Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: b/k40bs5bVUzW1+A+lQwRWQiazJ9YJ7CP0Ck6x1D6qE=
Subject key identifier: 6C:F9:08:36:74:24:C6:AB:64:44:66:B1:85:B2:6E:85:52:EB:ED:3A
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 019F924801D0798BB8AC10CB4BA69C5F6CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 1734
Signing time: Fri 24 Jul 2026 04:00:20 +0000
Manifest this update: Fri 24 Jul 2026 04:00:20 +0000
Manifest next update: Sat 25 Jul 2026 04:00:20 +0000
Files and hashes: 1: FWP58ajjb0tkpM-YIjMEubI9eHI.roa (hash: 8d5KqUUs2iCVjFLb2FSp+rBEK2zv9joKO9sjvkw4TqU=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: tdRGtN2T58J6K2uZXAZd1VYKTQckKtjydYQ4t2QdOYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:01:d0:79:8b:b8:ac:10:cb:4b:a6:9c:5f:6c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jul 24 04:00:20 2026 GMT
Not After : Jul 25 04:00:20 2026 GMT
Subject: CN=6cf908367424c6ab644466b185b26e8552ebed3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:18:ff:9f:5f:06:0a:9c:2e:f4:a5:40:30:00:
57:6e:21:14:de:a7:cf:c5:d4:1f:3e:75:e7:f2:47:
2b:7c:c7:6b:cc:d3:4f:5d:9d:14:b8:8b:42:2c:0b:
64:0d:4f:64:20:7f:f7:d9:97:2c:c9:f8:ee:40:69:
a4:49:d2:4d:0f:c0:4c:f1:87:9c:46:54:b2:6b:0b:
7a:16:e2:67:78:4a:f5:bb:41:d3:7a:ec:23:e9:b1:
74:8f:ba:80:d3:bb:e0:75:65:b7:8e:95:3b:04:78:
fb:04:34:ff:b4:9b:5c:e8:ea:7c:26:91:cd:29:1e:
9d:4b:87:b4:fc:5b:62:cb:2d:5d:ea:f6:03:6a:0f:
4a:c0:6d:b7:e4:39:e9:0d:96:01:60:2b:ac:16:42:
d6:36:2e:fe:90:d0:65:84:a1:aa:a5:23:cb:ee:00:
0b:9e:1d:41:9e:8a:85:42:b2:25:78:80:99:96:ff:
b5:73:14:fe:d0:07:85:79:16:10:c8:ad:a9:12:7a:
e8:81:9f:e4:92:fa:24:59:a4:72:9e:f3:f5:c7:c5:
8e:e9:70:1f:1d:b8:82:8d:1e:76:1a:e6:2e:5a:de:
09:8c:01:02:dd:d6:b5:c9:72:a6:b1:39:40:05:f3:
8e:e2:d9:c9:5b:f8:01:c1:0a:8a:2a:9b:94:a1:08:
80:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F9:08:36:74:24:C6:AB:64:44:66:B1:85:B2:6E:85:52:EB:ED:3A
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ed:96:69:6e:67:ad:4f:a1:da:c9:cd:18:13:78:1a:08:03:
ed:41:32:e0:df:27:5e:6e:b0:8a:d3:34:e0:fa:14:8b:20:dd:
1a:e8:bf:db:69:57:3c:72:30:d5:33:83:3b:bc:2a:83:f3:43:
28:b5:f4:4c:b8:c2:24:87:4e:be:f2:29:fc:3c:35:5c:f5:44:
2d:eb:20:9a:2f:c4:d1:a6:e2:e4:d8:fe:b6:bd:ff:a1:83:08:
42:9d:2a:19:e9:dd:d5:05:c5:eb:65:6e:c8:5f:ba:8d:bc:e2:
32:03:01:6a:98:cd:5e:1d:54:b9:e7:bf:e6:b2:71:6b:31:d0:
2d:ad:db:cf:07:39:2a:09:71:ab:37:66:ba:07:0d:b4:01:e9:
3b:9e:71:9b:7b:a8:ed:40:cf:57:c2:99:1f:17:1b:21:40:6e:
a1:f5:d8:42:a3:4d:7d:ed:74:e9:3a:29:31:22:d5:48:64:d3:
73:7b:70:48:ab:a6:28:9d:60:a8:e2:0b:7e:3f:5e:6e:12:23:
b5:d8:14:ee:b2:cc:ff:95:06:71:09:a1:d1:55:22:5f:69:84:
07:03:34:26:87:5c:50:f9:f2:02:34:82:5e:66:9f:42:9d:0a:
35:0a:b0:a9:0c:26:45:a4:9c:4b:c9:56:3c:53:2c:06:fa:de:
92:04:5a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:59:05 2026 by rpki-client