Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File: X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier: u0Of2Wq3O7s5csjFiwDklGZc/DD2kPtRx4um2kg/SXE=
Subject key identifier: 66:18:AC:C0:08:AE:31:0B:1A:C5:21:B9:A1:9E:D3:09:60:DB:D5:C5
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 019FA1BB813BB1AF9A22857AE75A17A30DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number: 126B
Signing time: Mon 27 Jul 2026 04:00:47 +0000
Manifest this update: Mon 27 Jul 2026 04:00:47 +0000
Manifest next update: Tue 28 Jul 2026 04:00:47 +0000
Files and hashes: 1: 8saY52FM3OItyl4VOSm_edBIkos.roa (hash: BD5qCuL+dtuTG+pcsvXNBMfwvdqjtVm3dC9TZz4R5tA=)
2: AgsPlaew9BxC8H6svqcKUEs4Qhk.roa (hash: 4UR8Vh6eTw1Tv7xe4kRQAuAMN978t94veu9L+yIEOOw=)
3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: e+43tYFZCQ25Kqrnj89TfficZpIPxnp5ocmShG2ObNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:81:3b:b1:af:9a:22:85:7a:e7:5a:17:a3:0d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: Jul 27 04:00:47 2026 GMT
Not After : Jul 28 04:00:47 2026 GMT
Subject: CN=6618acc008ae310b1ac521b9a19ed30960dbd5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:27:bc:a5:ee:4e:91:76:10:99:11:eb:87:
0e:6d:7f:94:cd:fe:1f:07:b1:e7:bd:54:5f:fa:09:
59:06:45:e9:86:42:43:55:96:0c:cd:41:78:fd:c5:
91:1e:49:68:fd:f3:88:7e:4e:51:6f:73:d5:74:1c:
9f:20:e4:14:ba:8a:76:55:5f:88:b8:ed:d9:22:fa:
be:95:eb:3e:49:e7:1a:65:ab:9e:21:39:69:66:e6:
b7:09:15:a3:4a:79:c2:ce:b2:c9:43:18:a8:10:ca:
cb:7e:fd:8e:f1:73:05:bf:4a:e5:34:f4:d3:c6:19:
4e:e8:55:94:80:90:cc:d1:e4:9b:7a:cf:dc:ee:65:
5a:2b:c9:14:56:23:90:b5:49:e7:74:6d:ed:92:e8:
50:11:18:55:c5:f8:1f:86:e5:8d:33:b4:0f:e2:6b:
8e:0e:ac:d7:7f:ab:06:da:18:36:c9:b9:51:47:ff:
13:ed:f2:4c:95:19:73:f4:4e:dc:8a:95:da:ff:6e:
ee:c3:c5:f2:31:76:48:fb:05:dc:c3:53:bf:97:be:
8b:6d:1e:8e:79:58:94:32:81:96:2a:8f:82:e9:77:
c4:a6:85:f6:fa:a9:ed:fd:0c:ac:2e:33:98:26:46:
5e:5e:ac:29:fb:c5:c3:ae:76:b7:b5:23:7e:9c:96:
79:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:18:AC:C0:08:AE:31:0B:1A:C5:21:B9:A1:9E:D3:09:60:DB:D5:C5
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7a:95:58:a5:58:30:2d:22:ce:ef:e5:d3:47:59:88:64:41:
db:09:36:a1:48:1a:ec:df:6f:29:62:b6:d7:ae:f7:7d:13:2e:
20:d1:08:f4:7d:dd:08:06:fe:01:c7:33:6e:ef:b7:4e:7e:10:
ee:5d:73:f5:25:09:7f:c4:11:12:b4:65:d2:bc:e5:78:6a:a1:
49:33:eb:1e:85:38:91:79:98:da:39:d7:24:d2:bb:09:81:ca:
b6:0c:52:c6:49:34:64:e7:98:1d:53:8d:e9:0d:ae:c1:6b:d4:
3e:54:f6:b0:ac:6f:13:8a:38:c0:57:cc:c8:60:df:81:b8:cd:
e6:0e:b6:f1:c0:ac:09:5d:b9:30:92:42:56:85:7d:0d:e6:09:
da:2e:6b:e8:8e:16:61:a1:86:de:c1:d8:30:b5:22:c9:66:69:
f4:b6:9d:e8:ed:31:25:66:f2:d4:ea:ae:29:67:78:43:72:0b:
4d:f5:fd:0c:31:e6:9b:84:0d:3b:ab:3b:5c:6e:b0:7c:67:83:
76:00:38:d8:58:be:70:43:0c:e4:07:f0:21:8c:c9:75:09:43:
63:a3:66:0e:37:33:b8:c4:14:ae:af:36:ce:68:06:08:79:00:
a5:67:95:1b:ee:e4:7d:c0:6e:5a:10:aa:ae:bb:be:00:56:79:
25:c2:32:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:15:05 2026 by rpki-client