Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
File: xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft (raw, json)
Hash identifier: Ml2bVIjGSX4j4veyCryQhO8155U5nXt/gShFo/isk0U=
Subject key identifier: 3B:EE:85:7E:77:BA:F4:E5:90:91:75:C3:C5:D4:06:1D:4A:E0:9C:04
Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Certificate serial: 019F94A5267762B97532FE0D07AD21AEA173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 15:01:18 +0000
Manifest this update: Fri 24 Jul 2026 15:01:18 +0000
Manifest next update: Sat 25 Jul 2026 15:01:18 +0000
Files and hashes: 1: BQk9R-N3GOOYrja30Pn_XVDUf88.roa (hash: Yweym3mWkXHkGOyAmG6nDG9vHGdFCmlWDKJNXExlolQ=)
2: Z16EOuIvCScFGsV_p1V2RWzx1ZA.roa (hash: rAhtAVQwXrS7vputjJ+v+BvlJ+PvCNgskZKO8Cfnpys=)
3: xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl (hash: JRqn4Uc8nyz72ugHQnEO2s77JkaZdX8ztOTFQUE4LWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a5:26:77:62:b9:75:32:fe:0d:07:ad:21:ae:a1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Validity
Not Before: Jul 24 15:01:18 2026 GMT
Not After : Jul 25 15:01:18 2026 GMT
Subject: CN=3bee857e77baf4e5909175c3c5d4061d4ae09c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:0a:bd:fa:2e:01:63:60:51:fc:f6:55:07:
70:55:38:19:0a:ea:c2:30:1b:38:85:01:d2:8a:a8:
0d:34:e1:c1:5e:d9:2e:aa:57:ba:1d:ac:5e:0a:eb:
d3:dd:ee:0f:5c:5e:0f:9c:7a:c0:9a:52:d1:11:4d:
68:1b:57:d5:f8:2f:09:3a:7f:37:f8:cc:b4:9d:74:
18:e8:df:61:a6:eb:f8:82:7d:f3:26:39:3d:22:a6:
38:75:9b:ad:34:48:f0:40:cc:81:ee:a8:2f:af:0b:
8c:c0:c7:6d:ce:fb:db:7c:f7:c0:5e:9b:1a:a9:09:
91:88:1b:27:2d:82:de:41:45:9c:a6:f5:81:3b:83:
73:28:1e:48:a6:dd:e2:3b:57:98:a3:8c:e4:bc:52:
ce:f9:bc:bb:e7:58:72:81:bf:e3:71:71:91:c3:36:
96:56:ff:f0:59:98:29:6c:1c:5e:5e:94:15:2f:0b:
66:d7:ff:f9:53:0e:91:d3:95:e5:56:ee:86:2e:6c:
b6:74:9b:eb:72:fe:3f:ba:6f:9b:83:aa:cb:69:db:
50:89:32:75:03:96:48:c8:f6:23:d8:47:c6:b1:5b:
ff:02:04:bf:0a:48:46:59:93:bd:ef:78:f8:c3:a0:
28:32:7b:e6:27:1f:16:a1:fc:d0:54:de:44:57:86:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EE:85:7E:77:BA:F4:E5:90:91:75:C3:C5:D4:06:1D:4A:E0:9C:04
X509v3 Authority Key Identifier:
keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7f:cb:e6:28:b8:0a:17:28:73:91:bd:db:c8:96:e5:ef:63:
97:13:d9:bc:a2:29:3f:c8:e0:e5:d7:dd:24:11:33:f3:9d:2f:
2d:ac:ef:36:ed:86:7e:68:6e:69:41:9f:dd:de:91:06:8f:f8:
cd:9c:25:de:1c:90:40:4c:35:e8:74:21:b3:8e:b0:66:31:2c:
85:0e:3f:d7:dc:49:ca:a7:e4:ec:fc:5a:e3:51:eb:f0:07:4e:
ce:7e:25:b4:f9:67:8b:30:54:8d:c0:7d:67:ce:0a:2e:54:18:
a7:d9:90:dd:e0:ea:0a:87:b0:b5:8c:01:1e:7f:ec:28:97:bd:
50:c1:dd:d5:37:5a:40:f7:8f:6a:f8:c2:fc:db:d8:52:96:97:
a2:51:e3:47:6f:23:5f:da:97:4a:f0:9a:94:cf:da:d8:59:bc:
ea:01:a6:77:bb:2e:1f:ab:f8:13:ad:92:0d:4c:26:e3:cb:38:
d5:c3:d5:52:4a:2f:f6:f8:6b:2a:05:2a:2e:d2:5d:55:d6:4d:
81:42:c2:30:0f:93:1c:12:73:76:27:6f:20:a4:26:5e:de:98:
a8:dc:6f:30:c9:46:fb:dc:c4:48:fa:2a:67:4e:30:78:fe:f0:
ea:18:32:29:e9:45:81:fa:0a:e0:1c:80:ff:2c:99:ff:da:5c:
33:13:db:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:09:50 2026 by rpki-client