Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier: gXDNYF0wXqhfdrYj3Yt1hK//U7CPGrIj0PZwRB8O67M=
Subject key identifier: A9:1C:85:F9:CE:B8:EC:A8:16:3E:8C:7B:4D:3D:B8:7D:7D:D4:EA:9D
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer: /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial: 019F8FEC25F1CA143F5A490957ACDC96FA05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number: 1959
Signing time: Thu 23 Jul 2026 17:00:45 +0000
Manifest this update: Thu 23 Jul 2026 17:00:45 +0000
Manifest next update: Fri 24 Jul 2026 17:00:45 +0000
Files and hashes: 1: a3vqBzTeMihaLI7nX3YXTwT9QXM.roa (hash: YtcSgTlR3L7xs2ulbON7vgzLF5ftnMrGCR+z8FjX7OE=)
2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: wdRCyEY031j2ORbXky2rti8flq7NALJAvWW8VtDT9x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:25:f1:ca:14:3f:5a:49:09:57:ac:dc:96:fa:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Validity
Not Before: Jul 23 17:00:45 2026 GMT
Not After : Jul 24 17:00:45 2026 GMT
Subject: CN=a91c85f9ceb8eca8163e8c7b4d3db87d7dd4ea9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:8d:10:73:54:6b:ee:85:73:e1:cf:05:e8:
a9:6d:4e:6c:41:e4:1e:76:bb:77:15:c0:14:89:12:
69:94:80:53:b1:70:e4:90:31:23:43:dc:08:da:32:
b5:d3:38:e1:10:73:0b:9c:1c:94:d4:83:92:d1:63:
f6:36:1e:6e:77:b9:db:c0:bb:e6:90:08:35:6c:51:
e8:ab:3b:00:8d:ea:04:03:33:08:9f:c2:58:40:93:
07:1e:8c:a2:6f:4f:8b:a2:84:4c:8c:9d:da:ec:fe:
e6:57:b0:97:ea:13:e0:4e:22:49:60:d0:6f:51:b1:
59:52:7d:ce:0f:67:d5:8b:a8:c5:d6:dd:18:f9:62:
30:66:e6:24:e7:82:88:b0:34:80:6e:58:66:11:89:
10:56:b2:de:da:f4:44:8d:b1:66:68:03:22:ab:e7:
97:5b:3f:62:c5:8a:51:80:ec:bd:d4:cb:68:c5:7a:
f7:5c:6b:66:24:14:cb:22:78:82:63:70:b2:f3:ba:
93:4f:2d:d1:f2:50:cd:8b:25:4f:de:e7:08:88:2b:
1d:7b:3f:5d:c5:4e:08:f6:23:a3:89:1c:27:dd:2e:
60:ee:29:ae:4e:a7:a9:ed:09:2f:56:8b:ef:c3:d1:
0f:3c:30:d3:0e:de:0a:2a:d7:12:45:21:82:fc:6d:
5f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1C:85:F9:CE:B8:EC:A8:16:3E:8C:7B:4D:3D:B8:7D:7D:D4:EA:9D
X509v3 Authority Key Identifier:
keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0e:09:b0:d5:fa:2c:d2:90:dc:6c:a5:b2:db:a1:cd:76:31:
7c:1c:7a:51:4e:d7:92:dc:32:b0:1a:13:ca:6b:58:83:ab:b9:
7a:d1:9f:a3:64:ac:a6:65:85:2c:cc:e0:d6:82:b5:52:c5:f9:
a1:d7:f6:e1:24:23:eb:8b:d4:b2:7b:45:e8:7b:13:0a:25:84:
db:07:c8:3f:a3:83:3d:ba:57:65:c7:09:27:9d:04:6a:08:09:
dc:8e:63:e6:52:06:0a:b3:6d:84:db:e9:e6:e7:7b:27:af:77:
bb:14:39:13:a4:84:43:a2:b6:4a:8d:f5:83:aa:df:1d:39:34:
b6:01:b0:ac:29:bb:21:66:6c:49:c6:d8:f2:78:37:16:f1:18:
50:5e:52:82:d0:1e:bb:cd:22:7a:f3:c3:d7:ca:e8:f6:10:d9:
a4:42:46:01:6c:79:6c:46:85:80:4a:ec:68:21:b7:68:c8:02:
d5:29:72:21:a5:14:a3:6d:63:4a:ea:e7:1b:ba:31:f3:1d:0b:
ad:47:e4:2a:3f:0d:a0:10:7d:ff:0b:e3:b7:81:53:b7:d8:1b:
98:d6:cd:4b:e9:44:bf:34:5c:18:f0:e2:b2:9c:a3:e8:fb:e2:
93:b4:04:d8:74:11:c5:bd:c4:48:d5:a1:62:d0:84:45:8e:e2:
a9:03:ac:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:14:25 2026 by rpki-client