:3f:55:b5:fd:7e:a2:92:f6:0e:30:5c:31:
c0:9e:13:da:2c:e8:f3:36:0d:70:69:d3:7e:82:92:
d4:3c:30:cc:3f:a2:69:2e:9a:cb:6e:5f:44:fc:46:
ba:c0:69:7d:de:9b:89:6f:60:3e:83:0a:ea:96:a7:
72:92:82:18:d7:ff:a4:c3:20:44:8c:af:fe:21:02:
aa:4c:ae:8a:c6:11:31:44:4d:39:b0:22:4e:38:78:
f0:e8:5b:ee:71:ce:ae:c4:2d:fa:91:33:b0:0f:e9:
e7:9a:02:d8:b7:ff:5e:fd:20:eb:84:35:43:c5:44:
51:f0:93:af:c0:a8:a6:97:8c:f3:58:1c:59:ac:2a:
dc:8d:9e:03:7c:ed:70:e7:f7:aa:b9:79:d6:57:c0:
10:e4:96:c3:67:57:c7:0c:de:93:99:9f:fe:b9:80:
89:53:b8:c0:30:86:a0:a7:b4:92:42:8c:6a:51:77:
31:d6:3b:98:5f:75:db:bf:5f:37:5c:f5:6c:7b:bd:
20:98:1b:d3:95:3b:64:83:2e:e2:2e:0c:92:84:8d:
11:9b:07:13:84:48:83:90:10:aa:0d:1c:1e:40:40:
6a:98:f5:e0:5f:81:7a:8a:c7:55:b3:e0:87:e5:65:
e4:3d:c6:26:2b:46:69:57:2d:42:44:c4:2d:47:f7:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:49:3A:3E:3A:A2:A2:4E:44:0A:C1:0F:9F:71:06:58:18:22:70:84
X509v3 Authority Key Identifier:
keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e5:37:6f:09:57:aa:4e:d6:aa:95:d7:e7:d4:b4:db:e9:8b:
98:31:18:38:f7:fa:cb:a0:32:e4:e8:b0:66:6c:1f:51:ce:0b:
27:3c:12:c6:c3:e0:dc:00:f3:d4:9b:49:2e:a5:c3:be:d4:ef:
6c:ee:06:1d:87:dc:9e:53:fc:9d:94:23:e8:74:05:9e:97:5b:
93:b3:a1:39:76:d2:af:71:eb:01:9d:88:3a:42:4e:af:34:d0:
82:30:c0:c9:2e:e6:e5:33:39:a1:f6:45:8e:43:f1:3c:41:d2:
06:5b:3b:50:da:75:57:a1:bb:d9:f7:f4:c8:72:9c:96:d7:cf:
5d:b6:4e:7d:4f:2b:0a:49:26:c5:fb:7c:2e:92:57:96:37:47:
4a:16:30:a5:bd:3a:25:6e:ef:02:37:b7:64:5d:e2:cd:c4:fc:
bb:f7:4a:3f:1b:3a:1b:ea:8f:51:53:26:8b:93:e3:c7:16:62:
9a:e8:a3:28:d5:eb:c0:e5:fe:15:0c:e5:71:87:a0:dd:45:d5:
a3:52:6b:40:48:17:8b:ec:89:67:62:79:3b:50:f1:26:b5:c5:
cb:c0:43:50:f1:c0:19:9c:ba:fd:a5:98:0e:82:d2:43:27:15:
7d:41:dc:15:d7:16:8e:ad:0b:99:a4:08:12:77:0f:f6:7a:91:
2d:c1:b4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 11:41:00 2026 by rpki-client