Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: vY2hHbXLZk1toeyFITzZrg3dNz5tO/6/D4D7s87+Srs=
Subject key identifier: BD:94:75:F2:E3:6E:CD:5F:88:26:2A:84:A8:66:0B:1A:A2:3E:97:4E
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 019F9090AEB30A89489BB2F75606B43F1C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 20:00:28 +0000
Manifest this update: Thu 23 Jul 2026 20:00:28 +0000
Manifest next update: Fri 24 Jul 2026 20:00:28 +0000
Files and hashes: 1: 8bjq5CLAkMYnJtGthdYrockLCPY.roa (hash: eDG4zg9ilYUKjh0gJA5+ITJl6INuXH1V6df209hapIs=)
2: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: 7AADEaiwk9UbKwqaXOdfR8yPZMUWhOYaPFKVbvoOC6k=)
3: y6q-4aOfHflX0pozAnd7z21SiEw.roa (hash: BNrcMKA3+AgY/9eYfHPZuG3AM/va4c4zSTiZb/uHiLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:ae:b3:0a:89:48:9b:b2:f7:56:06:b4:3f:1c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Jul 23 20:00:28 2026 GMT
Not After : Jul 24 20:00:28 2026 GMT
Subject: CN=bd9475f2e36ecd5f88262a84a8660b1aa23e974e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8f:e1:25:83:a7:35:b0:dd:10:9d:23:df:af:
f6:94:93:7b:2e:f0:fc:26:0f:7a:23:22:45:8f:82:
03:d8:a4:16:73:f0:4f:5d:61:b6:3c:2f:2a:bc:31:
66:ea:2e:3f:05:44:03:db:55:ff:d3:1b:d7:ce:e9:
6d:62:8e:71:2b:da:e3:f0:8c:d0:3a:65:ab:85:c3:
73:fb:05:62:2d:a8:da:e7:b3:ca:c1:43:72:52:82:
37:31:b6:94:68:a4:89:1d:f6:f2:72:a6:b2:a4:eb:
0d:19:64:07:be:e1:e4:ed:6b:53:fc:74:36:2a:c4:
e9:55:93:ce:91:21:b2:7c:bd:4b:8d:58:4f:64:f5:
fd:71:82:67:fc:5f:0e:10:1b:e7:6b:19:e7:0a:51:
ed:76:e9:31:ae:1c:55:cb:fd:bd:61:a0:f2:40:ca:
fa:52:25:17:79:c0:0c:c5:e6:30:be:ff:15:cc:d0:
4a:52:36:21:e4:82:12:6b:87:f8:46:2a:75:e1:b9:
94:48:88:2f:3b:34:64:2a:ab:5e:3f:f8:e0:86:f7:
88:63:05:6c:5d:25:c4:45:82:3b:44:f2:2c:1f:01:
fd:9f:c8:93:88:b1:19:4c:bc:ce:20:32:9e:c7:cc:
3b:03:87:a2:f6:61:b9:5d:c0:16:16:42:88:e5:de:
50:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:94:75:F2:E3:6E:CD:5F:88:26:2A:84:A8:66:0B:1A:A2:3E:97:4E
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:a3:22:c5:11:f3:21:25:20:17:84:56:55:be:d5:07:2e:de:
a4:68:9d:82:96:ae:af:12:66:b2:76:ea:66:00:c4:2d:5c:75:
0e:13:c9:50:f5:55:18:d8:0b:94:26:fe:02:a2:2d:12:96:70:
93:ff:bb:fe:c8:cd:2e:a5:ce:b8:8f:74:fb:2f:ee:d4:f8:8f:
86:90:6a:bf:d1:62:63:1c:77:4c:14:80:59:0f:93:86:31:31:
46:1a:2f:aa:35:ca:d0:a8:d0:22:ae:0b:7b:0d:36:a5:76:d2:
df:41:d0:55:36:a9:e2:29:0f:e5:4f:78:40:2d:ac:78:1d:3e:
ea:8e:67:fb:c4:f8:a6:f6:eb:bf:9f:06:6f:8f:a3:78:63:9b:
84:bf:33:ee:8f:dd:b9:dc:27:da:9b:a2:12:ca:98:b2:84:89:
b2:7f:ba:44:cd:0d:30:30:d8:5c:49:40:4b:e7:9c:c4:44:47:
60:09:13:dd:2b:ba:23:e3:91:e3:09:8c:1c:d7:d8:1b:1c:9d:
14:01:9f:34:e1:e2:3d:e8:e4:fd:6b:70:0a:0b:80:69:e1:a4:
ea:a4:1a:ca:79:96:57:01:47:5d:5a:f7:2a:a9:cb:b4:40:b1:
81:50:b5:1a:e5:38:02:97:cd:04:54:06:35:4d:b7:54:e8:8a:
06:7a:e1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:22:56 2026 by rpki-client