Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
File: xNoGacxfwdqe7YsKEzphv-PfWFY.mft (raw, json)
Hash identifier: XBoYXHR93u2P6wwiy4zjjxrxr58GV/DSa3Oai7ISwUI=
Subject key identifier: 39:E5:89:44:D2:41:42:ED:85:64:BA:9F:53:48:82:35:35:FF:F8:1A
Authority key identifier: C4:DA:06:69:CC:5F:C1:DA:9E:ED:8B:0A:13:3A:61:BF:E3:DF:58:56
Certificate issuer: /CN=c4da0669cc5fc1da9eed8b0a133a61bfe3df5856
Certificate serial: 019FACACFD45719B3F8430A32C6649230664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
Manifest number: 48
Signing time: Wed 29 Jul 2026 07:00:45 +0000
Manifest this update: Wed 29 Jul 2026 07:00:45 +0000
Manifest next update: Thu 30 Jul 2026 07:00:45 +0000
Files and hashes: 1: i4ZMx8XiQ-a_zUvx2M6HCqvrY74.roa (hash: hpsDw2pZ0DBvAOgm+bdbqvL0ShlWV31Jn+1J+8xpu30=)
2: pYUYQEf2s7Z-P_vS-0K2KryHc60.roa (hash: HUauXiB8EmNlBFz7vLwqL2QKaYGDn/MlUmtQHsbrszw=)
3: xNoGacxfwdqe7YsKEzphv-PfWFY.crl (hash: K2pFqc34GODoFRkQJyn+VcUUiO3D8zhrdn732XqRoAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:fd:45:71:9b:3f:84:30:a3:2c:66:49:23:06:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4da0669cc5fc1da9eed8b0a133a61bfe3df5856
Validity
Not Before: Jul 29 07:00:45 2026 GMT
Not After : Jul 30 07:00:45 2026 GMT
Subject: CN=39e58944d24142ed8564ba9f5348823535fff81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:eb:08:7c:14:73:9e:28:7f:68:a7:98:94:
d3:7c:fa:68:70:fb:3a:40:45:0e:7b:bf:ba:26:63:
96:d5:1a:1c:bc:2f:c8:7f:09:57:d6:19:f9:12:47:
fe:79:3f:74:21:49:57:db:1a:dc:01:ab:a6:89:2f:
1e:8c:49:47:a2:ea:2b:b2:bd:08:cc:db:bf:b9:21:
b7:0f:a3:68:d0:1d:5d:54:79:f9:c8:12:0a:c4:2b:
13:d3:91:ed:8d:7f:16:fa:bd:96:30:06:d7:77:e4:
29:86:e4:a6:bd:5e:c4:e7:a1:df:d7:aa:f6:39:80:
0f:8d:5a:d4:0c:04:da:91:86:6c:19:90:b5:64:41:
ff:ff:6c:a9:4b:9a:52:55:ff:fe:aa:b8:47:42:aa:
82:aa:57:52:43:cb:81:25:f1:a8:9c:a4:92:64:b7:
f6:81:38:34:6a:10:02:df:79:ce:87:5e:c4:18:96:
14:c2:2b:8d:90:96:52:cb:77:97:d9:1e:18:03:94:
84:d2:be:aa:08:af:80:28:39:1d:9e:08:f4:98:3a:
41:8d:04:47:6e:4b:57:c0:82:e7:ff:b9:e6:7e:8a:
34:35:42:2b:82:4a:74:20:c1:92:c2:5c:88:1c:0f:
98:a1:07:b6:5d:0b:54:99:9a:b1:a5:f2:77:97:b5:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E5:89:44:D2:41:42:ED:85:64:BA:9F:53:48:82:35:35:FF:F8:1A
X509v3 Authority Key Identifier:
keyid:C4:DA:06:69:CC:5F:C1:DA:9E:ED:8B:0A:13:3A:61:BF:E3:DF:58:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e1:aa:f2:37:38:11:63:95:3c:76:c6:2e:e0:42:68:08:e8:
4f:72:26:3a:33:5b:44:fe:33:92:6e:2e:69:a1:74:ca:e0:d5:
1d:b5:4c:fd:ac:f1:48:b8:be:89:ca:ab:cd:29:e7:08:a0:73:
88:dd:6a:22:c5:d6:8e:96:f6:73:92:de:c2:da:3a:34:7a:2b:
8b:6f:ee:7d:b9:93:1f:ea:92:ad:a5:70:da:55:6c:d8:a4:1e:
23:2d:32:8c:33:4c:7c:10:b8:b9:76:0c:35:3d:a8:96:a4:18:
6f:d5:76:1d:58:f9:52:97:1f:05:40:d6:ea:9f:11:17:ed:f9:
13:21:d3:a7:84:83:7b:ef:a4:08:32:6d:1a:c3:8e:c1:cf:b4:
9a:39:83:35:e1:14:91:e4:05:9c:79:0d:4e:b0:38:8c:7d:05:
0a:6e:c7:ff:7b:28:1a:9d:14:12:4c:46:03:b2:26:bd:cb:01:
1b:32:d7:55:6e:1e:0c:46:dc:d5:94:91:78:50:67:15:34:b6:
72:40:a3:bd:fb:5e:14:f3:d2:77:9a:a8:c2:8a:b0:cb:0c:20:
60:45:05:ce:21:a2:9c:b2:e2:f4:a7:fc:c5:62:f2:21:48:d0:
9c:07:28:eb:7a:c1:e4:6f:e3:68:00:6d:40:7d:9a:eb:28:3e:
78:4d:1b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:47:05 2026 by rpki-client