Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: 4hCRxMAM0/1XHSZ9mR0pcqkbUECFJOLURsVs0fi2sww=
Subject key identifier: 33:01:8B:73:30:FE:01:D3:3B:7A:F4:35:CA:F9:01:3F:04:C4:A4:0E
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 019FAB630EC7F320F8368FBFFD217CF8AC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 0888
Signing time: Wed 29 Jul 2026 01:00:23 +0000
Manifest this update: Wed 29 Jul 2026 01:00:23 +0000
Manifest next update: Thu 30 Jul 2026 01:00:23 +0000
Files and hashes: 1: uWNKx0IJVXvtTHYU4bkunZTjfuw.roa (hash: AUH4XmlqocQ9F/9lHvt0FvG+HzGfyUQaY0PdFUq9T4I=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: Pl3U3uUBbps6iyZB8TWVPfyeZAFpXE6CNYuuLkwGUcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:0e:c7:f3:20:f8:36:8f:bf:fd:21:7c:f8:ac:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: Jul 29 01:00:23 2026 GMT
Not After : Jul 30 01:00:23 2026 GMT
Subject: CN=33018b7330fe01d33b7af435caf9013f04c4a40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:4b:1e:ea:8e:a7:4a:38:39:79:c3:df:b4:
25:00:e7:ee:35:50:6c:32:d7:f4:9b:d0:e5:e7:aa:
b9:6d:ad:8b:13:92:52:e3:3f:da:13:6f:21:b2:17:
b6:7a:31:ce:ff:fb:b8:08:01:2e:da:50:65:c0:28:
94:3f:d2:80:fc:66:41:c1:39:ef:d8:73:a9:24:7d:
84:e1:94:4d:19:08:8e:fd:9b:85:c6:da:36:60:cd:
3e:d7:e0:ea:88:19:76:f4:6d:08:17:6d:fa:17:f9:
9f:d3:ba:d9:a8:6f:3b:a4:c4:2e:c6:e9:ac:4e:06:
1d:35:1a:71:73:dd:9b:e3:3d:f0:9d:e8:8f:2b:77:
8b:a0:99:da:69:f1:2b:11:d8:a1:df:54:d2:b8:df:
5e:78:96:d2:7f:a4:56:0a:0a:dd:e4:89:43:e1:cb:
56:be:f2:99:cc:c8:20:7f:0e:a9:2a:21:84:02:29:
35:49:4f:a3:0b:5f:c1:26:a8:66:6e:ee:3d:6c:3e:
55:e6:16:6b:36:0e:0c:a9:ae:9a:4d:74:a1:d8:b8:
e2:11:c4:e3:ac:72:1e:4b:5d:31:74:57:a0:38:08:
78:d6:86:1f:ed:d1:17:40:d5:a9:59:23:50:4c:ea:
2b:f6:ba:9d:13:9c:fe:1c:59:ec:9e:3f:81:65:53:
bc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:01:8B:73:30:FE:01:D3:3B:7A:F4:35:CA:F9:01:3F:04:C4:A4:0E
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:25:52:74:3d:3e:3d:c6:ac:3b:07:e8:b7:09:28:2a:83:77:
bc:64:25:b4:7a:ac:a0:4d:9e:94:85:57:34:79:38:4c:b9:6e:
94:34:56:cd:ab:e3:cd:bc:f3:eb:ce:8e:8e:11:cb:d9:8a:82:
9d:50:68:d8:fd:5c:84:dd:9e:59:72:7a:71:ec:44:82:7b:b4:
fd:f2:53:9c:96:01:e9:ff:dd:2b:f4:ce:89:63:e5:da:df:44:
33:b9:2c:a1:ed:fe:26:d2:8d:f6:24:8f:a6:97:99:98:1c:9a:
9a:b8:45:97:f4:1d:a9:a1:81:ec:3e:db:74:1b:59:47:3c:cd:
ef:32:0c:15:46:34:c8:41:00:81:5d:f6:9b:83:fe:19:cc:2d:
36:8e:a7:0c:1c:c2:d5:0a:bb:3c:60:d9:09:a7:68:fc:0d:c5:
03:6f:0d:be:c6:36:aa:72:a3:e8:51:44:80:d2:87:d2:87:35:
63:b4:dc:e0:08:aa:d2:63:08:d8:52:6b:c0:03:a4:71:97:7b:
ec:f5:2b:3a:81:b5:22:27:db:ed:2c:4a:1f:24:f0:92:b6:3b:
32:03:f1:5d:8b:75:ed:af:f0:cd:5b:41:78:55:32:71:e5:06:
f5:dd:78:6e:37:9d:36:25:5d:3d:d6:46:8b:76:90:af:8c:f7:
0c:d1:c5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:57:32 2026 by rpki-client