Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: uOocYTDAK4naZzfduR769Z/kf1fkfb7KCYlbB/lSIkI=
Subject key identifier: 04:A3:9F:D5:7C:73:D1:96:8E:DE:B7:A1:B7:61:76:28:32:E6:4D:80
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 019F9323BC4ADD7B63C450FEA39493B172FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 08:00:20 +0000
Manifest this update: Fri 24 Jul 2026 08:00:20 +0000
Manifest next update: Sat 25 Jul 2026 08:00:20 +0000
Files and hashes: 1: LXxDQYBI8a2bgUeaO6Um5RWeWus.roa (hash: eyN2GAZCoXjAEdKeBKmxr2YBtVYHGsGtrSqCUIPElRo=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: +OzwWo0l1/oi9mwobKgDFGwvNkfqUomj8VjpI+pvPsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:bc:4a:dd:7b:63:c4:50:fe:a3:94:93:b1:72:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Jul 24 08:00:20 2026 GMT
Not After : Jul 25 08:00:20 2026 GMT
Subject: CN=04a39fd57c73d1968edeb7a1b761762832e64d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:44:f8:19:e5:4a:06:2e:b2:65:13:77:1d:18:
f5:f2:c5:98:a2:57:1b:55:13:d4:da:07:16:09:44:
0a:6b:2e:94:3c:33:d3:89:c5:45:4b:a1:ff:41:cf:
5d:bb:e7:ad:0c:ae:e9:f8:e6:4d:29:da:cd:5b:29:
3f:de:f5:a1:e5:31:75:f9:56:fa:db:ea:96:21:40:
71:c1:f5:47:81:97:3d:fa:22:47:f8:5b:8a:49:b7:
c5:e8:08:d4:9f:9f:4a:33:f0:db:fa:d3:23:8c:74:
eb:52:1b:f8:a6:25:27:5c:e1:cd:3c:a0:8c:30:16:
17:5d:3c:ac:ba:b6:4c:05:2b:04:06:8d:d6:c8:10:
71:d1:1a:b4:30:df:6b:f3:5f:d2:93:66:11:44:1e:
91:b9:44:03:68:18:c7:a0:1e:f2:32:eb:38:20:54:
92:22:2d:40:16:7f:14:8c:3f:26:b9:5c:f0:d7:c2:
4c:87:f5:2e:17:22:69:65:20:6d:63:82:95:7f:89:
0b:dc:11:5a:7c:63:d9:c5:33:35:a7:73:71:cf:24:
0e:fc:7c:33:df:d0:15:43:7c:c4:9b:06:b3:fb:07:
c5:44:6b:7b:1c:ba:d8:a4:b1:b0:34:cb:ef:55:80:
46:74:38:29:6f:56:66:eb:e4:2f:65:f2:ab:d5:a2:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A3:9F:D5:7C:73:D1:96:8E:DE:B7:A1:B7:61:76:28:32:E6:4D:80
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2b:fd:e7:02:4d:34:7c:b2:51:e7:16:6f:77:d0:fd:f0:7c:
83:10:be:f1:f3:ea:01:34:31:0d:2c:91:42:10:03:71:9e:e0:
0c:1d:7f:03:22:95:74:de:6e:f9:d1:f6:8b:3e:4b:77:64:55:
2c:3e:40:58:00:31:d7:d2:f4:e9:73:7b:e0:d8:ba:eb:1c:77:
e2:5d:40:40:aa:22:87:74:2a:a3:70:87:81:15:2d:53:1b:55:
5a:22:f9:f4:b0:8b:64:0e:25:78:98:16:67:35:83:59:7a:e5:
66:e9:86:97:d6:65:4b:d5:71:00:53:42:5d:ee:03:4a:fa:7c:
96:24:79:42:53:6c:7f:98:de:58:e5:df:da:ca:7c:98:8e:22:
f6:bf:c9:74:31:bd:29:d9:02:64:f5:0a:0b:7c:5a:bd:5f:bf:
5a:47:11:b0:94:d7:8b:02:7f:0d:b3:ea:f6:5c:20:17:21:d8:
59:1b:77:f3:84:17:26:d5:23:47:c9:64:66:61:5e:4d:15:b7:
c6:6d:17:62:20:b4:d0:ea:4d:8b:77:91:b6:fa:40:ff:dc:67:
da:b5:d5:09:b8:ff:84:2c:49:b6:21:16:a0:bb:51:af:45:f1:
83:2f:c2:da:37:63:31:d4:de:33:03:39:a4:db:16:2f:4a:1c:
ee:0e:67:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:03 2026 by rpki-client