Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: i9mnbX6wHV2gSF7JA/lltZf87cHuU7nEYN+kmxbwzjk=
Subject key identifier: D0:68:0C:1B:12:8C:72:A0:F5:90:AB:9D:1F:AB:C2:2A:36:08:06:C7
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 019FA1BB7B8AFA492A2638DD6E1C65D47315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 04:00:46 +0000
Manifest this update: Mon 27 Jul 2026 04:00:46 +0000
Manifest next update: Tue 28 Jul 2026 04:00:46 +0000
Files and hashes: 1: FX91S7TqeS_5eNXFwkhAJLeDMDY.roa (hash: 7/g0n2srHScQb2lUJNavUfjGDwgVOP/uF61M1Zy+4aU=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: 5Zy9DhgKPPHTHQUHwMyb3IRW3tExyDoiYidm++2PDi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:7b:8a:fa:49:2a:26:38:dd:6e:1c:65:d4:73:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Jul 27 04:00:46 2026 GMT
Not After : Jul 28 04:00:46 2026 GMT
Subject: CN=d0680c1b128c72a0f590ab9d1fabc22a360806c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:d8:16:20:16:b9:4c:10:da:74:da:e6:3b:
c5:4c:c7:4f:af:10:55:42:58:04:05:71:a7:6f:67:
1a:51:14:ae:33:a8:f5:9a:f0:12:c6:cb:64:5e:c6:
52:fe:3a:f7:63:47:00:69:cb:e3:19:57:e8:30:3c:
bc:0f:b8:9b:29:77:65:91:0c:05:1e:05:49:cc:5b:
3a:30:67:2c:df:f1:69:09:70:f3:82:7f:b4:81:42:
9c:0e:4a:c4:69:40:b9:3d:fa:ea:c5:80:83:44:3f:
c5:89:12:f0:09:68:d5:33:c8:6b:27:55:ad:a8:6b:
bc:4d:50:72:ab:29:dc:1f:af:04:03:67:ce:fa:cf:
86:ba:d9:53:6a:d4:05:2a:1c:0e:f0:fe:f6:02:1f:
dd:09:b8:8d:6c:18:a5:f7:89:30:2d:9c:42:8d:85:
b8:22:dd:eb:a5:0f:6f:3c:ac:18:99:0b:6e:cf:9f:
ee:c8:61:60:a4:8d:66:e6:02:06:65:ad:4c:08:17:
34:d5:5a:c6:c8:0b:d6:30:ac:a0:78:6e:c4:3c:5d:
55:03:f4:8f:13:5c:b3:8f:c7:a1:12:3e:55:34:58:
3e:91:c3:07:6a:b2:d3:32:b8:58:9d:2b:08:4d:da:
81:6d:19:f6:97:7d:60:09:2d:b0:e3:bd:04:8e:3a:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:68:0C:1B:12:8C:72:A0:F5:90:AB:9D:1F:AB:C2:2A:36:08:06:C7
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a5:cb:e8:b2:df:a2:75:6a:96:e9:57:64:c7:a5:e0:66:47:
6b:be:4e:8f:04:0a:ee:af:a7:f9:b1:99:e3:1b:9a:21:4c:88:
70:e1:ef:44:c7:81:4d:bf:a0:d2:01:cd:79:f3:14:54:6d:9f:
e3:25:dc:29:04:94:73:aa:6e:6e:78:a1:6b:a9:c6:f1:53:43:
3e:a8:41:e2:25:c9:8e:7b:06:12:8c:92:06:20:d6:d0:66:89:
cb:d7:95:b0:a1:1c:9e:51:30:7f:6a:a8:4e:f7:e9:de:53:ba:
99:50:82:7a:3f:86:91:3c:bb:2f:fb:3a:f2:4f:87:79:bd:f1:
d9:84:c1:62:6a:e7:b2:e1:16:6b:6c:50:8a:24:9f:38:d9:dc:
c2:57:11:c5:09:17:8a:0b:30:ed:cd:e4:ac:81:bc:c1:ab:c9:
9e:84:4c:b6:6c:27:38:e4:e2:a5:5c:5e:2a:07:57:7c:ac:50:
b6:34:cd:b3:6b:6f:18:dd:44:89:cb:03:8b:b1:06:a6:a8:ba:
21:4f:23:61:da:3f:bf:75:94:b4:62:71:2d:2d:52:18:74:e4:
d5:81:85:ef:bb:cb:3c:af:76:51:8d:9e:de:fe:91:ca:79:df:
96:fd:80:02:fe:39:5e:7d:61:0b:80:66:91:90:3e:e9:4f:f2:
e7:9c:a3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:02 2026 by rpki-client