Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
File: xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft (raw, json)
Hash identifier: aIiPZd7qeMxPA8uB4MfUCZ5w9dN1UsDotWbH5LTYaVg=
Subject key identifier: 93:6C:9D:1B:7B:FA:FA:C0:CD:4A:EA:71:44:FF:79:28:E6:E5:2B:AD
Authority key identifier: C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
Certificate issuer: /CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Certificate serial: 019FF7FE3B6E2BD540C62B0025838A5F7552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
Manifest number: 0271
Signing time: Wed 12 Aug 2026 22:01:01 +0000
Manifest this update: Wed 12 Aug 2026 22:01:01 +0000
Manifest next update: Thu 13 Aug 2026 22:01:01 +0000
Files and hashes: 1: 7kloanVHOYaHRlhEsLAGIVGi_rY.asa (hash: 8NXppGEeLQlW5S79hnELA4YUQ5d6IwXskVcbthg2tt4=)
2: YfYnV8dROfvt9YlNJZwwIzCuaVk.roa (hash: 8h9Qzp6OMQv/b+8I/FjbB7FBpfDNca2A4Lb8PfnMIP8=)
3: xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl (hash: BR0T+h9dCUgWeZV5VPnRNQaR1BAZnUylknOXc+g2RYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:fe:3b:6e:2b:d5:40:c6:2b:00:25:83:8a:5f:75:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Validity
Not Before: Aug 12 22:01:01 2026 GMT
Not After : Aug 13 22:01:01 2026 GMT
Subject: CN=936c9d1b7bfafac0cd4aea7144ff7928e6e52bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8d:7e:59:7e:7c:7c:7a:7a:1b:31:d7:5e:45:
87:06:67:19:0f:4d:6f:da:1b:39:62:68:16:c3:8e:
c2:f1:db:eb:6b:25:a3:f1:39:3d:3e:06:46:41:79:
47:12:56:09:29:92:7b:cb:b8:62:2a:56:68:38:d7:
7e:c9:43:91:80:ce:dd:7a:92:43:9e:78:46:3c:9a:
83:c1:10:8c:96:ed:3e:31:53:d6:b7:a8:9a:54:c9:
23:32:bb:cc:b0:13:ef:c5:a6:39:4e:a1:43:80:be:
86:ce:93:b2:85:c9:07:60:bc:b0:f9:76:76:2b:24:
e8:73:f8:2f:59:5a:9f:bc:ec:20:e9:4d:eb:53:bf:
29:0c:fd:19:2a:05:74:f2:9b:04:54:3f:96:b8:09:
64:68:0e:0d:0b:76:48:d7:4d:bf:44:ed:33:d4:f0:
ca:45:03:73:2c:51:3a:e1:27:cf:a0:b4:df:92:61:
ca:5a:46:b4:54:16:46:be:54:fb:e2:78:e8:64:cb:
da:0d:94:f2:b1:c7:d4:39:ac:b3:18:05:92:47:ee:
13:85:99:b7:77:de:79:3a:79:57:28:23:a0:29:76:
91:b4:f9:ea:53:b7:ed:7b:0e:13:4b:6b:9f:62:3b:
52:7e:bd:98:c9:d0:f4:96:47:1b:d2:01:73:37:ce:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6C:9D:1B:7B:FA:FA:C0:CD:4A:EA:71:44:FF:79:28:E6:E5:2B:AD
X509v3 Authority Key Identifier:
keyid:C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:31:60:bf:b6:51:6c:89:fd:78:58:d8:f5:3e:c8:40:a2:4e:
03:17:ed:ee:16:87:db:4b:33:6b:f8:29:ca:55:c7:e5:3e:b6:
6d:0c:f6:6a:5a:c1:d8:25:9d:dc:4f:34:52:4d:09:72:98:97:
4b:09:d9:60:fa:d5:f5:ee:e9:12:3c:1f:70:2d:36:ad:7a:55:
95:08:2c:4b:31:ce:8d:6e:ef:cc:4a:d6:af:e6:1f:3d:8c:71:
02:6e:79:4d:06:85:2d:67:58:c9:98:ff:19:23:ad:c1:c3:4b:
88:52:a3:9f:01:01:22:7a:16:35:ce:65:da:fd:f8:ed:80:49:
4d:d7:13:f1:f5:3d:a5:6f:ae:aa:e7:65:56:fb:fe:da:20:e4:
3b:fd:90:bc:ff:00:53:be:ae:8b:b7:4f:46:a0:b1:d0:6a:5a:
0e:83:91:e3:67:1e:ae:65:1e:11:a0:43:63:9e:f2:ec:a5:53:
e3:e1:d3:2f:84:54:49:df:db:96:5f:92:67:a7:e9:76:02:78:
32:cd:14:31:ad:1b:d9:d9:6b:7d:a4:10:21:62:44:d0:41:9c:
1a:93:68:75:32:bb:98:80:10:18:7e:97:05:e5:c4:9d:91:e0:
91:4f:d0:1d:1d:e1:90:f9:da:d2:a6:dd:5d:5b:93:72:8e:30:
7c:0c:0f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:05:14 2026 by rpki-client