Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: 0sNnueuztv0Nu0KKLasuIXB+VBq5/+ztBUE44s+8yfM=
Subject key identifier: AA:BE:64:BA:E4:96:5A:CB:CF:CA:1E:5D:3E:CF:32:A5:37:38:14:61
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 019F94DC58318EA03E68F90E91B96F6965F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 16:01:35 +0000
Manifest this update: Fri 24 Jul 2026 16:01:35 +0000
Manifest next update: Sat 25 Jul 2026 16:01:35 +0000
Files and hashes: 1: Z4BDlr57O_FweazPHma0rDQN-Eg.roa (hash: RRUvm/U5FkAyaYrRTEjgZo8457PWupRX0eiUbSuUq0U=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: c0tzmQBOGE0MfMDbdwYQDSsJcWAko8GfcfzQoM6fRHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:58:31:8e:a0:3e:68:f9:0e:91:b9:6f:69:65:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Jul 24 16:01:35 2026 GMT
Not After : Jul 25 16:01:35 2026 GMT
Subject: CN=aabe64bae4965acbcfca1e5d3ecf32a537381461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:fc:a2:25:df:86:fe:06:19:dd:9b:24:20:
9c:cd:43:1d:ee:bc:10:53:75:a8:09:42:3a:d8:64:
4e:53:ee:c2:1e:d4:38:e1:84:64:b2:fb:57:55:d7:
6e:62:4d:4e:ec:a5:dd:04:c8:4e:2d:63:24:96:cf:
8c:34:0f:e1:4b:ae:13:13:f7:74:42:1a:d0:00:0a:
99:4d:df:3b:92:ee:e2:07:70:da:6d:45:0d:5c:0a:
23:ef:08:37:ce:20:f2:1d:ee:58:bc:a8:b2:fe:3c:
16:44:ad:86:be:46:d4:82:8f:65:61:5f:71:01:b3:
6f:31:dd:9f:32:4d:4c:48:7a:b6:f1:6c:34:14:2d:
41:07:86:59:87:ee:5f:55:ff:e0:ab:dc:f3:e6:fe:
cd:bf:35:e3:6c:d9:82:a3:89:78:e0:79:aa:0b:03:
d2:45:1a:9b:0b:3e:f4:f8:b4:23:47:2f:64:27:d9:
b5:53:94:9f:4d:17:79:7f:d4:ce:81:a0:3d:37:9e:
76:ce:19:20:ab:08:fa:62:c1:ee:d5:5d:b3:96:3a:
e5:17:7a:95:45:0d:3e:7f:3e:91:c9:7b:d6:a7:f7:
63:08:56:7e:e1:46:f1:65:94:ee:70:ca:f6:70:a3:
77:d2:35:ed:aa:8e:bc:5f:e2:c6:37:2f:3b:91:72:
04:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BE:64:BA:E4:96:5A:CB:CF:CA:1E:5D:3E:CF:32:A5:37:38:14:61
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:bb:8f:cb:4a:52:d8:c9:92:94:c4:b0:b8:e0:a2:80:72:4a:
85:1e:11:02:b8:9a:80:12:fe:9f:e8:98:7b:5c:84:fe:2e:5c:
00:a8:8f:f0:44:db:df:97:2c:00:10:09:e8:30:3c:c4:0c:d9:
c6:8d:8e:27:cc:f1:45:8b:49:75:fd:0b:a6:2c:f8:38:c0:3a:
ed:ed:d0:69:cb:92:c0:8a:83:0d:ec:c2:b8:69:28:51:c5:28:
99:2f:81:9a:f8:c2:04:00:14:74:44:c0:b0:4f:44:3e:d6:03:
01:69:6b:f6:27:4a:4c:a3:0a:38:54:02:ec:a4:83:32:d7:21:
ff:d1:0e:fd:52:c3:4e:7a:65:d0:d9:b6:b4:30:92:fd:1f:90:
a9:f5:59:92:a5:fe:b2:80:c3:f1:f6:f4:2e:13:84:dc:c6:25:
a7:cc:5c:7b:94:36:b8:8a:5b:1f:40:f3:62:11:1b:a1:d7:66:
79:b8:dd:27:d8:f7:26:01:32:c0:52:2b:5a:51:b5:78:c0:ea:
1d:e4:f7:1d:bb:11:9c:18:9a:9f:6b:50:14:f3:88:02:f4:f7:
78:83:90:34:b5:9b:64:31:7f:65:e1:3e:ee:8f:aa:3d:31:22:
8d:62:67:ee:8e:21:d4:76:1f:4c:84:33:1f:3c:95:52:6b:46:
ff:3f:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:07 2026 by rpki-client