Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
File: xg8yRv3WG6G1eS_hrsStypjXWlw.mft (raw, json)
Hash identifier: +aNVBNxb2OwWMT4R+qbuLmAF/ZMkxnXYaPrg10uP5uk=
Subject key identifier: 11:38:DD:71:F0:6A:3E:11:48:C6:F1:C5:70:E6:C0:8B:D4:24:07:3A
Authority key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
Certificate issuer: /CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Certificate serial: 019FAAF5C05D4752CED37746AE5D9365F3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
Manifest number: 03B5
Signing time: Tue 28 Jul 2026 23:00:59 +0000
Manifest this update: Tue 28 Jul 2026 23:00:59 +0000
Manifest next update: Wed 29 Jul 2026 23:00:59 +0000
Files and hashes: 1: MmQGKSoH5LF3BVkr3ibrE-H9I9E.roa (hash: yWJCfOrBqqRptAvrnSvVrhM/S/WywcoV/IXeHHMd0es=)
2: xg8yRv3WG6G1eS_hrsStypjXWlw.crl (hash: x7fm+/UbWmSgj3LLwjwSZXLcqmClIBsWCZA3KLFWvUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:c0:5d:47:52:ce:d3:77:46:ae:5d:93:65:f3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Validity
Not Before: Jul 28 23:00:59 2026 GMT
Not After : Jul 29 23:00:59 2026 GMT
Subject: CN=1138dd71f06a3e1148c6f1c570e6c08bd424073a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:79:57:8b:d1:db:fe:dd:e7:44:cc:85:f2:b6:
b3:62:6a:2d:0b:ba:e9:09:4f:4f:0f:f2:86:e9:20:
e1:74:92:72:a5:69:12:04:c5:62:f8:cb:77:e4:92:
af:c8:96:ce:e9:bc:46:ac:11:eb:cf:d2:25:00:0d:
2d:ae:7e:aa:32:8a:ab:ee:b2:c6:4b:75:89:b6:36:
6f:9c:f4:33:f7:b9:a6:15:ae:59:ff:2a:fa:c2:e0:
4d:3f:fe:93:60:30:22:d8:43:56:a1:de:56:56:0f:
58:e8:72:d1:76:ff:18:69:78:f8:b7:ba:bb:45:d3:
62:49:a0:7b:b2:67:72:27:8f:17:91:49:66:06:46:
49:c1:64:e5:8f:ef:ae:54:4d:2e:02:ec:9f:29:f6:
66:a9:6b:f7:bb:d6:d9:c0:e6:9d:25:91:3b:8c:ff:
1c:73:f7:17:cb:12:28:1a:5d:a1:89:89:3c:be:be:
89:6d:5c:a7:01:29:26:bc:81:3e:da:b8:e1:2c:5f:
ca:19:a9:8b:63:35:7f:b6:20:31:36:65:55:5f:81:
77:fe:53:c6:ff:cc:5a:75:67:69:8d:00:fe:00:08:
8c:a9:7a:19:42:a1:4c:ff:0b:33:58:4f:66:36:b0:
5d:ef:5c:97:d0:76:b1:aa:94:8d:5c:0e:ab:7b:6a:
b0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:38:DD:71:F0:6A:3E:11:48:C6:F1:C5:70:E6:C0:8B:D4:24:07:3A
X509v3 Authority Key Identifier:
keyid:C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:43:6f:d6:cb:46:10:22:89:90:b9:6c:2e:ab:51:81:c9:36:
2c:02:b9:85:16:e1:80:65:6f:35:22:ce:ad:be:6a:5c:cb:a8:
d2:dc:ef:90:c8:24:c4:37:7f:06:b1:7b:80:f4:6e:43:c7:49:
d2:17:24:fc:45:5f:85:20:b9:00:44:eb:10:5d:de:b9:a6:23:
93:3d:e8:66:ad:96:15:e5:56:56:ed:a0:0d:24:75:1f:e7:63:
4b:84:d2:bd:5e:53:8a:ac:cb:f5:40:fc:be:5e:b7:03:ef:97:
19:25:0b:fd:29:58:d7:37:75:1c:e4:c8:be:c6:82:79:0b:5c:
29:39:07:e5:dd:3a:d9:fd:55:ee:94:ae:7f:e9:ec:17:8d:37:
8a:82:52:d5:39:fa:44:31:49:18:8c:62:49:76:b3:42:1c:5a:
6d:f3:b5:1d:f6:b4:83:ff:ea:f3:f1:8d:9d:71:b7:cc:6e:28:
c5:1e:77:e8:45:fd:84:10:97:0d:36:84:73:8f:2f:dd:ca:62:
1a:a4:25:38:8b:ac:fb:03:2c:a6:58:22:3e:aa:b3:8b:6e:97:
af:24:58:2c:24:65:b7:d5:b2:61:f3:d2:f3:62:27:8a:5e:d6:
fa:22:b0:0d:f7:5f:cb:7d:f1:28:a4:ef:c2:09:1d:27:40:b7:
23:fe:c3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:00:37 2026 by rpki-client