Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json)
Hash identifier: HMyBT8Ybu+H7oGzjIp7ZSNp4g6kvGtwjEjKfnGpZN/g=
Subject key identifier: B1:7E:06:68:FD:48:1B:06:7D:ED:92:E3:55:4B:AC:B1:7A:B2:20:46
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 019F92B5D6F9820BDAD3F0035EBBC12F2A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
Manifest number: 0A1A
Signing time: Fri 24 Jul 2026 06:00:18 +0000
Manifest this update: Fri 24 Jul 2026 06:00:18 +0000
Manifest next update: Sat 25 Jul 2026 06:00:18 +0000
Files and hashes: 1: 5Qm3w6W4KV4G70UEua6vpofuK3w.roa (hash: 7gjCA6HtXiqMWysrEHmsQXBLEFr30GX2eXmg9EbiYCA=)
2: mI3qnrq6SLm_VsmkKACilXewKTo.roa (hash: Q4wc/dtQ8g68gQZvC3Ka6nudxiroE6HA9EnDTB3krUA=)
3: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: OL5HHHmIZ/2GZvTekHJ+mD0T6NBDs0dZ4A4YqLxH88c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:d6:f9:82:0b:da:d3:f0:03:5e:bb:c1:2f:2a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Jul 24 06:00:18 2026 GMT
Not After : Jul 25 06:00:18 2026 GMT
Subject: CN=b17e0668fd481b067ded92e3554bacb17ab22046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c8:df:c1:db:3f:75:1e:6b:a5:d9:16:53:98:
68:d2:d0:93:81:99:d6:4e:3d:73:d3:f2:30:f0:57:
a5:1c:33:25:18:c6:a9:b9:57:59:79:f4:26:a9:f6:
3e:02:47:af:f7:1a:98:41:57:7a:23:9a:24:09:44:
b9:a2:5b:f9:b7:4f:c1:6a:84:cb:09:50:71:96:e6:
48:76:69:b3:0c:3a:a6:81:35:6d:52:06:47:c0:88:
e1:29:22:5a:db:4e:b2:df:f4:41:74:c6:51:6c:31:
7a:42:fc:62:9f:f3:9b:57:43:96:1c:03:29:ed:5d:
ba:50:94:9d:b4:24:82:d2:94:75:6e:35:b3:d5:95:
93:ee:f9:f8:e7:0b:40:1e:57:38:e3:5e:46:9b:ab:
9b:a1:6a:73:39:cc:d7:be:42:64:f8:c8:8a:c4:bf:
bf:1d:09:5b:f1:f2:bd:fa:40:67:99:cc:73:64:01:
f9:89:af:ce:4e:ca:2a:4b:f1:ec:33:d5:5f:c6:f4:
63:01:ba:e9:96:e3:7f:35:75:8f:81:61:70:cc:8d:
42:b3:b8:0c:50:ca:82:16:c8:1e:8f:f5:50:3b:93:
8d:df:4f:f6:bf:22:fc:6c:04:bf:87:30:83:2d:b0:
16:6c:15:3a:57:bb:f5:2a:43:0f:f7:5c:38:a1:11:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7E:06:68:FD:48:1B:06:7D:ED:92:E3:55:4B:AC:B1:7A:B2:20:46
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ca:ae:5c:89:f7:74:94:02:e3:dd:65:6d:bf:a1:8a:b4:f6:
65:67:74:68:f6:73:d6:2c:b0:93:20:7b:8b:1c:66:48:a7:45:
16:97:bc:79:ad:04:a4:fd:89:c2:59:14:91:a5:2e:49:e4:07:
70:1c:10:24:32:75:fd:7f:8e:a6:04:67:e1:26:2d:bf:9f:75:
1c:d8:5f:82:8a:55:4a:c1:e4:88:62:3d:39:54:9c:fa:9f:93:
c0:55:4a:4e:df:19:5d:57:d7:61:0a:24:7e:06:f1:b0:33:bb:
3f:ed:71:04:f9:6c:07:14:b5:fb:8c:98:51:94:c6:f8:73:a3:
23:16:da:69:59:f8:c8:72:11:8b:c0:ca:9b:94:fb:54:5b:e4:
21:75:f5:86:c5:45:58:4e:29:40:2a:16:7d:04:4e:38:5b:9f:
92:61:19:c6:3a:11:ff:1d:2b:c0:69:18:d6:4f:10:b0:ad:ca:
7b:b5:81:bf:e0:0a:65:46:35:69:22:4e:17:f1:90:78:96:1b:
d7:94:bf:ac:71:d9:8b:27:5f:70:ba:1e:63:71:43:cb:48:78:
37:96:7a:7f:45:35:5f:82:f1:88:4c:11:af:b1:8e:99:29:87:
6f:dd:cf:0c:85:68:ce:3e:c6:5b:82:e0:b8:92:49:68:64:5d:
e9:e7:ad:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:23:12 2026 by rpki-client