Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: qgnygV2GZeJmugI5t5b6/2prEx9MW5YunJW2oADV9vw=
Subject key identifier: AA:B0:BB:39:68:47:E1:BD:57:33:13:EE:23:A4:20:68:C5:02:64:A8
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 019F9091004460283667EF7351995AAA1A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 19F2
Signing time: Thu 23 Jul 2026 20:00:49 +0000
Manifest this update: Thu 23 Jul 2026 20:00:49 +0000
Manifest next update: Fri 24 Jul 2026 20:00:49 +0000
Files and hashes: 1: A68FGxDlgvGi2ExLVyu1Rtus6jY.roa (hash: OAq7I962/haIw/8uA0XXyCPjF4pVghhaZk8tZjEL3zU=)
2: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: GPVaC/vdeiK6Ck17snzezh2+3J5B9RAvvzEkbhqITzw=)
3: sVAfKvrvvhMbIUsWh385vVnIquc.roa (hash: M9eQGOQqKf4XTtZds1m1OGeYS0UwjPbRi7yLdnFl6LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:00:44:60:28:36:67:ef:73:51:99:5a:aa:1a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Jul 23 20:00:49 2026 GMT
Not After : Jul 24 20:00:49 2026 GMT
Subject: CN=aab0bb396847e1bd573313ee23a42068c50264a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:ed:65:8a:d4:99:12:87:5b:04:34:8e:a0:
4a:a2:1b:ac:3b:98:b0:9a:08:3b:29:41:86:76:47:
3b:a3:f3:a0:9c:70:f4:00:d3:ff:a3:16:6e:e8:61:
a5:29:6b:27:24:2d:69:61:93:7a:e4:ae:66:03:6a:
83:b7:85:3e:20:3f:70:5a:85:2a:60:6a:03:58:fd:
5a:d5:17:dc:78:38:cd:c8:2e:d6:66:84:c9:0f:84:
c5:89:fd:23:d2:ac:8e:a7:88:cd:80:fe:52:d4:2a:
06:82:b6:aa:3b:29:50:27:6f:4d:63:41:c5:41:cc:
f1:10:1c:b0:ac:c6:20:b9:9f:d7:1d:92:f3:a2:3f:
be:77:76:d9:e1:11:a4:73:b3:43:39:2b:22:f1:4a:
1c:28:05:c0:9c:fb:80:38:36:cf:37:c3:27:a7:84:
db:b7:06:78:11:65:72:58:93:eb:db:ea:70:00:11:
fa:53:23:0a:58:da:b2:28:fe:89:a0:5d:8f:d1:85:
c5:bf:36:1b:63:12:a6:fe:05:0f:09:47:6a:3c:5d:
a8:b0:30:dc:c6:9f:89:7f:d7:12:3b:08:ae:22:a5:
6d:9d:b0:c3:e0:02:88:3b:21:7b:e6:21:09:a9:cb:
d7:15:4c:72:96:47:a0:f0:5d:23:a3:ef:04:ca:92:
06:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B0:BB:39:68:47:E1:BD:57:33:13:EE:23:A4:20:68:C5:02:64:A8
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ad:49:95:a2:74:3e:4e:d4:e2:2f:b4:eb:32:91:2a:c3:d5:
a1:33:cf:49:1c:97:51:5e:ca:6d:ca:f5:ca:1e:73:57:a3:d1:
28:44:0b:c7:de:2e:3c:a5:8f:40:f5:51:4a:04:cf:e6:09:a8:
33:55:ef:29:59:6e:f7:29:31:76:33:e7:41:f7:be:48:2e:db:
a7:54:f4:50:59:64:d1:0c:18:08:ee:81:ea:10:0f:d8:e7:e5:
a0:6f:ff:e0:a6:1d:44:93:b9:da:0e:aa:f8:8e:79:3a:8f:10:
66:37:26:9e:c9:b5:77:4f:55:4d:b6:81:3b:81:6c:fb:0f:70:
63:0e:aa:37:fe:69:dd:66:dc:b0:99:eb:7c:f6:8c:7e:52:50:
2c:87:b4:ba:fd:15:cb:a0:52:f1:bd:44:b4:ba:d0:e3:9e:7f:
4f:36:1f:d3:80:64:ed:f9:d2:a1:ba:f5:96:f0:c6:2e:5b:06:
a0:10:91:54:0e:2f:ef:9c:3c:68:62:79:79:f2:07:4e:70:db:
72:c7:06:7a:c2:ad:09:74:a3:16:04:0e:47:a1:b9:2c:91:41:
92:2e:83:1b:c2:68:af:11:7b:4d:5a:e4:7d:11:70:09:f6:41:
3e:6b:cc:f6:91:cd:91:85:b3:0c:b6:b7:3d:b6:87:9e:70:eb:
b9:65:ea:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:24 2026 by rpki-client