Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: ugOElProCODAS5XLL6+6AqcQtW7vZD243m4uiaKoUYA=
Subject key identifier: 7B:05:FF:46:66:20:00:6D:82:CB:EA:A5:F2:C8:C3:4C:F7:B2:3C:34
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 019F93FFD743B992342D6DDDD34729626A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 12:00:45 +0000
Manifest this update: Fri 24 Jul 2026 12:00:45 +0000
Manifest next update: Sat 25 Jul 2026 12:00:45 +0000
Files and hashes: 1: E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa (hash: Uscjfda3vNy/cunwHUUok4ph0ZEvFOV3pV/NuXcyZJ4=)
2: jQxMjcdrhmgG348-FC6ZQ2XBhWA.roa (hash: zzN6qYWykA9k6vddc6gAA5bY2rFVt0NTvTAU0BcNrqQ=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: ZEUSXNraESZmfS8BkmzFYNnLycnO5hn/bCflVQjpXOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:d7:43:b9:92:34:2d:6d:dd:d3:47:29:62:6a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Jul 24 12:00:45 2026 GMT
Not After : Jul 25 12:00:45 2026 GMT
Subject: CN=7b05ff466620006d82cbeaa5f2c8c34cf7b23c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:17:b4:9f:ad:9b:94:d0:0e:0f:74:da:c1:88:
8b:5a:c8:3b:f8:b4:93:e9:56:73:98:f3:a3:3e:49:
02:f1:fd:e4:40:ac:1a:0f:da:e6:3b:b3:6a:24:ff:
8a:3b:fa:0c:26:79:55:34:c3:a0:33:99:15:1e:9f:
d7:76:48:01:3b:6f:dc:2f:d7:12:1a:56:32:e1:b7:
54:79:05:9e:51:c9:e5:cb:96:d6:90:58:f0:4e:e3:
d0:77:e6:3d:b6:d5:23:54:6e:d1:76:b1:e1:09:bc:
3c:db:17:10:1f:98:80:37:9e:81:be:37:d5:5d:ab:
e8:e6:07:44:63:e2:d2:c3:8a:02:9a:fb:96:63:17:
73:5f:b4:ea:4c:3a:93:5a:ff:4b:81:94:9a:36:bb:
82:99:d9:39:01:60:fd:59:23:79:c4:04:13:09:98:
9f:21:ac:c4:a0:16:8b:70:03:03:2b:4c:c6:ee:50:
e9:27:1a:a5:8f:96:2d:4f:04:3d:37:93:6c:17:35:
78:b9:4c:b1:1d:bb:f6:ad:3c:64:a0:9d:19:71:ba:
46:47:3f:f9:d1:12:fe:29:12:21:aa:7a:96:25:9a:
9f:16:5c:0b:28:3f:be:bc:31:a2:dd:25:ee:f4:b1:
ac:98:0d:ce:90:b7:8e:13:c6:3e:85:5e:76:f2:73:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:05:FF:46:66:20:00:6D:82:CB:EA:A5:F2:C8:C3:4C:F7:B2:3C:34
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:20:b3:05:9a:9e:57:27:9d:e4:4b:16:67:27:a8:15:94:1e:
80:ae:a5:cd:fc:e3:59:c6:b4:18:00:18:94:72:b2:93:23:77:
9f:b4:14:4e:cf:8a:19:58:6d:3b:a8:c3:d6:09:67:2d:00:98:
7d:6a:fb:a8:36:bb:12:99:3c:5b:85:af:cb:96:81:72:fb:48:
10:d3:19:7a:e0:87:a4:fc:ee:a4:8b:11:f2:46:df:a4:66:cf:
4c:41:66:57:7a:a5:9c:c3:1a:fd:10:6c:ff:90:a5:63:35:50:
35:85:21:0e:6c:54:90:f2:93:17:91:39:ec:9a:45:5a:cf:ac:
5c:74:82:48:f3:3f:5e:5b:1d:12:b3:8d:44:fc:e4:cf:aa:58:
8a:4c:9c:f9:36:9b:d9:dc:27:57:c1:ad:b1:ac:31:ad:ec:5e:
e3:fe:8e:27:79:a3:fd:79:66:c5:60:6a:8f:e7:5d:78:c1:f9:
f0:f9:6f:59:5f:f5:df:54:26:41:95:03:76:87:dc:33:44:fc:
c7:1b:55:a2:1a:66:6e:13:98:ff:8f:b0:43:0f:55:8a:22:46:
20:a2:96:c8:8d:e8:55:f9:e0:8a:68:60:d3:35:b1:ab:11:ec:
fb:7d:34:a0:d5:ec:8a:dc:2c:26:cc:9b:7a:a5:25:c0:84:60:
0d:b4:68:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:04:35 2026 by rpki-client