Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
File: xHKa8T09FW9BGXaxduVU-mcddvc.mft (raw, json)
Hash identifier: hLiNGuJfeLkNAt+7lh7yCKlofA/u3esxUFc8xkneQYM=
Subject key identifier: 09:D1:51:3C:79:E3:3C:34:45:B7:C8:BE:1A:7F:17:03:0E:9D:21:DF
Authority key identifier: C4:72:9A:F1:3D:3D:15:6F:41:19:76:B1:76:E5:54:FA:67:1D:76:F7
Certificate issuer: /CN=c4729af13d3d156f411976b176e554fa671d76f7
Certificate serial: 019FAD1AE8195E2EAFE2CB27A863DB78FA38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
Manifest number: 1719
Signing time: Wed 29 Jul 2026 09:00:49 +0000
Manifest this update: Wed 29 Jul 2026 09:00:49 +0000
Manifest next update: Thu 30 Jul 2026 09:00:49 +0000
Files and hashes: 1: 5bGOVGgpUSjx1uwMkRS9oqXlCJM.roa (hash: gEd4SfTflxW3Gsgz2afT2mctC6KsEwsMe5axMz0injA=)
2: xHKa8T09FW9BGXaxduVU-mcddvc.crl (hash: R3lmf9L9o0J0ODlqXBm433NGMH+/pR+X5LAJOkHa/pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:e8:19:5e:2e:af:e2:cb:27:a8:63:db:78:fa:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4729af13d3d156f411976b176e554fa671d76f7
Validity
Not Before: Jul 29 09:00:49 2026 GMT
Not After : Jul 30 09:00:49 2026 GMT
Subject: CN=09d1513c79e33c3445b7c8be1a7f17030e9d21df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:18:3a:15:51:8a:f3:f5:38:99:35:7c:4b:
d9:1f:da:cc:b4:5f:bc:a2:4a:ec:36:b9:3c:0e:e8:
ef:5f:bb:1b:31:61:60:48:00:db:2d:6b:bc:30:d2:
6d:cf:47:13:a0:97:7e:1c:cf:c3:a3:44:06:15:2d:
e0:87:32:9f:7b:b9:86:21:62:ba:8e:03:c4:d5:7e:
09:7d:2e:69:e5:ab:de:4e:12:df:6f:09:25:1c:c6:
f8:95:d0:bd:e5:6f:ad:ff:0f:44:3f:61:f7:5a:c1:
b7:a2:e7:5d:cf:b0:8e:a8:cf:d4:a8:dc:4f:57:46:
71:f0:4c:df:c9:29:72:42:83:30:3e:31:65:05:2d:
f6:57:2b:58:b4:e8:2f:fe:0a:3c:de:68:7b:0a:aa:
f5:6f:62:4c:bc:2a:aa:f3:af:8d:04:e7:0b:67:28:
9b:27:1a:85:3e:7d:65:10:e7:23:7c:4a:39:4b:09:
4f:af:d4:2a:90:8d:79:43:5f:06:8f:e2:c0:85:e0:
d9:2b:95:99:e9:64:41:64:1c:9b:37:c2:4d:2b:d1:
dc:48:30:31:ed:d4:65:95:df:c0:63:8b:a3:5e:50:
d8:2e:19:ea:63:38:64:9e:69:1a:9a:9c:a2:7d:d2:
b4:dc:d2:84:dc:90:1f:83:66:73:19:4b:65:79:9c:
78:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D1:51:3C:79:E3:3C:34:45:B7:C8:BE:1A:7F:17:03:0E:9D:21:DF
X509v3 Authority Key Identifier:
keyid:C4:72:9A:F1:3D:3D:15:6F:41:19:76:B1:76:E5:54:FA:67:1D:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e7:c9:f8:10:8b:f8:3b:9c:a8:14:74:16:ac:6a:7c:54:d7:
fd:07:fc:20:e6:0c:c4:b4:d6:55:3a:93:2f:b1:ad:ef:33:07:
07:c6:7b:db:e9:35:42:52:5d:3d:8b:02:c4:2a:7b:c7:10:4e:
20:d8:4b:db:b6:02:46:27:fc:13:ac:83:43:4e:34:99:8b:a9:
7e:42:4e:98:e2:7e:4a:e4:43:3a:38:af:73:16:44:a3:1c:e6:
1a:be:5d:2e:f5:19:64:d7:93:85:20:c6:00:b2:09:f0:25:f6:
6d:05:13:8f:88:52:2e:21:8b:c4:18:4c:f8:d1:ba:94:1f:24:
3f:86:70:46:22:be:f5:3a:9d:df:93:ef:51:1a:03:f7:ea:22:
23:a0:9b:ca:98:58:f4:91:5a:69:e5:6f:53:e5:75:f5:81:1b:
a7:b1:e5:01:46:4a:ed:fa:b2:08:e6:3e:69:bc:f3:f2:7b:67:
b6:ff:cb:16:cb:a6:04:35:a2:f2:7f:95:4b:b0:99:c7:ec:4e:
dc:21:ed:76:77:93:be:e2:0e:a8:55:10:59:35:a4:2c:a8:9c:
78:25:ce:00:f8:54:0b:fc:1d:98:34:58:89:4c:e0:f7:8e:13:
64:78:c9:75:5a:31:3d:b0:ab:f3:8b:a0:8c:4c:36:26:1f:1d:
0b:76:3e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:14:06 2026 by rpki-client