Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: dNfB8XTDbKNHWo6STdkyiMutDnBRx/8XTpEcZT/+iKA=
Subject key identifier: 70:4F:0F:11:C5:04:C4:CB:BA:F2:DF:02:C3:E4:0E:AB:B6:C2:EE:6B
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 019FAD1B141A74D5E215026FA441184C5978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 09:01:00 +0000
Manifest this update: Wed 29 Jul 2026 09:01:00 +0000
Manifest next update: Thu 30 Jul 2026 09:01:00 +0000
Files and hashes: 1: E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa (hash: Uscjfda3vNy/cunwHUUok4ph0ZEvFOV3pV/NuXcyZJ4=)
2: jQxMjcdrhmgG348-FC6ZQ2XBhWA.roa (hash: zzN6qYWykA9k6vddc6gAA5bY2rFVt0NTvTAU0BcNrqQ=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: h5XSMM2j2dg/xZAjSaFvplBM/ZKgjC875BgHgB5sxM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:14:1a:74:d5:e2:15:02:6f:a4:41:18:4c:59:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Jul 29 09:01:00 2026 GMT
Not After : Jul 30 09:01:00 2026 GMT
Subject: CN=704f0f11c504c4cbbaf2df02c3e40eabb6c2ee6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:94:40:68:7c:88:81:3c:44:b7:bf:bc:bf:
b6:5b:69:b8:d4:8e:73:0e:97:57:9a:86:90:24:b5:
13:92:40:49:21:de:4a:01:34:3b:63:67:f8:dc:f4:
9d:d0:c5:7e:62:d6:26:4c:f1:0e:d0:e5:8e:2a:23:
b2:51:72:41:3e:03:71:f7:ab:4f:23:39:5b:fb:66:
d3:99:c6:64:fa:cb:8a:5c:3f:f2:12:f9:68:e2:1d:
7d:91:0b:f8:43:25:8d:a0:0a:ca:6e:91:df:c3:97:
72:d8:10:da:53:9c:4e:89:16:c1:1a:0c:5b:b9:9d:
60:9b:03:b1:7d:89:ea:67:92:5b:d3:c0:94:55:8b:
0c:c5:86:92:e1:f3:33:e5:70:8e:07:b7:88:fb:b1:
30:34:98:14:bb:d3:4d:77:56:12:0d:ff:96:bf:a4:
2e:3b:1b:be:29:85:cf:fc:2c:ac:db:02:89:dd:99:
2a:0e:2f:9d:a2:d9:0e:7c:ca:91:92:df:ae:0e:bd:
35:17:09:fe:61:b8:aa:21:c2:b3:41:fb:dc:a8:49:
e3:32:78:35:7c:63:ae:04:ee:d5:eb:4e:53:b2:22:
4a:94:2d:8a:7b:bb:37:75:2e:75:79:bc:52:db:38:
38:e0:26:bc:c8:42:d3:c5:de:1e:d2:20:bc:69:02:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4F:0F:11:C5:04:C4:CB:BA:F2:DF:02:C3:E4:0E:AB:B6:C2:EE:6B
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ef:e7:9d:86:9b:4d:57:aa:10:18:87:e9:79:12:c1:5b:e1:
62:26:f3:9e:34:79:88:c7:10:6d:e6:e7:ab:88:6d:b9:0a:95:
3a:27:1a:51:20:35:f2:2e:56:09:d7:bc:28:ab:cd:97:fc:79:
4f:ff:2c:45:7d:98:af:2d:fe:8d:86:0c:aa:80:8c:f6:ca:0b:
72:1d:1f:bd:e7:33:a9:88:9a:13:83:4f:b7:9a:e8:e0:ed:cd:
ce:c4:51:ab:94:01:8a:83:23:71:a9:e2:1f:eb:aa:c2:b8:05:
85:54:c1:7a:8f:4b:32:e5:9d:a6:b3:07:03:63:11:b9:02:b3:
45:0b:15:d1:78:96:a1:4a:12:f7:ee:7e:82:5e:d7:ea:1c:8a:
68:d4:c2:1e:93:6b:a2:6c:d6:b5:f0:b9:34:1a:55:76:6c:71:
13:8b:96:e2:38:7b:d9:7e:4e:2f:d4:2e:55:a8:df:94:e0:2c:
e9:c4:d7:5b:7a:8e:61:19:90:7c:32:5b:16:72:2f:64:37:cb:
c2:ee:09:1c:fa:41:56:38:28:be:e4:fb:88:c6:07:88:db:ed:
11:01:f9:68:80:b5:b4:85:c4:82:5d:bb:0d:6a:02:2b:2c:b1:
d4:7b:04:0f:51:7b:3b:83:37:f8:a7:83:dc:e7:30:e7:57:7d:
28:36:28:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:30:40 2026 by rpki-client