Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
File: XdDfAq2NzVImXb-cBfOBnyQy3_4.mft (raw, json)
Hash identifier: JERbiiFN06PHyx9C7d9/BH4IoVolmx0b7EdOsmNfq58=
Subject key identifier: 47:04:8C:30:04:B4:49:6F:5A:B7:E6:C9:1A:4C:99:42:46:06:A8:95
Authority key identifier: 5D:D0:DF:02:AD:8D:CD:52:26:5D:BF:9C:05:F3:81:9F:24:32:DF:FE
Certificate issuer: /CN=5dd0df02ad8dcd52265dbf9c05f3819f2432dffe
Certificate serial: 019F935B70DA516215B5B71A28CDAF02906F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:11 +0000
Manifest this update: Fri 24 Jul 2026 09:01:11 +0000
Manifest next update: Sat 25 Jul 2026 09:01:11 +0000
Files and hashes: 1: 9gJWQkxGs5Qy5W0SDW1Rj7nGQoI.roa (hash: 4pm0cu3JawKPkvnVafLyIQWg1jaUXk/k+2XMfkJDsyU=)
2: XdDfAq2NzVImXb-cBfOBnyQy3_4.crl (hash: VOkEquAP1g3UH8OabnWsOnOX2xdQFtP8H+adDc8c5Sg=)
3: jxsYluW7L-VesUMEEAjwwcE99j4.roa (hash: nwnLEM1dFL1lWHtpYNqY2hUoyqHLs3XF/ua5I+nhIX8=)
4: sJdr2Fb_Swcmno7YhJernLivV-4.roa (hash: UR6r+/nWVWtQENnrssjpLZJ3r+hXsPHUdwQ2sgMSnus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:70:da:51:62:15:b5:b7:1a:28:cd:af:02:90:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd0df02ad8dcd52265dbf9c05f3819f2432dffe
Validity
Not Before: Jul 24 09:01:11 2026 GMT
Not After : Jul 25 09:01:11 2026 GMT
Subject: CN=47048c3004b4496f5ab7e6c91a4c99424606a895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:eb:84:31:9c:f8:97:f2:32:16:89:4f:2a:
27:8b:8d:dc:1b:2f:72:f9:ab:40:40:fa:40:14:d3:
59:3e:a5:11:89:88:25:cd:17:43:f6:7f:f8:7f:07:
f4:e5:8e:29:3c:6c:cc:56:84:3e:e5:f2:55:b9:68:
2e:79:70:97:34:f0:66:10:75:56:d0:df:dd:55:7e:
be:b6:2a:69:ea:b0:24:66:68:72:ad:da:80:85:36:
e0:51:11:ee:f8:70:ca:a2:69:af:46:53:c9:82:24:
91:16:ca:37:24:9c:9f:43:53:71:40:0e:b2:db:c7:
2e:a5:cf:79:1f:44:db:e8:58:a6:e8:c0:e5:a2:a5:
7c:05:92:01:26:95:1c:1a:af:2a:8a:8e:17:59:85:
5a:20:c2:65:0e:fd:b2:5f:6e:ec:dc:55:83:63:3e:
e2:48:15:e5:ee:3a:52:f2:90:57:1f:61:0b:ee:dd:
f2:c9:a7:6d:d3:26:8e:c2:32:1d:d6:c9:5b:ea:b0:
c1:73:71:7f:04:6f:09:40:f3:16:69:b8:a5:52:c0:
ec:1f:8b:0d:16:58:f2:e2:1f:1a:a6:e2:ea:0f:21:
b6:21:17:b2:7b:41:f1:08:d1:e4:9a:de:17:bf:c6:
03:84:ba:8d:3a:40:db:85:72:15:53:88:d2:2d:84:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:04:8C:30:04:B4:49:6F:5A:B7:E6:C9:1A:4C:99:42:46:06:A8:95
X509v3 Authority Key Identifier:
keyid:5D:D0:DF:02:AD:8D:CD:52:26:5D:BF:9C:05:F3:81:9F:24:32:DF:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:67:d3:3b:af:9e:6f:7b:05:b0:1a:9f:66:67:a5:0a:46:e1:
2a:77:c8:94:d6:e7:9d:05:16:72:a4:ea:b0:61:f3:d4:e0:51:
91:10:e3:2d:59:ed:de:27:ef:b3:ce:82:91:54:6d:8e:fe:38:
05:02:c1:25:e5:8b:45:cc:87:04:a0:4e:4a:ec:4c:8d:05:b2:
5f:f4:00:1c:02:d8:20:15:40:74:4b:f0:cf:08:c3:b4:ee:12:
ed:78:63:42:fe:01:9e:b7:a3:a3:6b:91:d1:44:31:7d:c3:51:
94:d8:01:1b:63:ab:f8:55:2f:d6:e3:ff:e5:f9:c7:21:c0:03:
34:71:f8:b2:96:1e:68:b2:8b:f9:4c:da:0b:20:d4:d2:89:e9:
4c:df:f7:b5:d5:d4:97:ad:cd:20:8a:ba:03:42:8e:4b:6a:4f:
a1:c2:26:e0:19:4c:8a:79:fe:aa:47:4b:95:46:a3:3f:b7:90:
a8:1b:e2:2d:41:f4:4f:f5:b9:17:81:64:d2:95:ed:5d:0f:d3:
cd:fe:9c:b1:09:58:f5:49:19:55:37:c8:f1:77:3b:44:ce:e9:
30:95:a6:0c:7e:a1:6f:23:8b:f3:a7:95:47:23:86:84:19:71:
35:08:ba:4e:d2:f0:3a:5d:ec:97:b2:0f:2f:29:db:73:f1:75:
67:26:e2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:39:18 2026 by rpki-client