Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json)
Hash identifier: ZOpgcrLhG6iuqh3gSk5AZ5eNuv3123UuMjjh65wNetE=
Subject key identifier: 9D:96:8C:7C:E2:40:30:B1:28:A7:97:E6:E0:72:89:86:E3:5D:B1:27
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial: 019F935C20660607DD1815A4F1B48A2C65FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
Manifest number: 0FE0
Signing time: Fri 24 Jul 2026 09:01:55 +0000
Manifest this update: Fri 24 Jul 2026 09:01:55 +0000
Manifest next update: Sat 25 Jul 2026 09:01:55 +0000
Files and hashes: 1: 4Kxd8dm-CWu1jCIsUqmZWt5sIc4.roa (hash: RVAhzYMBRgQ2W1wIbtL6Kztr89B+xTCwvr6xBM79OwQ=)
2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: t3bxtnXLZ0oWmtcvStMXoDD0EoM7LBaDpQXvsBCnGYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:20:66:06:07:dd:18:15:a4:f1:b4:8a:2c:65:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Validity
Not Before: Jul 24 09:01:55 2026 GMT
Not After : Jul 25 09:01:55 2026 GMT
Subject: CN=9d968c7ce24030b128a797e6e0728986e35db127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:1b:b1:4b:7b:b6:37:70:57:f4:a5:f4:31:
80:3b:5a:77:41:2a:7a:81:dd:83:2c:0a:97:50:a7:
55:1a:1d:56:47:c4:3c:f8:58:31:a7:9b:15:07:1c:
56:9c:68:fe:4e:a9:f8:0c:a1:5b:19:21:97:8d:72:
e0:37:ca:80:af:d4:60:49:92:96:82:44:c4:8a:19:
40:62:cf:de:36:6c:fc:0a:91:aa:eb:6a:c6:d1:76:
5c:ba:62:37:ea:07:c1:31:8f:03:78:ff:d1:70:e9:
68:c2:6d:5c:c6:73:14:e4:d9:25:4a:d5:71:7c:d9:
f1:16:ad:46:b9:57:be:26:6c:b2:b3:ae:50:13:0e:
f6:71:34:ba:6f:38:a3:47:85:58:90:72:e3:7e:01:
57:ae:79:c0:6f:34:b0:cf:31:b3:ec:42:b1:26:0c:
ea:e2:c8:e3:d5:bf:97:45:80:e8:c1:9c:8d:b8:5b:
a3:25:f9:7d:c6:d4:92:42:7e:77:e7:80:3e:30:10:
5f:73:7d:75:ab:46:cc:3d:eb:1b:ab:00:97:e7:8d:
a7:91:3b:99:bd:e5:74:c0:b4:73:14:79:2c:d1:36:
f3:74:9a:cb:2e:d3:f7:26:11:98:70:c0:51:fe:25:
ea:4d:52:c1:bc:bc:27:13:88:e1:0d:c3:f4:a1:23:
3f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:96:8C:7C:E2:40:30:B1:28:A7:97:E6:E0:72:89:86:E3:5D:B1:27
X509v3 Authority Key Identifier:
keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:22:fc:60:55:a6:85:0d:6a:7b:d2:12:01:75:18:04:c6:d6:
b9:33:14:d9:51:6d:00:e4:4e:8e:78:c6:ea:fc:75:27:a2:74:
53:f9:74:d5:4e:43:2c:a3:3b:50:c0:26:1c:52:63:67:23:50:
c6:c9:18:19:28:54:4d:22:9d:4d:11:61:d4:07:ac:2c:b3:ce:
fd:78:a9:5a:9e:b8:df:2f:aa:0a:44:f6:5c:46:a0:01:06:9e:
4d:c2:18:29:6c:29:37:b3:df:15:ac:23:63:6b:ee:4e:ba:54:
76:a7:46:a6:6c:65:2d:78:20:65:77:ac:18:0f:f1:8b:10:cd:
68:76:56:3f:6c:12:04:b3:45:6b:a4:94:99:1e:14:d0:30:f3:
e8:78:40:14:6d:26:54:83:9a:b6:f5:bb:62:4e:42:74:fc:a3:
b9:c1:27:7d:fa:8f:6f:07:d2:90:9b:e7:23:16:0e:10:60:0e:
08:c7:f0:5e:8a:75:c6:fb:10:74:c8:cf:58:a5:13:e8:0d:44:
d5:26:99:e2:ac:c3:a2:15:68:bf:03:b7:9a:62:b9:70:89:76:
a9:cf:72:a6:be:7d:a2:ee:38:1b:05:8b:2b:4b:a2:f6:41:c9:
64:b5:7c:5c:84:74:ae:e0:a0:3b:66:4a:78:80:d0:2d:ee:fa:
82:ae:64:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:43 2026 by rpki-client