Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
File: xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft (raw, json)
Hash identifier: ptrnZQaClR9ZuYszv2iovLPIWF2EIMqNKE/VKxJbUVI=
Subject key identifier: 92:A1:7F:7D:75:0A:7E:1D:F4:74:04:DC:58:0F:1C:67:DE:5E:BF:12
Authority key identifier: C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
Certificate issuer: /CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Certificate serial: 019F84C3E4982735A7B0A498D7E27E6CFF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
Manifest number: 0B5E
Signing time: Tue 21 Jul 2026 13:00:58 +0000
Manifest this update: Tue 21 Jul 2026 13:00:58 +0000
Manifest next update: Wed 22 Jul 2026 13:00:58 +0000
Files and hashes: 1: bkpFrc_6laoYbGdkqTlHlW-Qe80.roa (hash: p/3gwRkkBDXycKoUYkEzWpJbWT3T+RMybdZ5AMyzIgo=)
2: xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl (hash: PkAlZAzzDpsJHiV5zy/U1PA34h7zzMhdN1gI/maOoVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:e4:98:27:35:a7:b0:a4:98:d7:e2:7e:6c:ff:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Validity
Not Before: Jul 21 13:00:58 2026 GMT
Not After : Jul 22 13:00:58 2026 GMT
Subject: CN=92a17f7d750a7e1df47404dc580f1c67de5ebf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:a8:0a:36:a4:e3:39:d3:03:2c:8c:58:5f:
0f:73:83:e6:26:c8:3a:be:ec:6b:1e:a2:b6:5f:30:
6d:13:89:45:aa:f1:4f:d0:31:77:ce:a5:02:63:f2:
9a:63:cb:23:0e:2e:eb:1a:ac:1a:78:d5:4b:5f:bc:
75:3f:53:5e:bc:e3:e2:47:d8:97:63:ef:ee:db:27:
2f:af:2c:8f:bb:e1:02:c6:91:e4:67:49:9d:b7:85:
17:c2:29:60:de:bc:a1:b6:46:6d:fe:48:41:b4:52:
20:74:69:b1:3a:c4:63:c5:eb:e9:2f:f7:f3:ea:89:
71:a2:3f:be:8b:05:9e:82:f3:f4:a7:0e:06:e5:65:
ed:1d:7f:37:27:b6:6e:96:1d:c3:da:a4:0a:f8:df:
d9:f4:37:38:48:21:b8:92:3e:c0:c2:e8:d6:6d:91:
9a:3e:bd:5f:92:50:12:31:23:18:9e:d0:12:59:88:
b6:56:30:0d:d8:76:da:22:fc:e5:57:7d:a8:c3:a3:
ac:d8:33:83:b5:54:d7:1a:03:f6:85:6d:f5:de:0d:
0a:c4:4a:31:5f:3d:a9:7a:0d:cc:34:1a:6c:f8:1d:
de:79:18:a5:90:db:41:e0:e2:19:95:0e:a5:5f:83:
50:85:bc:d3:bd:de:27:44:a9:a4:02:f5:60:59:63:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A1:7F:7D:75:0A:7E:1D:F4:74:04:DC:58:0F:1C:67:DE:5E:BF:12
X509v3 Authority Key Identifier:
keyid:C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b1:34:05:0c:77:b7:90:2e:a4:7f:fe:7b:2e:09:d4:52:f5:
d6:9f:73:47:89:2a:7d:ef:e2:97:ee:db:e9:d7:de:91:d2:fc:
d1:0a:65:80:0c:3f:a8:48:1b:51:78:cb:b7:8c:01:b1:ca:0f:
98:39:61:60:b3:6d:3e:4d:04:62:2d:e4:6a:0d:d3:7b:5f:1d:
e3:0f:c9:10:b9:8d:37:bf:9c:81:17:5a:fd:9b:75:cb:f8:51:
ee:80:87:fe:f5:42:28:31:53:2b:ec:11:6e:ec:08:80:73:94:
f1:e5:49:85:2c:7f:b2:8c:41:c0:ea:d0:3d:9f:b0:96:d8:9e:
de:a2:7b:90:19:dc:98:22:d6:07:e6:78:f5:f0:eb:73:4d:3d:
a4:d8:85:01:fc:d0:33:ed:14:34:48:d1:90:7e:91:59:af:d5:
f5:8b:2b:b5:96:2c:2a:3d:01:95:83:74:17:b6:41:78:43:06:
6a:97:62:87:56:cc:8b:c7:80:a1:cf:9d:a3:56:f8:fd:2e:d7:
97:93:d1:e4:b5:81:97:0f:91:b1:25:a7:7e:4e:40:76:79:25:
b1:e0:ed:5b:6c:67:10:79:03:01:93:87:65:cd:0d:b0:99:43:
f4:45:a0:ec:74:38:2d:a2:6f:ec:74:ae:95:0a:5a:e9:b1:f7:
37:1e:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:55 2026 by rpki-client