Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier: frZ+moBYCAAqUeZ9WwermL5lU+chsEjzN7xJWlG8Y+4=
Subject key identifier: B5:22:0C:D8:20:8D:D8:3B:CE:E3:79:A2:02:D2:81:4D:86:07:F8:C4
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 019F92B6487638B6048FF0A0E3A12CA2F3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 06:00:47 +0000
Manifest this update: Fri 24 Jul 2026 06:00:47 +0000
Manifest next update: Sat 25 Jul 2026 06:00:47 +0000
Files and hashes: 1: YHt9YKkoQObFkpk4bFMfaZH83j0.roa (hash: 4fsNZayDAjiJa4ZZH0ABpTRn6fHRN9+IikwCGEjvWBc=)
2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: wXGBKFspVDOwJc4HRBrglDAgu4CamVbLV0fQFp2fNis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:48:76:38:b6:04:8f:f0:a0:e3:a1:2c:a2:f3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Jul 24 06:00:47 2026 GMT
Not After : Jul 25 06:00:47 2026 GMT
Subject: CN=b5220cd8208dd83bcee379a202d2814d8607f8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:24:0c:a5:da:89:f4:78:b8:d9:f4:f3:0a:
15:bb:f0:cf:b9:5c:a9:80:a2:68:7a:b8:44:96:5c:
34:60:ed:27:8f:0b:2e:08:42:91:c8:2a:2b:20:6f:
83:59:4b:93:f1:d9:70:9a:31:8d:bf:56:bb:1d:11:
46:73:81:df:c1:e7:59:a3:06:b5:c9:75:1e:02:70:
6d:d0:b7:d0:fd:45:e6:d0:f5:49:3f:09:84:55:d4:
ac:21:ec:55:34:1d:6d:5d:4c:21:bf:82:23:02:d7:
38:4d:ed:e9:3c:b0:ab:18:6e:4c:aa:cf:55:73:ed:
fa:e9:8a:fc:95:1a:2c:19:b0:be:7a:9b:f6:9a:10:
96:55:ff:23:4e:36:13:39:1d:ef:a7:f1:ea:8e:ef:
e8:ac:c5:c6:92:46:90:b9:b1:67:d4:ef:47:61:25:
0c:be:e5:8e:b7:db:12:4b:49:f5:7b:13:6d:76:c8:
c9:c5:5b:cc:60:a9:ec:5e:31:e1:99:02:70:ed:20:
a5:7b:54:d0:1f:e1:76:7e:ce:6d:f6:a4:e5:50:11:
92:c0:ff:cf:08:c1:da:d0:a8:5e:95:a2:68:81:3a:
d5:80:3e:7f:0d:34:7d:cb:a7:27:79:e2:19:d7:e2:
be:fa:77:49:17:b5:9d:da:82:a6:c7:4d:80:61:b1:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:22:0C:D8:20:8D:D8:3B:CE:E3:79:A2:02:D2:81:4D:86:07:F8:C4
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c8:13:22:23:af:6e:e4:af:9f:ec:22:6f:71:04:fb:a8:76:
89:e3:77:70:43:35:68:56:c4:97:e1:5f:82:59:5f:87:15:ac:
55:2f:f4:91:90:69:35:be:dc:2d:ae:40:cf:16:db:b0:27:1e:
df:4b:1e:16:02:dc:a8:91:e6:8c:49:50:24:11:a0:f4:ff:21:
98:06:f0:1c:0b:a2:5e:c3:f1:a9:a2:4b:96:3c:f1:3b:27:2f:
cd:9e:63:3a:8c:c2:4f:ea:15:b3:a3:da:f6:61:63:e0:38:00:
61:b8:fb:41:bc:9d:69:b9:67:e7:94:5c:69:61:20:57:be:17:
77:e7:be:56:e5:82:fd:9b:e3:7c:b2:0f:f1:db:55:99:ef:c8:
d4:3f:76:2a:4c:f9:12:f0:bb:59:3d:ad:7d:3a:26:c5:23:89:
f3:da:26:cd:4e:bb:06:12:74:47:91:86:ca:4e:5b:86:d1:ad:
98:2a:30:3e:d1:15:10:39:23:d4:f9:48:a1:5d:21:3c:1f:3b:
38:a0:5e:ec:47:a1:a6:ee:80:8f:d5:d6:87:6f:a0:7e:94:f5:
0b:64:67:15:60:fb:a7:75:d9:c6:2e:85:95:a7:fb:ca:37:cd:
38:e5:a3:42:4e:8d:fb:8b:eb:b7:a2:11:68:ad:73:ca:35:37:
43:82:d0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:48:07 2026 by rpki-client