Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
File: xBK7PaZcqrUkhR74bOm6piB04e0.mft (raw, json)
Hash identifier: JsY/NaB9pk0ccX6ifcD2etPiA54DsQWQnGelYk+kPtw=
Subject key identifier: 80:4A:0E:11:72:1F:D4:44:CB:11:7F:B6:82:40:05:B4:E0:99:21:7D
Authority key identifier: C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
Certificate issuer: /CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Certificate serial: 019F9022A4D6FC46DEDE44339A9C0A805530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 18:00:17 +0000
Manifest this update: Thu 23 Jul 2026 18:00:17 +0000
Manifest next update: Fri 24 Jul 2026 18:00:17 +0000
Files and hashes: 1: sesfpS4vflQUJ0zHNMlqdR_eVFI.roa (hash: EeKCakHwf9lALKZ5zNCtLbT5f2osgE69W3ufAPv/OQY=)
2: xBK7PaZcqrUkhR74bOm6piB04e0.crl (hash: +X9j2VlchI07me6BD/U1Sl0nu6hQs5ymDGMOeBVMSSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:a4:d6:fc:46:de:de:44:33:9a:9c:0a:80:55:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Validity
Not Before: Jul 23 18:00:17 2026 GMT
Not After : Jul 24 18:00:17 2026 GMT
Subject: CN=804a0e11721fd444cb117fb6824005b4e099217d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c8:8a:bc:5b:6d:e7:2f:b0:d3:8b:e0:1f:e5:
13:d0:b9:5d:b8:53:7e:78:18:ef:ad:0a:e3:bf:62:
e1:e1:8f:b4:4d:8d:27:14:a9:71:c5:52:95:e1:29:
22:21:22:da:57:ac:52:9b:e4:4c:03:fb:e4:34:82:
7a:dd:86:26:6e:38:77:1a:8f:5c:17:a9:ea:92:47:
06:d4:8e:2e:13:35:f2:4a:c6:12:7f:52:21:a9:bb:
54:ac:2f:10:60:73:05:74:2c:5f:5a:c4:96:95:45:
24:73:a3:b8:83:8e:00:bf:29:30:69:b4:4a:e9:84:
17:66:81:60:75:d9:03:fe:4f:1f:31:da:92:7e:7c:
6c:fa:e9:e4:51:09:2e:86:e7:8b:59:8c:5a:8c:ac:
20:1a:58:63:d8:a2:d6:c2:8d:71:5e:d8:67:ad:9b:
aa:13:fe:36:01:f3:5f:e4:d4:b8:14:42:45:40:75:
0a:49:00:9f:0a:db:c2:98:6b:4e:7a:a0:c0:fe:cd:
98:45:bf:81:74:30:cb:24:f0:cc:98:e8:db:91:2b:
fe:bc:62:79:0b:a1:48:13:b3:70:90:f7:ab:e7:0d:
a9:27:89:b7:4e:95:db:b5:1d:b9:80:e3:68:5e:95:
df:01:30:7a:3a:81:fb:cc:71:de:c4:f5:48:e9:0a:
67:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4A:0E:11:72:1F:D4:44:CB:11:7F:B6:82:40:05:B4:E0:99:21:7D
X509v3 Authority Key Identifier:
keyid:C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7a:15:99:43:2b:83:6c:36:ee:75:71:8a:a4:fb:d0:cb:a3:
29:cb:81:db:6e:e4:f0:a4:ee:dc:0e:29:5c:80:05:eb:64:dd:
6d:94:84:c2:c6:6a:3f:83:de:e2:d4:a5:e2:1d:7a:58:85:cb:
5a:a9:cd:f5:b5:9b:ae:6a:ba:72:2c:2a:4e:3e:e6:b9:f9:4d:
24:70:5a:3a:2d:a1:03:3e:ef:48:43:0e:e3:3d:bf:a0:70:39:
e6:e8:df:8e:c9:fe:08:b4:49:62:d9:d2:96:3e:bb:74:c1:50:
66:a3:39:a0:a4:50:a5:e7:a9:c8:12:9a:dd:8d:4c:d0:a0:69:
6a:bc:4f:1f:b8:87:66:35:1c:2e:04:d8:7d:a4:10:45:10:3d:
30:cf:eb:a7:e0:9b:26:ac:0c:09:04:ac:03:8d:71:b6:98:0f:
d9:72:60:e7:b7:e9:60:af:e6:5e:6f:bc:72:cf:4e:71:36:16:
0e:47:d4:b8:14:0c:94:0e:40:fe:eb:e1:05:d3:e6:fb:8f:f1:
e5:47:06:45:c8:c3:d9:12:63:9c:91:bd:7e:73:6c:a4:a6:72:
29:3b:a4:63:3b:f0:58:c4:bc:98:4f:b1:fb:69:76:9a:d8:c7:
82:98:03:20:ef:43:3f:10:b1:83:ac:59:d5:94:26:9f:5d:11:
f6:19:fa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:17:00 2026 by rpki-client