Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier: A5cY5xI0CYz2z9PjzfbryOR6kW4524X++jUENOvgomY=
Subject key identifier: E1:07:BA:C7:2F:CA:70:21:0A:EE:9D:BA:34:14:45:81:AC:05:D5:DE
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 019F935BFF23BF54F32B70D5E5C055BC3281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number: 08BD
Signing time: Fri 24 Jul 2026 09:01:47 +0000
Manifest this update: Fri 24 Jul 2026 09:01:47 +0000
Manifest next update: Sat 25 Jul 2026 09:01:47 +0000
Files and hashes: 1: D93aVb7wrIXUaG1-CC-3JUagYOE.roa (hash: /8ReYoccQ/vVAZ/EZIZ9ttYSoWEPANiLCShHLXPhYb0=)
2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: FfOmkx/rDhXT93+hlQU/Ftf9HbU9IYw69NjhKu0Dzg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:ff:23:bf:54:f3:2b:70:d5:e5:c0:55:bc:32:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: Jul 24 09:01:47 2026 GMT
Not After : Jul 25 09:01:47 2026 GMT
Subject: CN=e107bac72fca70210aee9dba34144581ac05d5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1d:dd:16:78:2c:55:8a:81:27:62:38:a2:a8:
67:9f:51:f4:0c:e7:a7:ae:c6:e6:5b:54:6f:8e:d4:
89:97:b5:aa:a0:69:cc:08:1b:13:6d:1d:de:d2:24:
59:2d:f1:3d:43:cc:70:fb:46:a4:f6:ff:95:4f:9b:
50:43:b7:93:a5:56:c2:db:5b:84:bf:f7:8d:ff:ce:
58:fa:0b:7e:9d:e4:c8:b8:14:ad:ff:75:7f:c5:b0:
bf:ed:02:b5:d3:4e:5a:60:6a:5b:0d:c8:0b:eb:ad:
c8:a3:1c:e2:6b:d3:60:34:cc:b4:d2:77:4c:d2:ab:
08:43:80:7e:48:98:7f:85:b2:96:e4:99:53:87:17:
23:a6:61:04:ab:58:68:24:4d:05:c6:de:e0:3b:40:
e1:7a:f4:bb:81:ea:a6:ee:c5:ac:ac:be:4e:21:20:
5d:38:0b:19:c8:24:79:ad:af:c8:23:11:38:71:d7:
77:3a:38:1b:a3:b3:0b:c1:a6:9c:51:10:ab:a2:f3:
12:c2:d2:b9:44:1c:41:57:00:e7:e8:cf:5c:bf:40:
fa:2a:28:80:90:ed:03:5f:d7:b7:3d:fd:3b:a9:dd:
77:d5:a7:72:f3:3e:9f:11:8e:90:f3:cb:ae:6d:75:
87:d9:c1:fa:f1:b8:b5:c9:3c:a5:13:4d:01:63:80:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:07:BA:C7:2F:CA:70:21:0A:EE:9D:BA:34:14:45:81:AC:05:D5:DE
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:90:79:62:e3:00:0d:8d:c3:de:a3:89:c3:ff:20:a4:19:fb:
bf:a3:00:14:03:4e:ff:e2:29:6a:c4:a0:a8:d0:18:5b:40:19:
b5:c0:f6:b6:8e:41:b9:aa:68:74:ba:72:7a:d0:d0:20:4e:15:
8b:03:74:c9:a5:5f:52:f7:15:1c:33:3e:ad:90:ef:58:a0:3a:
db:48:0f:b9:3b:7e:c9:c3:39:81:d9:91:b4:b7:92:d9:70:34:
25:b6:ef:b2:1b:0d:68:5d:49:c0:ca:f5:77:c7:f4:ac:7e:f5:
e3:27:51:ca:e8:82:4c:f3:24:b2:b4:20:ce:35:3a:48:20:fc:
ca:f7:3c:24:e2:6b:ac:6f:bf:7d:a8:bd:e1:18:82:53:9d:95:
85:65:66:fe:c9:d3:c6:48:fb:d9:c8:d9:ac:20:38:65:6f:68:
8f:93:c9:ee:8b:00:b2:71:30:28:fb:ea:08:99:9b:73:97:0e:
6d:87:c9:50:be:b4:60:58:aa:b9:e9:f9:24:ab:17:26:0a:64:
a4:77:7b:cf:52:ca:95:f0:15:00:db:51:5d:60:be:39:c3:1a:
e0:e2:6b:a6:c3:00:f1:85:68:5d:85:68:1a:8b:49:c4:4c:36:
4d:cd:ed:e4:c3:81:27:34:9d:f4:13:15:1e:77:47:29:f9:8f:
9c:b4:c5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:21 2026 by rpki-client