Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
File: xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json)
Hash identifier: gc0G/Q76WIsfnNp7YNNnlBUecx66vbn0AtslFO5034s=
Subject key identifier: 34:AB:F5:33:A3:B7:6D:3F:FB:3D:BE:34:58:3B:07:BE:A8:BB:B7:A6
Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
Certificate issuer: /CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Certificate serial: 019F91A42BBF570B1954909691C92F915B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 01:01:23 +0000
Manifest this update: Fri 24 Jul 2026 01:01:23 +0000
Manifest next update: Sat 25 Jul 2026 01:01:23 +0000
Files and hashes: 1: anR-jiw5iWX6P_O3ZLR56HCtW8Q.asa (hash: 7u+mvM88sgrFTXJweELAa6KOQrCFYjsrbqETsAKlTPs=)
2: lXZ70sH06yN7K7WcAZYGhagQGQU.roa (hash: eJ37tNCDP1cEuP29zNg/vJT6DSno9tiJhEXL9Ek6IDY=)
3: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: h5nRWMxOaOr7WzPHivDM2gGj+HSnIQxZNXPaGd5rM+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:2b:bf:57:0b:19:54:90:96:91:c9:2f:91:5b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Validity
Not Before: Jul 24 01:01:23 2026 GMT
Not After : Jul 25 01:01:23 2026 GMT
Subject: CN=34abf533a3b76d3ffb3dbe34583b07bea8bbb7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:d5:d8:6a:dc:a4:46:94:3a:63:f0:5b:68:
6d:4a:3c:1a:db:fb:8e:eb:c3:19:5d:ab:42:47:34:
35:4c:38:1d:ff:00:fd:ca:01:7e:df:37:49:72:fb:
49:e1:b0:50:0d:5a:af:d2:ff:2a:cc:79:67:15:fb:
a3:2c:e6:a9:c9:27:c7:9c:42:01:99:2e:b2:ac:ab:
af:4a:33:6f:1e:f9:22:e3:e5:75:08:2a:98:f6:7f:
5d:00:08:13:18:87:45:aa:c9:0b:98:07:e3:6a:6a:
51:6f:b6:ca:c1:37:3e:06:03:45:d5:dc:19:30:3c:
3a:ee:4e:82:68:7b:23:21:05:d2:51:09:fa:6b:89:
13:22:ad:4c:b4:5c:37:46:71:39:35:33:7e:9a:c0:
27:76:83:44:09:16:45:97:2f:84:94:45:75:65:d2:
84:77:f2:0a:30:12:90:6e:53:c6:50:37:29:2f:54:
3c:b5:65:6e:79:68:3c:ea:3d:95:5e:42:f0:62:50:
4a:aa:cd:c7:79:20:5c:55:a1:aa:d9:9d:1a:24:a7:
dd:c3:49:d6:52:73:b0:a8:f7:84:58:c1:dc:f4:c1:
a6:4a:bc:10:81:b1:32:5b:e2:d2:2e:3d:16:64:f1:
c4:2d:af:cc:f2:f9:0e:ed:ea:11:b3:30:dd:ee:a0:
2d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AB:F5:33:A3:B7:6D:3F:FB:3D:BE:34:58:3B:07:BE:A8:BB:B7:A6
X509v3 Authority Key Identifier:
keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f8:4c:60:1b:0b:75:f2:2b:5f:ed:35:e4:be:f1:3b:30:02:
a6:5d:ac:e4:7c:14:c6:d8:ac:e2:bc:eb:1d:96:1d:e8:fc:ef:
1d:24:d4:74:ca:0c:3e:10:b5:39:1f:50:2c:1e:04:2f:ba:fb:
da:2b:c2:d1:e9:7f:a0:1d:e1:69:cf:63:d2:1b:ea:42:b7:27:
fb:65:c3:b3:e4:e9:f1:77:bb:29:f2:3d:61:7e:72:ea:c5:f8:
83:42:26:ad:07:0a:cf:73:e2:b4:8a:b4:e3:24:22:2d:5c:66:
14:8d:32:fe:1d:31:cb:78:47:fe:5c:31:0b:de:80:df:28:5a:
f0:ee:95:47:0e:c9:37:5e:0e:37:f9:73:e1:00:92:9f:8c:8c:
50:0e:4f:79:a9:cc:4f:8b:e3:2f:40:9f:22:fc:c2:b6:a8:98:
22:b9:66:c5:8c:99:fc:d4:36:ce:1f:64:58:15:8b:ab:43:13:
53:df:28:d1:36:50:3b:2b:7e:a2:68:06:9e:c8:1c:0b:15:7a:
7a:d7:7f:e1:bd:5e:8f:67:61:75:43:f2:38:6b:77:4c:43:6d:
93:22:52:07:7f:8b:01:1c:aa:ca:1c:ca:0d:b5:29:b8:32:27:
f5:8a:c9:fd:9d:ca:19:b8:3c:8f:ca:14:b9:1e:31:7f:39:12:
65:4a:b3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:04:54 2026 by rpki-client