Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
File: xLejOGcjuooupILHtoAxpUEirE8.mft (raw, json)
Hash identifier: jMIeUF5G1wdFz9wpI/I3cJgerIUXJpd4j0Cbeobp05w=
Subject key identifier: CA:B9:A3:88:A7:DD:21:B4:14:87:27:E9:77:07:C3:86:B7:06:64:BA
Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Certificate serial: 019F95B7237D70649F747967AA11887081DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
Manifest number: 082F
Signing time: Fri 24 Jul 2026 20:00:34 +0000
Manifest this update: Fri 24 Jul 2026 20:00:34 +0000
Manifest next update: Sat 25 Jul 2026 20:00:34 +0000
Files and hashes: 1: Mk6KT-G0Nd_n-6Ue0npJ0Pqa4CI.roa (hash: 2cQhzB6rvIgJcWKL8JGJ8AUuDd5CAqSH0lZjme07urY=)
2: xLejOGcjuooupILHtoAxpUEirE8.crl (hash: 9CxcJgSxkM6kTCBGx6X1f8tu1Wg8HxMQ/VjNKNefqxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:23:7d:70:64:9f:74:79:67:aa:11:88:70:81:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Validity
Not Before: Jul 24 20:00:34 2026 GMT
Not After : Jul 25 20:00:34 2026 GMT
Subject: CN=cab9a388a7dd21b4148727e97707c386b70664ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:49:2d:9e:05:ef:7e:64:4a:7e:01:49:2e:
00:d6:10:97:25:c6:1b:9b:0a:44:32:f2:6d:04:02:
a8:e3:7e:92:38:8d:35:bc:84:53:cf:63:ff:3b:cf:
03:ac:78:f2:7f:98:ba:f2:f4:a8:fb:8a:d6:29:07:
29:db:8c:e5:ed:a5:03:02:63:d1:50:d9:3e:77:0f:
2a:42:96:d5:7b:1e:bc:b8:a7:5f:41:93:e0:93:0a:
38:a6:01:b7:59:46:99:17:a1:f0:48:a5:c6:55:07:
67:2f:6c:e1:53:a3:dd:0a:8a:ec:95:d9:91:f8:05:
a0:88:d0:bf:bd:af:cb:12:0d:11:3d:21:c3:a6:41:
ae:c2:ea:c4:e4:f1:1d:12:92:02:f9:84:8c:6e:a7:
5b:32:e0:3b:71:35:fa:98:a9:dd:6e:6f:1a:d3:12:
2c:54:c4:86:98:ac:44:5e:60:08:bd:e8:03:07:e3:
82:30:87:94:7c:4a:84:21:c4:3f:51:b7:9c:56:21:
eb:6f:be:00:91:a6:a8:53:88:ad:cf:ee:4c:51:59:
b8:96:17:51:ac:71:dd:16:42:38:ca:e6:2e:12:a1:
59:7b:a6:11:24:d3:e5:2c:03:b2:02:67:03:5d:4d:
63:2a:44:5e:13:79:36:ee:d7:67:e2:35:8b:13:a4:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B9:A3:88:A7:DD:21:B4:14:87:27:E9:77:07:C3:86:B7:06:64:BA
X509v3 Authority Key Identifier:
keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ca:79:a7:85:48:00:6a:0c:a2:e7:bb:7d:c7:5a:09:4b:2c:
04:5e:63:04:e2:24:7d:f1:e4:15:97:59:d2:f0:5d:ca:e9:48:
67:b4:65:0b:31:71:99:a9:72:44:9c:45:1e:2a:49:15:cd:8d:
ed:15:b2:08:9c:4d:5b:ce:b8:b0:44:8f:bf:89:4c:05:5f:5e:
85:79:9f:0f:61:3a:41:bc:87:1d:79:4d:94:71:11:f0:37:bb:
87:7b:ba:67:32:16:45:cf:1b:c1:24:4d:15:c0:7b:5d:b2:d9:
ea:8c:d8:be:44:21:79:ef:f8:9e:cf:8a:7c:37:d5:d7:59:66:
b6:39:bb:84:36:85:c3:49:86:3e:05:7b:db:1f:62:0b:54:06:
c0:db:43:46:59:bc:88:5c:9c:fe:11:60:54:cb:63:c2:89:6f:
dc:cb:0c:5e:cc:3d:9a:e1:44:45:57:d8:5b:e2:23:7a:ef:24:
16:e8:be:ec:aa:3b:83:ef:dd:d3:91:2b:48:4e:85:17:0a:4a:
87:2a:35:83:09:2f:b6:88:20:63:75:16:c4:98:4e:75:33:d9:
36:08:6c:6f:d7:ea:17:21:62:67:8c:34:54:d1:25:f9:5d:72:
2c:73:0a:e4:53:f4:43:26:9c:5e:d0:5b:c8:ad:cb:49:55:83:
78:d4:60:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:39:10 2026 by rpki-client