Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
File: rxxaicQTkD_UwrlE07xJezIZYsY.mft (raw, json)
Hash identifier: LmlAgF84q7gEwqcXIT8YHq+u8pCcfeT80SOjHYwY4LQ=
Subject key identifier: 37:9F:2A:97:30:32:EA:73:11:DE:1E:66:BD:08:C2:C1:BF:17:02:2F
Authority key identifier: AF:1C:5A:89:C4:13:90:3F:D4:C2:B9:44:D3:BC:49:7B:32:19:62:C6
Certificate issuer: /CN=af1c5a89c413903fd4c2b944d3bc497b321962c6
Certificate serial: 019F954952C8FE5653D0AD6D9238BAA77170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:38 +0000
Manifest this update: Fri 24 Jul 2026 18:00:38 +0000
Manifest next update: Sat 25 Jul 2026 18:00:38 +0000
Files and hashes: 1: a7niK7itDYSAcUcCWKLaVdepvNQ.roa (hash: zEoozmz189Usv1lYQlwpIyRkVXe/3xP6YFoEE3AiyZQ=)
2: rxxaicQTkD_UwrlE07xJezIZYsY.crl (hash: 6r8o+WXYTk3Uq0XIwNDfbrRp7OLLgfMZt5ClQs4mybg=)
3: tE6JJBGGYfL7pOmd9ScGG-PBKR0.roa (hash: U6b+qcJDlZitVxi4VTwdzLaOqGFdF5aocVEDkGTIcVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:52:c8:fe:56:53:d0:ad:6d:92:38:ba:a7:71:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1c5a89c413903fd4c2b944d3bc497b321962c6
Validity
Not Before: Jul 24 18:00:38 2026 GMT
Not After : Jul 25 18:00:38 2026 GMT
Subject: CN=379f2a973032ea7311de1e66bd08c2c1bf17022f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:37:4d:5c:3c:ab:99:cb:c4:54:b1:50:89:
79:ab:a2:f5:ee:0a:6a:f5:98:b0:2e:84:b0:e9:70:
81:67:28:00:a0:94:5e:1b:64:d4:c8:37:fd:a7:35:
6b:05:a7:c3:b6:73:09:5b:7b:a4:26:49:6d:e0:fd:
a9:b4:3d:95:46:9f:f3:d5:4e:ef:64:5e:37:4c:7c:
5c:6f:ab:d0:af:37:b5:f6:2e:0f:24:51:3c:2f:f5:
f3:1a:13:7e:85:a1:6e:14:d0:79:b9:eb:48:33:17:
c7:a0:1d:dc:36:b8:bd:2e:58:02:37:6a:32:25:be:
29:b7:d9:bb:17:f3:2a:53:ad:12:00:98:a2:f4:85:
19:12:49:c0:9e:6a:f4:c0:50:a7:a8:33:b4:14:65:
08:49:73:3d:04:d7:31:b3:af:ed:8c:08:5e:a8:7c:
14:77:84:1b:88:31:07:1e:51:17:71:0c:48:4b:7f:
5a:ef:2c:06:30:62:33:63:8e:e6:fa:91:09:0b:a2:
8d:89:6e:79:7e:cf:28:a2:74:16:ee:9f:93:93:11:
7b:0b:30:87:71:6c:e7:66:6a:94:dd:4e:45:2c:bd:
ce:1b:e6:01:c8:58:be:5b:0a:e1:c4:cb:45:85:71:
0d:c2:9a:15:7d:75:75:ed:44:51:e1:f1:71:1e:d2:
a3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9F:2A:97:30:32:EA:73:11:DE:1E:66:BD:08:C2:C1:BF:17:02:2F
X509v3 Authority Key Identifier:
keyid:AF:1C:5A:89:C4:13:90:3F:D4:C2:B9:44:D3:BC:49:7B:32:19:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c7:8c:06:ff:23:98:98:9a:f9:93:15:04:b8:61:06:72:ff:
14:20:44:07:2d:82:07:22:33:72:67:a4:01:be:20:62:99:ff:
e9:73:2c:e1:44:2b:ca:b0:15:57:01:e0:91:be:ee:fa:1e:1e:
58:26:a9:42:95:db:c1:dc:c8:2a:9c:ff:fd:82:c5:25:b4:ca:
cf:cb:87:c1:7b:ef:eb:e5:fb:11:bb:86:e1:20:89:54:9c:80:
34:a8:c4:bd:ea:eb:4d:5b:59:56:b6:27:95:64:56:64:5a:7b:
5f:d2:6d:63:57:4f:ba:a8:25:52:a2:46:31:42:14:f8:ab:7a:
3f:16:f5:5f:a4:70:67:44:c7:50:f9:7b:4b:3d:6f:be:37:2a:
56:35:d0:7a:20:80:7b:00:19:54:46:a2:80:8d:8b:be:99:3a:
bf:0d:b6:8a:23:cc:f3:9a:ae:58:06:27:17:16:2e:35:a1:11:
95:38:f8:dc:8d:9b:12:83:4d:f5:14:6f:09:4d:a9:19:8f:50:
1d:bb:8b:6b:c6:49:ec:b9:dc:27:b8:3b:31:ab:67:91:6e:6b:
5a:28:16:88:3c:52:b9:9b:fe:ef:10:0d:4e:b3:ab:58:70:37:
c2:1f:89:d9:e7:a5:a6:80:d6:6b:1f:ed:62:d0:18:b3:1f:fa:
82:dc:0d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:51:07 2026 by rpki-client