Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: S2NphZhrQFFGGXiDvW55EuiDs8MmxiFRFBu293s/SII=
Subject key identifier: BF:4A:7C:68:9A:CD:CD:DD:E5:1C:18:A2:D6:22:01:C3:4B:AE:AF:44
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 01A003CB9204E2DACC830C99D19598594918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 1289
Signing time: Sat 15 Aug 2026 05:01:07 +0000
Manifest this update: Sat 15 Aug 2026 05:01:07 +0000
Manifest next update: Sun 16 Aug 2026 05:01:07 +0000
Files and hashes: 1: 1HMsGfdsMj6bVCe_HqSPHKmPGQA.roa (hash: Aa+3horScinkb91IcV06nuOTEkzdcEAPUq8TBlQGMDg=)
2: Q6q5ifTmogwJicn2e4z2f5_1UN8.roa (hash: ZCT+LPivkmFqXHHIYRE3kEHzKOk9mVM2bvW0OtpppFg=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: 3KdlSlodJpPETSfr/AxsW/IlEv5xz+U8kHqM6ANNGU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:cb:92:04:e2:da:cc:83:0c:99:d1:95:98:59:49:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Aug 15 05:01:07 2026 GMT
Not After : Aug 16 05:01:07 2026 GMT
Subject: CN=bf4a7c689acdcddde51c18a2d62201c34baeaf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:6a:9f:df:c0:ff:a9:5f:8b:27:5b:d5:81:
37:37:18:85:27:30:5e:ba:82:ef:d8:e0:1b:04:bc:
7a:8a:be:4c:fc:43:43:7f:3a:dc:dc:89:02:0c:8f:
17:b7:67:87:b6:e1:91:41:9a:56:f8:b0:d8:0b:1d:
72:f0:13:f3:db:21:ee:0d:87:e9:56:62:d0:d6:34:
eb:82:9c:d1:35:e6:7d:f2:2d:3c:f5:41:6d:77:9e:
b7:3f:38:8e:95:20:ab:14:a1:f2:5a:4e:74:bb:a0:
fb:b5:54:1b:9a:b7:a1:3c:f5:99:08:1a:9c:1d:07:
34:e6:63:80:28:e7:0d:0c:51:8c:6f:6f:58:aa:88:
8a:73:a0:7d:93:98:e2:55:4d:d1:94:ea:26:93:93:
91:cd:15:68:ab:3a:a9:36:fa:13:ce:f6:d7:bb:cb:
ff:e7:5b:9f:bb:09:65:45:31:ac:f1:ab:62:13:d9:
4c:9d:a0:74:4b:3f:da:ea:76:fd:f6:50:b4:5d:b2:
e5:89:c3:e1:ab:c9:1e:bd:e1:86:d4:5c:a6:ab:f5:
1d:9f:5a:10:15:3b:95:45:35:e6:2d:63:20:49:08:
40:4f:29:26:aa:e0:50:93:6a:ff:b5:dd:10:a6:27:
82:46:79:e1:f6:ef:a3:38:2f:56:31:e9:9b:b4:e5:
0d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4A:7C:68:9A:CD:CD:DD:E5:1C:18:A2:D6:22:01:C3:4B:AE:AF:44
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:be:c1:c5:be:41:91:b1:12:38:6c:25:e9:62:4c:d8:fe:5d:
75:2c:88:3f:30:3a:1c:ef:46:3c:22:4f:bc:c2:a4:7d:67:c8:
1d:78:67:1c:83:e7:c1:d9:71:20:ae:ed:de:ae:6e:a7:88:78:
95:2a:90:da:84:b3:47:70:0f:73:71:7b:4e:42:d2:3c:e5:3b:
69:b3:d9:ec:e9:03:2c:e7:b1:bb:06:5f:66:66:d7:55:d9:21:
51:a7:9f:a4:15:b2:0a:81:88:e8:6f:bc:ec:6c:e5:2c:1c:c7:
70:ac:cf:50:64:a1:ed:08:c5:ba:b8:e3:87:a3:40:51:4c:20:
c9:18:9d:b1:ab:36:68:65:78:c3:44:09:bf:8a:44:46:58:72:
43:c4:25:9d:82:42:ee:da:74:da:a7:d4:c8:52:29:36:d9:a8:
14:16:ca:a3:16:63:2a:cd:5c:db:8b:1e:bc:dc:60:76:74:d5:
aa:a0:a8:3f:f7:a9:a4:d9:5b:76:34:ee:2e:0d:a1:03:7a:bf:
7c:ac:c7:ac:59:aa:e3:f6:9a:61:48:f6:37:1e:03:e3:68:1a:
78:1d:2c:96:35:e2:2d:9b:15:5f:fe:5e:10:bf:bc:eb:90:ec:
f4:37:e9:69:4b:e9:ff:3e:ff:58:87:7d:a0:a0:c5:12:f5:bd:
4c:24:20:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 14:04:20 2026 by rpki-client