Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
File: xNoGacxfwdqe7YsKEzphv-PfWFY.mft (raw, json)
Hash identifier: HitQJfrl2YZziEkjbyZgoM3Qi71ptqzliIiCVqjhHWk=
Subject key identifier: 66:1C:02:8C:7C:D9:00:7A:BA:6B:F3:81:2E:F5:97:26:DE:2E:18:28
Authority key identifier: C4:DA:06:69:CC:5F:C1:DA:9E:ED:8B:0A:13:3A:61:BF:E3:DF:58:56
Certificate issuer: /CN=c4da0669cc5fc1da9eed8b0a133a61bfe3df5856
Certificate serial: 019F9392537B987119F49DDC87BB61E639AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
Manifest number: 3B
Signing time: Fri 24 Jul 2026 10:01:08 +0000
Manifest this update: Fri 24 Jul 2026 10:01:08 +0000
Manifest next update: Sat 25 Jul 2026 10:01:08 +0000
Files and hashes: 1: i4ZMx8XiQ-a_zUvx2M6HCqvrY74.roa (hash: hpsDw2pZ0DBvAOgm+bdbqvL0ShlWV31Jn+1J+8xpu30=)
2: pYUYQEf2s7Z-P_vS-0K2KryHc60.roa (hash: HUauXiB8EmNlBFz7vLwqL2QKaYGDn/MlUmtQHsbrszw=)
3: xNoGacxfwdqe7YsKEzphv-PfWFY.crl (hash: Zv6ASCJ7XimidqVocNmrKgXxJWS8OLCuV8w2vxRSmx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:53:7b:98:71:19:f4:9d:dc:87:bb:61:e6:39:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4da0669cc5fc1da9eed8b0a133a61bfe3df5856
Validity
Not Before: Jul 24 10:01:08 2026 GMT
Not After : Jul 25 10:01:08 2026 GMT
Subject: CN=661c028c7cd9007aba6bf3812ef59726de2e1828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:38:f7:2a:cb:27:64:cc:6b:8e:6e:53:d8:
52:b2:ad:88:5f:81:49:41:b9:24:7e:14:b8:f3:81:
b9:30:0e:95:98:e9:da:19:df:c8:c0:9a:88:a9:52:
18:59:9a:b5:aa:b1:de:cf:37:ee:56:7b:63:e3:96:
1a:9a:c8:33:62:b5:98:e1:d9:84:96:ff:08:b3:c3:
d3:b2:9b:e1:2b:4c:0e:e5:e9:34:31:4b:10:63:82:
97:f2:de:f6:da:af:46:6f:28:32:fc:d3:03:07:ce:
1e:a3:0e:eb:7b:b7:d4:de:ab:88:aa:a7:7d:6b:0e:
b9:7d:fe:e4:43:8f:53:73:c8:f6:3b:7a:82:f4:16:
5e:04:98:ee:64:35:11:a8:b5:b0:8a:9f:e9:1e:f6:
36:3c:c1:4e:ee:30:55:05:3d:c4:15:b3:62:a5:34:
af:d0:db:be:6c:d3:ea:88:a3:d4:a5:97:a0:38:20:
b1:ea:06:fe:ed:aa:a6:d4:96:b4:6a:8a:ef:fa:74:
bf:49:05:8f:ca:09:f8:e5:6f:d4:66:35:0c:fd:01:
05:d5:5c:ff:a5:4b:56:e9:0b:c2:47:bc:64:fa:f7:
95:b3:34:e8:e6:7c:37:b7:d2:9a:06:8f:28:82:47:
87:47:91:9b:5c:2d:55:f8:ca:5a:93:88:47:9a:85:
3d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1C:02:8C:7C:D9:00:7A:BA:6B:F3:81:2E:F5:97:26:DE:2E:18:28
X509v3 Authority Key Identifier:
keyid:C4:DA:06:69:CC:5F:C1:DA:9E:ED:8B:0A:13:3A:61:BF:E3:DF:58:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1e:92:76:14:9e:8a:06:bc:e0:60:12:13:2a:92:e0:8e:0a:
4d:b5:5a:91:1f:d3:ed:51:f9:dc:06:30:d5:cb:8b:d4:4c:31:
c0:06:cc:c3:5c:67:81:9b:9e:bd:f1:4b:01:37:67:7d:53:72:
f3:73:1e:7a:ce:60:8c:45:fa:b1:db:ce:cc:d0:9d:c6:92:6d:
34:ba:b9:87:1b:f6:29:23:ad:69:6b:6a:cc:a9:5e:2c:4a:31:
1b:a8:40:7b:d4:3e:ff:27:58:16:ed:88:bd:7a:e1:8c:b4:6d:
e7:ac:a1:44:47:bc:b2:6a:d1:83:b5:22:2c:89:75:62:c4:2f:
f7:7c:3c:f8:86:21:ba:42:f4:3c:1d:ba:d2:d3:f8:de:f6:88:
33:ff:2c:2d:04:8c:d7:08:3c:53:83:93:80:6a:86:78:e9:83:
7d:42:1e:c5:a2:7e:17:c4:62:5f:90:69:51:2e:81:79:90:9c:
f3:3e:e5:2f:43:de:ef:54:01:c8:93:e0:4b:d4:62:48:75:15:
c9:6b:38:cc:8a:e9:11:f1:cf:57:c4:c0:c6:e1:97:5a:0b:7f:
ac:a3:26:f3:50:80:9b:eb:0c:88:aa:a8:3d:d6:c3:73:b3:25:
dc:88:f9:8d:f1:c4:b0:ed:71:b6:57:35:2e:b1:f5:fb:45:bd:
ad:0a:6f:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TklN7mHEZ9J3ch7th5jmtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZGEwNjY5Y2M1ZmMxZGE5ZWVkOGIwYTEzM2E2MWJmZTNk
ZjU4NTYwHhcNMjYwNzI0MTAwMTA4WhcNMjYwNzI1MTAwMTA4WjAzMTEwLwYDVQQD
Eyg2NjFjMDI4YzdjZDkwMDdhYmE2YmYzODEyZWY1OTcyNmRlMmUxODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPE49yrLJ2TMa45uU9hSsq2IX4FJ
QbkkfhS484G5MA6VmOnaGd/IwJqIqVIYWZq1qrHezzfuVntj45YamsgzYrWY4dmE
lv8Is8PTspvhK0wO5ek0MUsQY4KX8t722q9Gbygy/NMDB84eow7re7fU3quIqqd9
aw65ff7kQ49Tc8j2O3qC9BZeBJjuZDURqLWwip/pHvY2PMFO7jBVBT3EFbNipTSv
0Nu+bNPqiKPUpZegOCCx6gb+7aqm1Ja0aorv+nS/SQWPygn45W/UZjUM/QEF1Vz/
pUtW6QvCR7xk+veVszTo5nw3t9KaBo8ogkeHR5GbXC1V+Mpak4hHmoU9qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYcAox82QB6umvzgS71lybeLhgoMB8GA1UdIwQY
MBaAFMTaBmnMX8Hanu2LChM6Yb/j31hWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE5vR2FjeGZ3ZHFlN1lzS0V6cGh2LVBmV0ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wZDQ5ZDUtMjk4My00MGFkLTlkNTAt
NzJiM2U2MmE4ZTNkLzEveE5vR2FjeGZ3ZHFlN1lzS0V6cGh2LVBmV0ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wZDQ5ZDUtMjk4My00MGFkLTlkNTAtNzJiM2U2MmE4ZTNk
LzEveE5vR2FjeGZ3ZHFlN1lzS0V6cGh2LVBmV0ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAph6SdhSe
iga84GASEyqS4I4KTbVakR/T7VH53AYw1cuL1EwxwAbMw1xngZuevfFLATdnfVNy
83Mees5gjEX6sdvOzNCdxpJtNLq5hxv2KSOtaWtqzKleLEoxG6hAe9Q+/ydYFu2I
vXrhjLRt56yhREe8smrRg7UiLIl1YsQv93w8+IYhukL0PB260tP43vaIM/8sLQSM
1wg8U4OTgGqGeOmDfUIexaJ+F8RiX5BpUS6BeZCc8z7lL0Pe71QByJPgS9RiSHUV
yWs4zIrpEfHPV8TAxuGXWgt/rKMm81CAm+sMiKqoPdbDc7Ml3Ij5jfHEsO1xtlc1
LrH1+0W9rQpvMA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:31:52 2026 by rpki-client