Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: q1uyVz6QBqeZC+hXh/2uFbOXgqc42qMFD2tStppI5cU=
Subject key identifier: ED:44:8E:1E:C4:FE:52:34:BA:09:5E:96:DD:9F:E4:08:34:70:A4:E9
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 019F954A2EB1B4E75EAE3D4F145D9071E3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 18:01:34 +0000
Manifest this update: Fri 24 Jul 2026 18:01:34 +0000
Manifest next update: Sat 25 Jul 2026 18:01:34 +0000
Files and hashes: 1: YJVBg6yi8rhbBJuxWKJ7v5Xiat0.roa (hash: Hyd6ST+4DY0Ptd4aJ86bVxwbS75QcKsP6VrnesIx1WI=)
2: __9VedluN1sWd7ruf5_gxA1gv9U.roa (hash: 9+zLsshZreT9h4dF/gegkgeeA5ROS1Ql2Nv3i9Zy+8U=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: Lgt2NeTuHQ3TZVbvD/u9yNlt+KD2TUN9dOQXGPqmXVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:2e:b1:b4:e7:5e:ae:3d:4f:14:5d:90:71:e3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Jul 24 18:01:34 2026 GMT
Not After : Jul 25 18:01:34 2026 GMT
Subject: CN=ed448e1ec4fe5234ba095e96dd9fe4083470a4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:72:62:77:db:05:ab:e9:53:6d:ac:f7:13:
bc:0b:d8:07:c5:5b:be:f3:72:96:8b:a6:73:28:52:
77:3f:20:2f:26:c3:6a:ad:08:af:04:71:a2:c6:2f:
0e:74:bf:a0:a9:d5:eb:ef:9b:d2:35:43:c9:31:e0:
0b:a7:26:34:12:d8:4a:85:2d:40:e5:d9:73:6d:e1:
42:83:45:22:37:d1:1e:d4:73:d8:56:91:3d:1f:35:
0e:f7:64:65:c5:50:99:57:be:92:dc:bd:28:cb:1c:
6b:ef:1c:9d:c2:35:c8:43:90:e6:74:3c:85:35:d8:
8e:9c:85:c7:6a:62:b3:ad:12:b2:af:e3:d7:0c:de:
6e:7a:c9:3c:80:82:81:29:70:1e:4a:b9:2f:3b:38:
56:48:74:27:e3:1e:9b:18:27:44:24:d8:99:dd:cb:
a2:2f:27:be:d4:41:43:cb:ce:c9:e4:ba:ff:6e:09:
7c:3f:56:b8:12:43:bc:74:65:f4:86:cd:59:db:0a:
87:ca:d7:f5:ff:89:4a:17:13:30:7a:ce:5c:2b:65:
c6:0f:87:88:ea:d4:40:e1:25:eb:3d:fa:e3:8b:c5:
ea:4c:29:2b:47:93:30:5e:13:a5:a3:e0:ab:2b:dc:
6e:83:11:53:94:7a:c0:2e:2f:c9:26:95:36:57:ec:
cf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:44:8E:1E:C4:FE:52:34:BA:09:5E:96:DD:9F:E4:08:34:70:A4:E9
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e7:83:db:e6:97:ea:03:b1:1b:08:19:b6:56:e6:65:c2:83:
89:b4:8c:c6:30:1e:23:3a:05:a7:b2:18:58:0d:66:9b:50:a8:
2f:cc:57:75:f6:32:75:91:12:47:63:8f:48:22:7b:69:35:6a:
26:f3:5a:a1:ef:22:7d:0f:28:ee:ef:04:29:fb:6a:2f:f6:8c:
0b:a2:31:bb:ad:cf:ed:7b:0f:6a:5a:d3:90:bf:06:59:d1:ef:
4b:c8:1e:89:f0:45:8b:d7:b4:ce:12:81:99:b7:3c:97:c7:49:
e3:db:89:cd:c0:51:59:a9:75:ab:bb:1a:92:6c:ce:99:48:50:
08:4d:6f:94:31:98:58:87:6c:84:b8:99:26:79:50:0c:8a:cb:
5f:f7:54:37:1f:52:a0:5f:6e:f8:86:71:0a:b5:bf:8f:fc:b8:
c7:49:d8:21:c7:d0:af:97:a5:42:68:fe:39:7d:fb:08:55:0b:
e1:c5:e2:de:ba:66:71:e8:15:00:f5:a8:aa:fe:d7:54:f5:c4:
45:8e:82:7c:99:12:2f:2d:08:73:ec:f9:1a:4f:9c:74:60:b5:
6a:f2:67:9b:fd:9f:78:5d:0a:73:b7:a6:7d:03:46:4a:96:19:
7c:6d:e7:6c:46:bc:33:09:4b:8f:2a:ae:db:fe:2a:f3:2c:a7:
6e:e7:9b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:19 2026 by rpki-client