Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File: xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier: BJwh8pUT3y6XUsCxZelb4egIsy0fudaRAHuwqgyGUmQ=
Subject key identifier: 0B:42:47:42:82:34:27:07:EA:87:BE:A7:2B:F6:76:09:F3:C4:55:7A
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial: 019F9580A49F057D55A86B5089169C5D357F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 19:01:03 +0000
Manifest this update: Fri 24 Jul 2026 19:01:03 +0000
Manifest next update: Sat 25 Jul 2026 19:01:03 +0000
Files and hashes: 1: SQgk14LJvQD58GJwhzmdHvEGMpA.roa (hash: 9nEhhW/HaWe0QsWNlFcb5L1Nm0I/W7PdcIHoewo3ZNU=)
2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: MNjK6DHITrBubuQaarLeYszGIx9oAyEdNal+ULK/TCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:a4:9f:05:7d:55:a8:6b:50:89:16:9c:5d:35:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
Validity
Not Before: Jul 24 19:01:03 2026 GMT
Not After : Jul 25 19:01:03 2026 GMT
Subject: CN=0b42474282342707ea87bea72bf67609f3c4557a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:03:8a:08:11:e7:d7:eb:4c:d8:28:b2:0e:8a:
b0:aa:31:35:87:e8:24:a8:04:ef:20:c4:8b:a1:86:
29:98:3d:a2:ed:91:b6:d4:61:3d:d6:5d:41:ab:e2:
44:6a:82:28:05:23:6a:3d:86:06:77:6a:35:1b:84:
c4:87:d2:7c:1b:d8:ac:52:44:5b:ad:59:cb:fb:41:
89:ee:8e:e1:26:fb:04:e1:87:e7:6e:55:77:d9:24:
a2:ae:70:9d:e4:a5:91:ee:3f:60:f0:38:1c:41:65:
9b:67:68:f6:b8:bc:94:04:4c:1e:79:7b:9e:48:cc:
19:60:b2:6e:bb:aa:1e:6f:7c:47:25:92:fc:ab:a2:
80:11:6f:16:43:5c:e7:84:e0:15:dc:31:5a:4f:6f:
33:1b:07:96:b7:d6:0c:1c:3a:cb:9f:d8:2c:31:d1:
6a:18:67:a3:9e:f6:6d:e0:ab:ac:ca:88:35:7c:48:
62:1e:aa:17:9b:7f:3b:b2:6d:90:2d:cf:b4:f7:f2:
cb:5e:4b:0e:27:21:4f:e4:4b:e5:12:d1:c7:12:ae:
a4:11:03:ff:33:ad:b1:6b:98:dc:83:fb:e7:ae:a4:
e6:c5:04:81:7b:be:69:d6:98:81:5e:05:ab:87:d0:
54:3e:62:3d:06:3a:a2:46:70:89:02:6a:d6:76:ca:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:42:47:42:82:34:27:07:EA:87:BE:A7:2B:F6:76:09:F3:C4:55:7A
X509v3 Authority Key Identifier:
keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b1:bd:78:f9:ac:e9:c7:e3:b3:1b:13:1c:6a:f9:64:7f:66:
a6:bb:27:70:cb:c3:4d:59:12:2f:3c:f1:d8:9a:17:68:ac:06:
5b:fd:51:42:cb:71:21:e4:83:81:7c:9b:2f:38:8a:08:ce:01:
f3:6a:7b:af:4d:c3:fe:fd:fc:6f:31:a2:4c:f9:3d:ca:53:30:
b1:a3:61:06:46:a8:c1:b2:3b:ab:9f:cd:d7:6f:5f:d0:82:04:
df:00:2a:6e:cd:e3:10:39:17:d6:67:42:ce:ff:1d:d3:01:87:
77:2a:a8:58:61:2a:eb:92:c7:89:9c:22:3f:00:df:04:5f:a5:
db:17:75:1c:7e:5c:67:6c:df:f3:54:b3:67:16:3e:e0:9a:e5:
b6:4d:a8:f1:50:9c:61:c8:9b:35:9a:be:8e:d2:90:26:b5:8b:
00:df:55:92:23:11:43:9f:83:c6:5a:9d:d5:ac:89:13:f4:37:
93:3c:d8:a3:21:9c:13:03:91:98:c3:3e:95:77:ad:5a:51:38:
e4:72:fe:63:7e:da:5e:ce:70:dc:29:be:46:32:1f:54:38:b0:
40:e6:dc:97:4a:50:34:b9:f3:16:d6:40:b2:92:c2:ec:65:c4:
c3:e4:c3:2e:09:7e:77:23:47:03:75:36:a6:78:58:a9:5f:f4:
54:24:72:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:27:19 2026 by rpki-client