Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: +DWTZZTdW0XcpERADRkuvLZsuWF+DM50ZCV8CbMAIgA=
Subject key identifier: 87:9C:9C:F9:4B:DD:E1:38:5F:3D:C6:68:ED:9F:81:5E:41:EA:07:CB
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 019F95493B22D0B460C4DBDA46FD435C5433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 18:00:32 +0000
Manifest this update: Fri 24 Jul 2026 18:00:32 +0000
Manifest next update: Sat 25 Jul 2026 18:00:32 +0000
Files and hashes: 1: pl4G0drpVsiUnTNv0aNJRxAq40Y.roa (hash: TIrmY5F1mz/rcq5o0AaF7KuNyHFmI5rxVVBApqp6+Ig=)
2: uCT5qS0TatwLKR2syBgBgC34NYE.roa (hash: 6Pav0LB8Y/JGRbLI7vMShFMSStiFyP+H+ECIrWK519s=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: Z/QmxYGdB0YRUj/8Xqkis4dlTK0pwiP/h5XJovqqzXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:3b:22:d0:b4:60:c4:db:da:46:fd:43:5c:54:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Jul 24 18:00:32 2026 GMT
Not After : Jul 25 18:00:32 2026 GMT
Subject: CN=879c9cf94bdde1385f3dc668ed9f815e41ea07cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:cd:07:42:1e:5e:cf:4f:b8:40:a2:2d:60:
87:46:19:5a:a0:8d:04:90:5d:35:c0:f7:81:30:a3:
74:19:d7:4c:1e:60:a1:c4:f4:26:bb:e2:e7:9e:57:
ca:fb:64:2e:70:62:42:4b:8c:40:df:70:a1:8f:9e:
ee:06:3c:2e:8e:c5:b3:7d:69:0d:9c:a3:92:89:0b:
6d:01:42:db:97:b9:75:f4:a7:bb:ca:31:63:48:a0:
11:92:1a:d9:4c:24:20:57:2d:91:10:a1:ab:0a:be:
8a:e1:9b:cf:53:00:7d:f4:f5:4c:84:9d:03:f2:c3:
b8:04:81:0d:68:ff:b0:58:d3:99:66:00:2a:ef:78:
bb:f8:aa:ba:cf:19:a8:dd:41:28:9c:4e:48:69:53:
9c:94:87:04:86:89:a7:3d:91:e3:90:14:57:64:16:
5f:01:dc:47:cd:ec:6f:05:13:7c:9f:38:f8:37:f6:
45:11:76:e9:a1:8d:18:0d:3f:77:df:4a:24:73:55:
21:aa:d1:1a:26:32:74:54:92:a6:eb:8d:12:69:73:
70:b8:32:8a:69:ab:90:82:28:54:3a:56:d5:9c:82:
39:f9:25:00:69:3b:d3:a7:52:05:0f:b1:28:11:7d:
42:de:7f:79:b1:bd:ff:91:03:4d:ba:93:cd:c8:5e:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9C:9C:F9:4B:DD:E1:38:5F:3D:C6:68:ED:9F:81:5E:41:EA:07:CB
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:57:2c:37:a4:8e:2c:35:e9:7c:58:4b:de:f3:48:52:3d:41:
7b:c4:3e:de:c3:50:39:5f:ff:4b:86:e6:e2:e0:6e:b7:3c:4b:
70:50:1f:34:b3:cd:eb:e8:13:a3:31:0e:ef:d8:ae:53:9f:ca:
53:18:de:b1:2c:a0:7f:ee:c0:76:35:7c:59:8c:8e:de:3e:28:
73:63:79:54:a8:69:a4:65:ba:fe:bd:81:7a:f1:e9:97:22:1a:
fc:c9:16:47:7a:ee:87:3f:b6:71:a2:bc:d4:c1:69:8e:30:f6:
53:18:6e:2a:f4:2c:85:50:e8:c4:98:f1:73:27:71:42:43:47:
40:c1:ea:fa:c0:8e:af:40:db:d1:95:b5:20:0b:4f:2a:af:fa:
35:6f:58:17:28:0c:c4:6e:d8:fe:c3:62:6c:e8:17:44:85:d7:
47:bc:8a:02:ff:76:e4:16:5d:57:65:40:7a:af:32:26:76:0b:
30:7d:4f:13:c2:b5:bf:68:38:ea:46:ad:71:94:2d:48:1e:fe:
7b:86:6f:73:90:fc:8c:b9:bb:43:ec:2e:1f:b2:0d:c6:65:df:
74:4e:71:b1:1e:e4:af:ca:d9:97:a0:a6:a8:80:72:b1:0f:67:
a0:b6:e4:8e:73:bb:6f:e4:0a:cb:2a:0b:84:ed:fb:b3:39:42:
2c:b2:c9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:16:01 2026 by rpki-client