Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: RdOo8GSR4SQtJITK0yXqHdekaalvzXrWCG6AjHqVexk=
Subject key identifier: 26:4F:29:C7:A1:0B:64:7D:8B:3B:69:5F:72:D7:65:57:59:42:1F:09
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 019FA0DFD8BD390BF7B91EB0A18F2615D292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 00:00:52 +0000
Manifest this update: Mon 27 Jul 2026 00:00:52 +0000
Manifest next update: Tue 28 Jul 2026 00:00:52 +0000
Files and hashes: 1: 7dSZZTHJ1-e2dDdweLpiAslwQS0.roa (hash: TsQjPnCqokf75A2IgOvFTsvPj11pJfIjU93Enfc2xSU=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: 33TlnfOuf5jnB00bLu3CBvFudyThRzc/E5nACNa4jro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:d8:bd:39:0b:f7:b9:1e:b0:a1:8f:26:15:d2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Jul 27 00:00:52 2026 GMT
Not After : Jul 28 00:00:52 2026 GMT
Subject: CN=264f29c7a10b647d8b3b695f72d7655759421f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:33:05:cb:2b:71:1c:eb:52:d6:b6:17:9c:bc:
4a:06:6e:a6:50:2f:e7:c2:ea:2a:08:8f:9c:5e:a0:
ab:3a:54:8f:0f:f9:fc:18:18:e2:60:22:32:3e:40:
ac:f4:3f:e3:84:1a:03:9b:de:5a:6d:c4:d2:ff:80:
22:fe:38:42:a6:e8:bb:7a:74:27:06:0d:b2:2f:98:
e2:f6:29:63:53:3c:c8:a7:76:56:2e:39:e1:71:8f:
4a:00:7a:c0:b3:f7:d2:8d:cb:3b:98:f2:dc:ff:74:
d4:1c:f1:3a:e3:5d:8f:9c:4f:12:71:11:c4:68:63:
a3:4f:59:45:2f:79:b0:58:c7:1f:06:d0:86:bc:d7:
97:8f:22:f2:64:0d:22:97:3e:bc:cc:1a:34:f7:68:
69:9d:01:bb:43:69:9f:3b:33:16:1a:c4:a4:7a:ad:
d4:07:0a:39:81:6a:71:eb:48:ea:f6:75:6c:a5:6f:
eb:df:18:49:56:9f:82:97:ca:18:0b:7e:af:ff:ea:
23:c6:ef:60:b7:aa:ba:7c:d8:de:85:07:cf:7e:23:
b9:fc:ed:67:f7:55:70:87:56:43:28:f9:6b:55:03:
14:ae:47:b8:51:a5:9a:ce:9e:51:4b:e0:db:b2:d8:
14:e6:aa:7d:97:0e:b9:0f:33:18:82:7f:62:5c:30:
39:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4F:29:C7:A1:0B:64:7D:8B:3B:69:5F:72:D7:65:57:59:42:1F:09
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:78:ef:fb:0b:93:e5:5d:9d:7e:da:98:07:b9:4a:7b:32:3d:
44:57:c8:3a:4a:f0:26:1b:18:52:fe:6c:40:4d:92:9a:0b:c5:
2e:94:da:f8:6b:89:bf:4c:f8:69:35:09:f1:8c:a9:7c:69:c0:
10:6f:55:de:cd:7a:0c:fb:26:60:a1:bf:05:c2:a0:4e:87:cf:
82:cf:aa:bd:b2:74:0c:fe:62:be:79:a9:dc:9d:86:e2:15:b2:
fa:a9:63:56:10:02:d7:93:8d:fb:ab:4b:a7:39:16:63:a6:bc:
94:7c:f3:3f:b9:af:8b:45:1b:0a:b2:c1:ba:ac:1a:6e:3e:7e:
63:2c:42:b9:9d:65:60:0c:8c:2c:36:a7:55:75:05:e9:df:78:
3b:1b:b8:7f:7d:ba:b8:d6:31:bc:4b:04:a6:c8:a9:6c:96:48:
9d:ff:83:e0:8f:6f:2e:6f:5b:45:3a:b0:18:8c:f1:91:13:f9:
db:d0:79:46:bf:38:56:9c:dd:cb:b3:36:7f:65:f9:1d:84:13:
25:43:d0:b0:9e:3e:92:f9:08:c1:bb:e9:8b:9e:ca:cb:99:58:
f7:ce:39:90:6f:46:58:46:96:8c:e3:1b:49:a7:ba:9f:b9:47:
06:7b:03:da:4f:93:c2:4b:90:0f:6c:ff:d9:08:e6:06:29:00:
71:c0:9d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:12:30 2026 by rpki-client