Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
File: xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json)
Hash identifier: FTfvPqQxTJX5YsvXc6/9eMPVT9XrjkgrwYmb62q5SEk=
Subject key identifier: 63:A5:89:C8:04:F6:54:ED:97:BF:3A:3E:DB:03:E4:34:54:A7:22:7E
Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Certificate serial: 019FA7BD1B69430708F67D91B93AEC6177E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 08:00:15 +0000
Manifest this update: Tue 28 Jul 2026 08:00:15 +0000
Manifest next update: Wed 29 Jul 2026 08:00:15 +0000
Files and hashes: 1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: Hm6SYBWzs8u7//60sSKZ/fyWOpPQwAmJavSyrieHEqw=)
2: xsHwN39t7Lg_0JrvQJX-o8s4wJc.asa (hash: uUROjO5Wuy6f76sPTNQEiOJg9EZNcnwz3IXWyZD8TU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:1b:69:43:07:08:f6:7d:91:b9:3a:ec:61:77:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Validity
Not Before: Jul 28 08:00:15 2026 GMT
Not After : Jul 29 08:00:15 2026 GMT
Subject: CN=63a589c804f654ed97bf3a3edb03e43454a7227e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:c7:60:e4:4f:31:dd:1a:b1:3d:66:ff:e8:
dd:bd:72:0a:d4:61:e4:ee:a9:b7:ba:ed:33:2f:ed:
16:be:c3:10:5e:8c:df:d2:6b:4b:8a:d0:c6:51:30:
01:88:b2:99:c6:cc:43:95:40:8f:ec:a0:43:bb:8f:
43:b8:65:8b:88:e7:02:7d:bf:68:1e:13:2b:a6:9c:
d0:7b:96:d5:17:ff:cf:3c:d2:74:25:2b:ab:32:5d:
99:76:c2:26:df:28:09:d2:e7:f4:4f:3c:96:b6:99:
9f:bc:e1:c1:6d:31:ad:1a:98:40:91:b3:38:de:6e:
15:a4:3d:46:8e:49:6e:1a:59:09:24:8b:80:f3:7f:
80:cd:46:6c:2f:a2:28:f5:d8:0f:4a:1a:69:e5:ab:
96:b2:0b:45:41:0d:62:ec:e6:cb:ce:79:bb:af:db:
77:3f:3c:21:53:ba:4d:49:eb:b8:60:c4:d7:c3:37:
22:64:e3:ba:38:cd:38:3a:76:66:9e:57:36:68:c2:
c0:3a:b6:b2:0c:24:9b:3f:ab:3a:02:81:09:9b:b7:
28:05:22:e8:ea:47:55:c4:3f:e8:50:e2:e6:cc:1c:
a7:4a:dc:a3:64:d5:ea:7b:08:c3:10:fe:d9:27:3f:
f5:3b:c5:44:0c:58:c5:f0:74:67:d3:cd:64:b7:d1:
fd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A5:89:C8:04:F6:54:ED:97:BF:3A:3E:DB:03:E4:34:54:A7:22:7E
X509v3 Authority Key Identifier:
keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e4:81:e9:fa:6e:37:db:2b:67:a8:a4:af:d3:4a:ad:78:99:
ad:69:a7:71:6f:46:5a:e4:35:d6:74:b3:c9:26:41:d5:e8:19:
c6:f6:47:f9:e2:63:a4:ca:8e:d1:8e:87:83:66:fe:ca:c7:5e:
ba:5c:bd:fd:21:ce:96:fb:04:75:24:0a:32:2d:56:86:a7:f9:
61:e6:d0:cb:98:a9:90:5b:ce:36:a3:57:9a:eb:d9:8f:df:59:
35:68:1f:3c:4d:d4:88:1f:09:2b:de:ed:a4:3a:b8:0c:f3:24:
b3:7d:bc:8c:3d:f1:83:51:cf:76:ea:9b:21:84:e3:83:02:30:
2d:3e:d7:fb:39:2d:4f:54:9c:cf:ea:a9:0a:64:56:17:5a:37:
91:ca:e3:63:63:78:b6:fb:8d:bd:00:f8:a2:da:3c:96:ed:1a:
44:7c:f6:9a:ec:69:35:5c:06:1d:f7:94:72:01:33:7b:3c:23:
a5:3a:6c:58:06:c8:34:9d:06:64:7c:97:17:46:be:61:5b:ab:
28:e4:3e:db:10:81:29:4a:5d:eb:91:ec:fa:b2:df:c8:64:8e:
38:3a:96:09:2f:c0:3c:40:90:e4:77:7d:96:92:a7:49:4e:ed:
ff:4e:a2:61:a6:73:1d:cd:62:30:f9:fb:4e:59:f8:0d:e0:78:
29:dc:4d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:26 2026 by rpki-client