
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: r5BjFqFyFxW2ciBBEnaYXnhqsguh68I1u48EVKszBKU=
Subject key identifier: 28:3D:7E:2D:BF:46:DD:B8:14:2B:9E:FE:B8:65:32:8F:CA:8D:D3:7D
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 019F8F476C28E838DAAF1D686F85C6FFC89A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 19D8
Signing time: Thu 23 Jul 2026 14:00:50 +0000
Manifest this update: Thu 23 Jul 2026 14:00:50 +0000
Manifest next update: Fri 24 Jul 2026 14:00:50 +0000
Files and hashes: 1: 5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa (hash: qdwMngtFVt4ZyT/UodrlBdn1CZ1QUvtY6m9NXbdSStU=)
2: DYkV04gki79D3asculnZRcHU37Q.roa (hash: qlIkHsV6HBqGkc4tTxIBB1jTZcTStbiHUpGcVOphuGk=)
3: X-ehgfatBtOAnRXcz6-5Jx0F8B4.asa (hash: /YVTHqMQAjpDaMD8b9BYDBTtlnwA4KQTEd5uL4RrvtQ=)
4: wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa (hash: xzHJiZgBxtEtCYr9MbTY6G8tT0OCniElkcH6xF7+Cv8=)
5: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: ZO8pXqQ4diDrom3rSUii9Qzku0sRNFPp0MtmhlqRKAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:6c:28:e8:38:da:af:1d:68:6f:85:c6:ff:c8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Jul 23 14:00:50 2026 GMT
Not After : Jul 24 14:00:50 2026 GMT
Subject: CN=283d7e2dbf46ddb8142b9efeb865328fca8dd37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:66:7e:d6:6f:44:05:ad:c7:e3:da:46:71:9c:
a9:fa:76:09:52:f1:f6:07:f6:83:24:b9:c5:1e:0c:
fc:27:b8:b2:91:20:e9:57:95:58:b2:74:b5:cd:6a:
c1:b5:4e:ac:d5:fa:51:72:7f:df:0c:8a:18:f8:dd:
16:75:a9:43:f1:24:c5:d3:37:80:2c:0b:0c:7f:25:
fe:c7:47:8a:db:25:7f:e1:a1:a8:e2:50:d2:0d:4c:
52:41:4f:1d:4b:f9:bd:09:16:32:20:65:26:fc:68:
78:b4:4c:b9:d6:b0:a0:e7:66:4d:8d:08:2e:46:0c:
c9:ce:d1:6e:2c:21:f9:18:85:c3:db:98:ab:7c:bc:
bd:f5:2c:28:a4:d8:b2:fb:81:99:cd:92:f4:6d:e2:
e3:37:ae:4f:4c:9e:12:d9:e8:28:e6:39:44:12:7b:
53:3e:df:34:36:45:a9:87:44:6c:e8:ba:32:a3:85:
1c:18:f7:99:a5:e1:d6:61:80:ad:80:8b:51:38:d6:
3e:3f:22:42:e0:60:7b:fc:63:37:40:e2:45:18:71:
43:06:dc:21:98:b3:09:6f:14:b0:5d:0e:8f:96:5e:
e9:b5:02:ef:0e:ea:f4:a3:78:20:0c:85:f6:d8:0c:
70:e4:73:ab:d3:c1:76:b4:14:40:f7:e6:fb:dd:57:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3D:7E:2D:BF:46:DD:B8:14:2B:9E:FE:B8:65:32:8F:CA:8D:D3:7D
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c6:a9:5f:a1:1f:1b:48:d4:dd:71:eb:a7:55:15:7e:a1:d0:
23:e1:3b:f4:ac:10:c0:63:a7:20:68:6f:94:f1:d8:ae:87:41:
60:d7:2f:be:49:87:c8:8b:0a:d6:8c:88:c1:83:0d:85:b0:6d:
0b:fa:54:40:b7:6e:7c:78:2e:c1:32:b5:33:a4:f0:aa:e3:09:
e7:13:a3:b8:a4:be:d5:da:2d:83:6c:1a:16:24:a5:cc:19:d8:
28:cd:89:1f:a5:d8:66:16:11:1f:11:f5:cf:06:1f:0e:f5:50:
3c:23:80:37:53:b2:a7:db:04:5c:28:f1:dc:79:2b:0f:40:69:
16:ec:88:53:f7:94:21:90:1a:30:73:3a:5e:8d:a6:83:2c:82:
00:60:29:e3:c1:67:f7:58:c0:89:f8:77:62:d2:20:92:dc:c3:
9b:14:99:c8:e6:46:aa:74:aa:32:5d:79:3e:fc:62:02:3e:b3:
0e:18:2d:fc:e0:3d:99:d1:5e:ab:1c:f2:f9:00:8a:4b:7c:6d:
30:12:bc:bc:9e:55:4f:4c:fe:90:cb:de:0b:bd:a2:9d:54:d6:
95:b1:e6:08:1a:46:22:59:5c:7c:04:aa:05:f7:a6:5f:d6:ba:
38:01:ed:50:ba:5e:fb:3f:aa:90:35:36:47:1e:58:9d:a5:31:
cc:19:b5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:50 2026 by rpki-client