Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
File: XfEaGA3xeZTkitMxhyz9AK2augQ.mft (raw, json)
Hash identifier: 1zrDJ2hTkNBZLT0w/lzijmBUB6sprioYpK4QNe8mCZk=
Subject key identifier: CC:0B:78:A0:BF:56:53:B2:DD:84:C3:7C:FD:93:70:91:BC:BA:C8:25
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial: 019F943755E2D2C560AB1CD3F6EF6410FBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 13:01:22 +0000
Manifest this update: Fri 24 Jul 2026 13:01:22 +0000
Manifest next update: Sat 25 Jul 2026 13:01:22 +0000
Files and hashes: 1: XfEaGA3xeZTkitMxhyz9AK2augQ.crl (hash: QQbd2OEDOT237ZOenq+BjDNLxLpHp+ck25KCL0hWwcM=)
2: vOvUH4QL3euA8n5Zs-p3s8pu5OU.roa (hash: qqJCGshMa7lPJa7oCp0UWM6NmrUrD8W4y4uDd4fxLLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:55:e2:d2:c5:60:ab:1c:d3:f6:ef:64:10:fb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
Validity
Not Before: Jul 24 13:01:22 2026 GMT
Not After : Jul 25 13:01:22 2026 GMT
Subject: CN=cc0b78a0bf5653b2dd84c37cfd937091bcbac825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3d:95:47:6e:16:33:ac:3e:59:c9:5e:58:b6:
f1:a5:87:6b:1f:2a:90:8f:e2:49:7c:d8:57:7f:21:
45:f2:35:33:13:c1:21:0d:32:fb:13:5c:91:d8:75:
51:e7:36:a9:bb:e6:8b:7c:52:54:4b:8b:53:32:3e:
da:17:11:ab:92:ea:f0:38:5d:f6:81:dd:9f:fb:d7:
bc:5a:88:57:8e:7a:2f:ee:cc:1b:0a:1a:78:2c:30:
41:32:ad:11:6b:69:a1:e0:4a:b6:d7:f1:9b:50:8f:
dc:a3:6f:f2:7f:d9:57:9a:28:90:64:21:e8:09:4e:
68:e2:5b:65:ab:e2:e6:6c:24:41:4e:3e:e6:81:24:
7b:f9:b3:0c:bd:bc:6d:66:f1:d3:ff:38:5a:df:79:
d2:07:9a:8e:fc:bd:7b:b0:12:71:57:c5:52:3e:a9:
81:8a:ef:c8:c2:2c:82:ac:4a:19:5a:10:1c:75:82:
3a:09:55:25:b2:7b:80:07:f8:77:f1:81:08:c4:68:
01:0a:7e:7e:65:a7:86:51:60:a3:a0:49:64:82:e3:
f2:bc:ae:6f:9e:0b:cc:72:96:23:15:b1:2f:42:b6:
c4:20:7e:d3:3a:19:02:9c:86:9f:bf:5c:26:e8:94:
f2:e6:51:a6:4b:7a:37:86:02:d3:ba:31:ec:df:26:
16:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0B:78:A0:BF:56:53:B2:DD:84:C3:7C:FD:93:70:91:BC:BA:C8:25
X509v3 Authority Key Identifier:
keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7c:e3:8f:d5:62:3f:10:6c:27:f6:d9:21:2c:7e:eb:c1:12:
b5:21:44:f1:a6:68:3e:ce:bf:97:a7:eb:f5:d2:b3:a6:81:48:
60:62:db:7e:e2:15:81:a9:cd:27:0a:15:c1:1b:10:f5:69:4f:
07:ec:b4:4c:41:a7:ba:05:0c:45:8f:d9:6e:c7:94:73:1f:4f:
d9:dd:27:37:55:62:b7:6c:76:d4:22:6f:6b:95:68:da:2c:bf:
5e:8d:c5:7c:91:d6:42:81:4b:45:05:e6:7d:40:d0:2f:a5:68:
ab:df:98:0b:22:76:33:0b:ae:4f:53:96:8e:3a:06:fe:fd:c9:
8b:af:0f:ef:18:09:30:ce:b3:d3:5c:62:70:0c:4d:66:fb:c4:
87:b2:77:2d:02:ed:e0:1d:6d:a1:4e:17:bf:12:03:13:c9:49:
ad:a6:4f:06:1b:75:03:0f:48:a9:63:68:30:41:33:15:14:26:
ac:27:65:32:fa:c4:44:c7:2a:1b:bb:00:ce:0b:28:33:04:55:
97:9e:ae:23:a8:b7:84:82:cc:ae:df:d4:04:1b:bb:ef:9d:b1:
c1:ea:1b:35:0f:57:34:85:f2:b2:99:eb:4c:30:95:18:c8:1d:
10:cf:93:cf:fd:46:2c:0a:23:49:54:34:66:91:70:5a:06:ad:
1f:9f:10:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:03:14 2026 by rpki-client