Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json)
Hash identifier: R8HDUFPISn73cc+AsxbEr6vbpd6JIo1vPOmUwmBSsqk=
Subject key identifier: 25:EE:D0:33:48:F6:95:88:EF:98:29:29:15:90:C8:FC:C3:12:3C:88
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial: 019F93922B58466739C072D1F23EABEF203D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
Manifest number: 06AE
Signing time: Fri 24 Jul 2026 10:00:57 +0000
Manifest this update: Fri 24 Jul 2026 10:00:57 +0000
Manifest next update: Sat 25 Jul 2026 10:00:57 +0000
Files and hashes: 1: EhoGVGxSzJ85EDf-pwsVPGfHrjk.roa (hash: bYaigFFh4NG+rmCpPKbaSMIoScBrwWuRStJPl8NxmHQ=)
2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: N7puuXz40emMVcreWzAYKvG8mcWzeNchIQVCidhoEMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:2b:58:46:67:39:c0:72:d1:f2:3e:ab:ef:20:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Validity
Not Before: Jul 24 10:00:57 2026 GMT
Not After : Jul 25 10:00:57 2026 GMT
Subject: CN=25eed03348f69588ef9829291590c8fcc3123c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f8:87:82:64:b0:2d:6f:a2:f6:6d:d3:6b:b1:
93:12:1d:fd:41:b5:37:c8:e9:76:3e:4e:ad:23:46:
a3:14:22:11:55:df:c6:5d:e6:8e:8a:16:04:71:e6:
4e:3f:f1:aa:f8:3f:0e:41:10:65:a8:48:a5:e0:a0:
bf:b9:5a:42:04:2d:99:b4:5c:f9:62:e8:36:5e:b9:
c5:19:f1:64:c8:13:d7:bc:45:57:42:95:74:92:4d:
d3:87:8c:33:c7:e7:c4:b7:86:d0:ad:ab:ed:36:bd:
de:83:c2:14:3b:c4:4d:35:fd:86:51:55:9f:36:95:
7c:0e:96:64:a3:da:5a:41:e5:36:99:2c:90:ff:02:
29:1b:e7:ff:be:4b:6d:52:30:91:ab:4c:54:c7:7e:
ac:dc:9d:e9:b9:a6:7f:17:e8:4a:59:9f:d9:79:05:
14:dc:98:1f:e2:2f:52:37:6c:f4:8c:04:c6:1a:9d:
86:87:7c:b3:e3:cc:9f:51:17:b7:01:cc:a3:3f:7f:
72:9e:ac:7e:ca:cf:af:af:fa:34:de:2b:9b:24:5e:
8f:10:83:c5:d0:0f:33:64:f1:f2:70:e8:0d:58:cf:
5a:3d:8d:cd:54:3d:0d:a5:c9:e1:4e:e1:e8:22:23:
5b:1a:41:69:2c:4e:c1:e2:33:2e:63:d7:d7:26:26:
d6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EE:D0:33:48:F6:95:88:EF:98:29:29:15:90:C8:FC:C3:12:3C:88
X509v3 Authority Key Identifier:
keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e3:dc:8a:47:72:2a:5d:d5:e6:dc:89:96:90:97:eb:ce:b0:
26:8d:1a:85:73:7f:9b:32:b7:13:ee:ea:9b:43:1f:30:ee:e8:
6b:73:e2:50:d7:57:bd:e0:41:45:45:a6:6c:a5:a6:d5:60:60:
9e:6c:53:bc:45:de:f6:3c:11:cb:bc:02:af:61:35:1e:27:a8:
c6:ab:19:62:bd:23:f0:73:21:07:0f:84:60:8b:ce:e7:a6:49:
77:b0:e5:9f:df:90:b0:df:b8:4a:08:45:f0:bd:1c:b6:b6:eb:
1d:8e:53:5b:08:9a:af:23:97:18:ee:fb:ee:f4:6d:4c:d7:d0:
75:59:5b:5a:33:81:24:40:61:cd:a3:c6:91:37:92:e4:98:f9:
71:d2:6b:c1:30:4b:2a:0e:7c:2a:d5:d0:cd:f5:e4:b1:4e:5d:
76:4a:e6:e5:c0:bb:57:72:af:cc:07:23:03:21:58:9f:e4:34:
d6:7f:20:e8:7f:82:9c:11:58:7d:61:92:b9:8e:28:84:0f:b7:
7b:11:1c:23:2f:34:de:1e:25:e7:33:64:7f:56:c5:1d:ba:6d:
ca:07:f2:d3:84:5e:8d:96:e8:45:71:1b:5e:49:c3:3c:a1:9a:
a8:d9:cb:4b:d2:c0:0f:89:31:8e:5a:13:7c:90:69:13:2c:47:
e8:4b:48:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:35:06 2026 by rpki-client