Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: 0t2NPIPAsdNnjs42SQzyIIjaK2W8uwJ8SmVmufTRJfA=
Subject key identifier: A2:FF:E9:69:12:A5:D2:EA:37:D9:6F:B0:32:FC:5F:0C:A9:21:CB:13
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 019FF91126DF215CA2382BDCC26B2EE58A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 19FB
Signing time: Thu 13 Aug 2026 03:01:18 +0000
Manifest this update: Thu 13 Aug 2026 03:01:18 +0000
Manifest next update: Fri 14 Aug 2026 03:01:18 +0000
Files and hashes: 1: Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa (hash: rjml5J5gqgFMe9KzjlWTkxUk0orx3tU+r2zl+R9xROo=)
2: wcLWWQG314JWSm8pfpN9yL_5EII.roa (hash: D4VS38hxLq9k1urmiJ5Azd8OYDvuYJ5hUnqD5WiA9F0=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: 19sc99F/i+Mm3nJDCvFdnQ4bFFBhzBJrW2YjQUIWMho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:11:26:df:21:5c:a2:38:2b:dc:c2:6b:2e:e5:8a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Aug 13 03:01:18 2026 GMT
Not After : Aug 14 03:01:18 2026 GMT
Subject: CN=a2ffe96912a5d2ea37d96fb032fc5f0ca921cb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:30:81:6a:ab:54:11:0d:73:f6:ea:fd:c1:
84:d8:5c:47:2a:26:04:a1:b0:9c:f3:12:65:7e:e9:
63:5a:4b:5d:c7:db:68:67:25:3c:5e:c4:b5:66:2a:
4e:c4:88:97:56:71:56:2f:e5:86:dc:c0:9a:bb:41:
47:89:a5:45:6f:08:ac:39:bc:db:5c:24:e2:92:2f:
da:ae:37:ec:db:d3:e3:9c:25:6f:e0:06:60:33:fb:
46:db:a8:09:4d:e8:2f:a3:d5:97:1e:ea:74:fe:74:
03:a9:19:6e:b1:15:95:fa:ef:7a:5c:1c:04:3b:1d:
1a:f4:6f:83:89:98:e4:b3:cf:6c:d2:15:23:6f:4e:
1a:4a:f7:77:78:aa:98:74:e1:70:e6:cd:9a:dc:96:
f2:1a:5b:de:f9:7e:c8:ff:14:ea:ca:d9:4d:d7:4a:
a7:58:ab:63:5f:2b:c8:b2:22:37:34:0d:9a:62:bc:
aa:6e:e9:84:d7:e0:a9:1c:e2:35:0b:f7:1a:3c:d4:
7f:a6:bb:38:5f:61:a6:9b:61:ed:9c:cc:89:bf:c1:
ef:bb:ae:da:27:ed:cc:62:ac:b8:86:aa:50:d4:83:
eb:25:b2:37:50:aa:d2:04:3a:77:ce:e8:ad:1c:99:
1a:42:d7:e1:fb:01:56:cd:66:de:89:90:ad:aa:0f:
3a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FF:E9:69:12:A5:D2:EA:37:D9:6F:B0:32:FC:5F:0C:A9:21:CB:13
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7b:57:30:77:38:8f:9c:e1:c2:74:3c:09:cf:33:58:09:8b:
c7:e6:b2:f6:ae:8b:7c:d2:cf:1c:48:fa:77:88:e6:ab:0a:05:
77:93:b0:02:d5:d6:16:d2:0b:15:f5:43:7d:c1:44:37:38:2f:
73:34:ce:34:b0:4f:17:fe:7a:13:11:9a:ca:c3:50:c2:cc:2c:
7c:1a:7e:bc:bf:10:d1:23:e4:3f:1b:79:c0:f9:fc:f0:67:8f:
44:9a:65:09:58:2d:45:9f:22:29:e4:fd:7e:b7:05:da:bf:3c:
88:da:ed:60:d5:b0:f4:b5:09:26:0b:6e:bc:6c:e8:ee:ca:2b:
01:70:2c:b9:c1:82:4e:a0:f0:da:f1:fd:e1:e6:aa:9c:6a:2f:
76:25:67:64:2b:4f:ce:9d:40:db:17:c5:27:91:9c:0e:c8:47:
0c:90:5b:42:22:fa:67:56:c9:16:12:2b:d2:dd:97:f5:e2:ab:
3f:ed:b9:f2:00:64:89:2a:49:73:99:4d:2f:c2:be:14:1e:cc:
09:a4:c2:50:92:52:87:ec:30:cd:e0:5e:37:40:b3:7d:cd:ae:
42:53:f7:48:e5:c6:e4:70:02:e2:2f:b8:81:0c:40:63:c0:ab:
e8:f2:07:11:21:ce:e1:71:80:3e:45:ab:87:3f:08:89:f9:ea:
29:4d:25:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:04:28 2026 by rpki-client