Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
File: _XTetBhEJvpiIlthIMNnBvc3uOI.mft (raw, json)
Hash identifier: k5seDMlbyqq6idXWWvUVPBlSjWQuz1BpzJRZhFUFjcg=
Subject key identifier: D7:49:0D:D4:25:29:00:A4:73:A8:33:11:F7:7F:37:E4:BE:9B:E1:26
Authority key identifier: FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
Certificate issuer: /CN=fd74deb4184426fa62225b6120c36706f737b8e2
Certificate serial: 019F93242E1FF549B1078AD2F9942CDB82CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 08:00:49 +0000
Manifest this update: Fri 24 Jul 2026 08:00:49 +0000
Manifest next update: Sat 25 Jul 2026 08:00:49 +0000
Files and hashes: 1: 4H3kqbZKgvCRJ41TW2E8J1NDC88.roa (hash: ah0Wo037A9MM/sUCKBiJ/BqofxWUcKYL1Cq5STwAUy8=)
2: _XTetBhEJvpiIlthIMNnBvc3uOI.crl (hash: 1b75QCMEpW5IJdHEXLsF8BNIPksbOOO63K9xX50JFjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:2e:1f:f5:49:b1:07:8a:d2:f9:94:2c:db:82:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd74deb4184426fa62225b6120c36706f737b8e2
Validity
Not Before: Jul 24 08:00:49 2026 GMT
Not After : Jul 25 08:00:49 2026 GMT
Subject: CN=d7490dd4252900a473a83311f77f37e4be9be126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:b9:5c:65:28:7c:96:ab:6a:5c:f5:be:23:
d0:d6:fd:6d:da:82:be:03:d5:45:a7:ea:31:69:5a:
42:43:04:00:97:cb:c5:89:44:83:e7:d7:4b:8e:7b:
44:9b:40:52:aa:00:a9:36:52:fd:a7:f1:b7:85:44:
ef:79:b4:97:c2:0e:49:f2:f2:8e:58:49:df:2f:2e:
b5:c1:3c:d3:f4:02:49:e4:d0:39:c5:be:8b:07:88:
43:e4:e5:93:9e:d7:c8:9f:81:52:ff:e9:3e:ba:39:
dd:ea:a6:57:e9:e7:f1:29:3d:b4:0e:32:da:2d:b9:
2f:5f:5d:b2:c0:0d:55:95:7d:cc:89:67:c8:e3:74:
9f:4f:7e:a8:04:b1:12:99:b0:cb:fa:d4:43:e5:2a:
ca:6e:69:f2:3a:65:5c:ea:90:19:88:48:a5:66:c6:
eb:60:5a:ae:19:28:a0:6d:e9:68:ce:ae:94:92:b0:
ca:b9:5f:34:19:54:ee:cb:0e:19:b9:74:0c:d5:16:
82:a2:7d:81:05:4c:35:8d:0d:6a:8e:a8:36:c3:5c:
72:b5:18:54:cd:4b:00:77:dc:e2:fd:fc:36:91:e5:
1f:4b:7c:ca:62:52:13:27:e6:6b:34:2f:f6:dc:a9:
b6:2f:15:84:66:17:06:fe:4d:46:66:fd:8b:d2:11:
5c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:49:0D:D4:25:29:00:A4:73:A8:33:11:F7:7F:37:E4:BE:9B:E1:26
X509v3 Authority Key Identifier:
keyid:FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6c:a7:7a:ef:6e:cd:f5:08:a7:55:db:51:72:4d:ff:a5:0c:
d9:d6:05:00:eb:1f:8f:09:f1:34:f4:53:c0:f6:56:e3:88:1e:
58:33:ca:26:33:d5:ab:a3:42:37:60:ae:26:a6:6a:cc:90:ef:
04:4e:e0:3d:c2:83:c3:05:4e:1f:5b:2a:05:98:96:bb:ff:53:
4e:a1:6f:b9:ba:dd:e3:fc:e8:7b:2a:3a:fc:fc:0c:54:36:98:
63:6c:f0:60:10:b4:4b:27:0b:2b:a5:21:4d:ef:0d:a4:04:2b:
66:d6:73:ad:bf:11:d5:4a:b9:d9:73:3a:c3:76:a7:63:b5:86:
b2:0c:df:1a:06:d5:5c:05:5e:1b:1f:4f:78:27:29:ad:1b:42:
b0:3f:3e:57:4a:7c:1b:a4:e3:0e:4e:6f:fd:66:b5:ad:b4:6a:
03:27:81:26:41:eb:05:8f:7b:a7:41:85:cd:a8:c0:93:58:a8:
9a:22:64:2e:a9:85:db:be:84:aa:15:49:61:7b:3f:08:c8:1d:
d0:5e:8a:14:37:d7:83:59:1f:9c:72:22:22:7a:1c:d8:8c:29:
18:bf:83:9b:1c:df:71:7a:e2:12:25:db:ce:fa:7a:f9:0a:60:
bb:b7:ee:86:1f:23:dc:d4:e5:bb:23:f4:83:64:63:d4:8e:a1:
71:dd:f4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:14 2026 by rpki-client