Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File: xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier: ysmNlXNdUWzTr47r8r8nmYWN0CvvN6utgPBi1PmpBHQ=
Subject key identifier: AE:64:05:ED:67:67:C3:28:55:A3:0B:32:26:17:42:03:9B:C5:26:5C
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 019FACE472B87A9DF5745589A817FAA4CE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number: 0ACD
Signing time: Wed 29 Jul 2026 08:01:20 +0000
Manifest this update: Wed 29 Jul 2026 08:01:20 +0000
Manifest next update: Thu 30 Jul 2026 08:01:20 +0000
Files and hashes: 1: DXdb0QbgjHMGHimqfVTZInAkH0I.roa (hash: zClF7sUyyb6keJxNkbEQRGoa69WKNSmQnfjqa4nnCv8=)
2: rDKGPxVegdVjKSh5RnICAFOVm5s.roa (hash: Xcgmgg/GuSeVcsd6rM/OBeKREsZ93Yvuqbvwr0v7xYc=)
3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: /FMY8h2tQxfNRmIyutWfhsC7vgXWAs2Dz1RjkrmsvjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:72:b8:7a:9d:f5:74:55:89:a8:17:fa:a4:ce:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Jul 29 08:01:20 2026 GMT
Not After : Jul 30 08:01:20 2026 GMT
Subject: CN=ae6405ed6767c32855a30b32261742039bc5265c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:7f:ca:c5:32:2f:17:04:cd:85:b8:e4:79:
02:52:be:88:13:05:15:fd:e4:42:68:08:25:a6:fa:
7a:e3:c5:f9:2e:ac:58:36:db:46:da:04:f2:fe:42:
17:ac:1a:cc:bd:c8:5c:59:45:28:b0:dc:28:65:b4:
ed:c5:50:b0:3d:eb:10:2f:a2:b2:6a:ba:7b:7a:da:
ca:16:1e:02:39:f2:5f:cd:64:be:9e:aa:f9:9e:7e:
fa:f3:60:d9:39:b8:90:ee:22:11:23:59:5a:f4:dd:
e0:73:4d:55:ca:7f:b6:ab:9e:0e:cd:e7:1c:2f:a7:
bb:8d:30:07:b8:f8:0a:18:c0:df:98:df:89:63:5e:
53:28:d5:87:17:75:a6:a1:ad:60:fb:65:0d:95:ad:
6b:e1:40:09:2d:3a:57:a5:8f:14:d8:ee:53:69:fa:
f8:fa:bb:1a:70:ca:31:12:0b:e8:28:d4:a4:46:10:
11:9d:63:1c:02:08:5c:fc:af:d1:53:12:87:d5:dc:
78:10:2e:f6:7c:ef:68:68:1e:28:c6:b3:87:28:4e:
ab:c5:c7:d7:93:00:23:8d:cc:f0:47:8d:4e:d3:c9:
1c:2b:df:89:69:d2:8f:13:ce:ec:43:d2:3e:35:fd:
90:79:74:6f:30:fa:2c:d7:b7:e7:62:7e:2a:98:e7:
af:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:64:05:ED:67:67:C3:28:55:A3:0B:32:26:17:42:03:9B:C5:26:5C
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:17:cd:7e:d2:41:0a:c3:c8:55:85:a3:f6:9d:bf:10:75:13:
75:05:70:ca:fb:4a:9e:07:29:69:1f:36:b2:73:b1:dd:2f:af:
46:16:71:19:55:d7:79:0c:62:7f:b9:b8:2d:94:20:d7:80:58:
e0:ac:b3:82:04:20:18:36:47:fe:3f:79:ec:bf:72:f8:b5:b0:
e5:0a:c3:2f:25:b8:99:52:ab:10:bf:a6:7b:c1:3c:e6:f4:ff:
b6:ea:92:b4:a2:77:af:28:b8:59:78:36:ee:51:f8:29:31:47:
6a:05:ca:dc:05:35:43:e6:4b:20:28:93:b4:9a:0a:57:c9:58:
43:5d:04:47:b1:58:7d:3f:ac:ab:f7:de:8f:28:ce:86:2b:f1:
cd:62:48:57:37:17:d7:f8:97:3f:9b:5b:69:0b:c4:ea:79:07:
40:82:38:b7:fe:a0:1c:66:84:bb:9f:8e:f3:a2:08:ab:a0:94:
18:b0:d9:c7:9a:84:18:94:1d:b9:d1:0c:df:24:17:63:29:c2:
c0:33:f7:96:79:a7:7a:b8:2b:39:d2:60:60:8b:a3:a3:0b:c5:
42:3f:6f:fb:76:f5:98:98:fc:fc:86:8b:97:40:ec:69:ef:af:
b7:7d:b1:9d:01:7e:19:d8:35:f0:c2:2b:47:13:3d:75:c5:15:
5c:d1:04:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:17:18 2026 by rpki-client