Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json)
Hash identifier: XkbmQoqrgyDB5yfbDVIWVhklXfn556CByuB7XU+wdNY=
Subject key identifier: EC:23:50:B7:38:8F:52:55:26:1D:E1:29:E4:A3:BF:E3:00:6D:36:53
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 019F92ED93678FF87127B3ED893A3A39F6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 07:01:11 +0000
Manifest this update: Fri 24 Jul 2026 07:01:11 +0000
Manifest next update: Sat 25 Jul 2026 07:01:11 +0000
Files and hashes: 1: 1-8oUTWUAuLAV-0eAuYQDr-5uUjg.roa (hash: j/xhG+Ho5blnFZVSciVE3ALUT+d6u+iQqAAWN+Se5oY=)
2: MHchnxV8uLs8pcvJTcOPLL-Bbbc.roa (hash: vPV8+4NZsXrCq8XvABi4c8I9ILlUiPMubO8YOy17XOc=)
3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: +nLWnmkBEbXKsUgfCkt8yO6tmPVaUGghXXsMeAk/44I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:93:67:8f:f8:71:27:b3:ed:89:3a:3a:39:f6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Jul 24 07:01:11 2026 GMT
Not After : Jul 25 07:01:11 2026 GMT
Subject: CN=ec2350b7388f5255261de129e4a3bfe3006d3653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:2b:81:cf:89:02:19:a2:e2:c2:00:e3:71:
19:e3:c7:b0:49:84:98:13:a8:b2:bc:b3:02:12:e3:
da:97:16:41:89:77:a1:43:20:2e:89:c7:4b:ca:30:
e2:37:3d:92:1b:76:9f:52:87:4c:ec:6a:fc:86:93:
21:5a:45:8b:5c:2b:b6:44:2f:06:f6:f9:0a:2e:be:
de:53:21:13:44:fb:31:a1:06:15:de:4a:06:57:7b:
3a:68:de:5a:d7:37:33:ec:81:d8:7f:3d:e5:49:28:
4c:85:fc:02:9b:54:3f:92:ff:f6:13:e4:26:5c:6e:
23:b3:52:3b:13:b2:fe:3b:85:95:4f:e9:ab:1f:61:
7d:d4:05:83:1e:27:70:e7:11:7d:0d:bb:89:bd:3d:
1d:4f:87:18:24:14:95:c7:7f:31:e3:fa:1e:fb:4c:
1b:27:af:da:b5:4d:07:78:b9:e1:43:45:30:d2:40:
ff:ee:3a:b7:ab:21:c2:24:3b:45:d0:bb:9f:7d:1d:
ce:7a:05:40:e4:d3:90:fb:de:32:f4:cf:f5:77:b6:
ab:11:bd:e2:2d:2c:42:58:02:9b:f6:2f:47:15:db:
30:95:aa:f0:9b:75:0a:1c:21:ff:e6:5e:fe:78:a5:
1a:18:11:bb:42:f5:1e:23:49:5b:d7:54:15:b3:f4:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:23:50:B7:38:8F:52:55:26:1D:E1:29:E4:A3:BF:E3:00:6D:36:53
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:91:3e:9a:0a:97:72:69:8e:b5:9c:1a:e0:07:c7:f5:8c:ff:
ce:ac:69:08:d1:65:12:c7:db:9b:06:d5:de:b7:1a:57:7d:32:
86:bd:71:cc:1b:a5:b7:59:b1:ea:00:56:a9:3a:bf:1c:e5:46:
99:41:14:31:a6:5d:c5:85:4a:1b:8e:64:5f:43:59:96:4f:41:
53:03:df:53:a2:17:1c:21:2c:5a:55:d0:02:f2:d7:9d:d2:47:
1f:91:c7:9c:fc:57:e8:52:6c:60:81:84:1c:e6:a6:87:29:f2:
39:a8:e2:59:ad:e6:94:35:89:60:84:08:4c:47:5b:5d:80:e9:
bd:df:28:56:ca:51:66:e3:4d:2e:fe:31:91:c6:46:84:b0:16:
52:3a:ed:00:df:f6:bc:08:7f:a9:43:f3:d8:28:ac:af:15:4e:
16:d0:b8:c5:ed:71:4c:c8:bb:01:cb:10:97:0a:b0:02:f7:cf:
6e:2c:8c:43:bc:ef:11:ff:0b:4a:f4:e5:21:d3:49:a3:ee:4b:
05:6a:60:aa:00:2e:47:64:50:51:82:86:df:41:fb:0f:46:4d:
94:4f:ce:c2:97:49:72:a2:5e:f7:f5:b9:2d:a1:1c:93:da:10:
d5:fb:c5:14:57:5b:19:15:5e:ab:5e:2b:1c:43:02:a0:da:d6:
1f:87:17:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:28 2026 by rpki-client