Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
File: xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft (raw, json)
Hash identifier: Is6PtDQrMOSTgZ31J7KZGKHwFf/ByZ00s80ygE3L1mc=
Subject key identifier: 24:A6:78:FB:7D:85:BE:BE:E4:E0:A6:46:D8:8A:0A:62:E7:9A:A4:29
Authority key identifier: C4:3F:C6:B1:40:77:53:93:FC:33:69:AF:3D:0B:CE:20:C4:3E:5D:5B
Certificate issuer: /CN=c43fc6b140775393fc3369af3d0bce20c43e5d5b
Certificate serial: 019FAABE7826BADE8B246C734735FE51EE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
Manifest number: 05
Signing time: Tue 28 Jul 2026 22:00:37 +0000
Manifest this update: Tue 28 Jul 2026 22:00:37 +0000
Manifest next update: Wed 29 Jul 2026 22:00:37 +0000
Files and hashes: 1: Wc_H_BQm_T1przFaClfQ_aiSbiQ.roa (hash: MkPhhtBoGp/lssKXEDwA7t5KV65sjPCdBtv5VeMIgt0=)
2: xD_GsUB3U5P8M2mvPQvOIMQ-XVs.crl (hash: XzrkaCaQr/fW65il0UnHtY2BIH5pYoFwu8Ez2+yf8UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:78:26:ba:de:8b:24:6c:73:47:35:fe:51:ee:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43fc6b140775393fc3369af3d0bce20c43e5d5b
Validity
Not Before: Jul 28 22:00:37 2026 GMT
Not After : Jul 29 22:00:37 2026 GMT
Subject: CN=24a678fb7d85bebee4e0a646d88a0a62e79aa429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:24:cb:95:be:33:94:a0:55:33:3c:45:68:04:
17:d0:0d:4b:06:c0:fd:fa:19:ac:bb:dc:ee:52:47:
42:72:81:1d:df:a4:0b:e5:09:ae:58:81:82:52:b5:
81:28:bc:f4:4c:75:26:d5:2a:d5:84:ed:07:74:c5:
29:f0:9f:32:53:0f:bf:79:3b:cc:df:2b:75:2a:6b:
91:6c:48:f3:4c:4d:e9:20:c4:61:f3:32:10:c8:3f:
37:ff:ed:ee:c2:65:49:93:f5:c5:94:82:b6:03:7c:
79:5e:b0:e9:6e:a7:3e:5c:da:9a:36:85:cb:fe:c1:
4d:83:5d:03:d4:fb:48:e7:29:80:85:c1:19:bf:b5:
e5:40:0c:84:79:cc:b1:19:96:15:6d:a9:42:6d:36:
c5:02:4e:10:7c:9e:93:ce:70:1c:cf:8e:b7:10:a7:
25:48:5b:81:bf:3c:d5:bf:3f:17:57:a7:95:2e:24:
34:1a:a1:75:29:31:fc:4e:6c:97:47:17:d0:78:99:
7b:78:2a:e2:ef:88:ff:66:2d:79:b8:70:b5:85:09:
81:e4:bc:0e:0a:ef:5b:16:5e:42:ae:cb:35:10:6c:
8b:44:24:dc:d8:51:b9:99:83:ae:1e:8e:2e:ab:27:
e7:6a:0d:7a:85:f8:ed:02:04:f5:13:d6:c1:87:58:
05:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A6:78:FB:7D:85:BE:BE:E4:E0:A6:46:D8:8A:0A:62:E7:9A:A4:29
X509v3 Authority Key Identifier:
keyid:C4:3F:C6:B1:40:77:53:93:FC:33:69:AF:3D:0B:CE:20:C4:3E:5D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:40:43:33:2b:3c:39:30:8c:df:63:18:e4:8b:3e:3a:48:b2:
33:98:b8:36:f4:91:ec:2f:eb:be:46:3a:a3:52:ab:f4:8a:97:
11:8f:15:85:ac:f5:ef:b3:81:c4:d7:f1:4e:6c:23:13:76:bb:
cb:a1:03:c9:a8:2e:4b:6a:5f:c4:64:a1:87:d0:c3:9f:16:3c:
ee:53:3d:18:b5:2c:4a:ad:50:5e:6b:a6:fa:d7:8f:dd:2e:92:
c7:8d:85:30:e2:95:e9:75:b5:c0:a5:46:fb:93:a5:1e:40:52:
36:0b:09:f7:4f:e2:9c:6c:f0:42:d9:ad:5f:31:92:c6:39:90:
1c:85:24:d3:25:db:2b:2b:ab:59:ea:b0:75:85:36:e8:68:89:
22:11:c9:a6:b3:51:56:0d:ed:bc:90:4d:ec:7d:11:ea:a3:d5:
bf:92:37:10:55:eb:d0:ae:17:88:85:1e:e0:64:77:f4:9d:28:
f7:93:33:79:17:4c:c0:30:6f:1e:74:2a:09:a5:3f:3c:9c:e4:
3f:b0:f9:de:26:b2:bb:69:06:2c:35:b5:ef:89:49:cc:1d:f5:
4a:7b:6e:70:36:96:22:d7:34:7d:13:70:10:8f:3a:3d:f5:9f:
31:25:c3:d2:d4:61:4d:a0:ac:73:25:29:ef:e3:74:d8:30:18:
8f:d6:b1:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvngmut6LJGxzRzX+Ue5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0M2ZjNmIxNDA3NzUzOTNmYzMzNjlhZjNkMGJjZTIwYzQz
ZTVkNWIwHhcNMjYwNzI4MjIwMDM3WhcNMjYwNzI5MjIwMDM3WjAzMTEwLwYDVQQD
EygyNGE2NzhmYjdkODViZWJlZTRlMGE2NDZkODhhMGE2MmU3OWFhNDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iTLlb4zlKBVMzxFaAQX0A1LBsD9
+hmsu9zuUkdCcoEd36QL5QmuWIGCUrWBKLz0THUm1SrVhO0HdMUp8J8yUw+/eTvM
3yt1KmuRbEjzTE3pIMRh8zIQyD83/+3uwmVJk/XFlIK2A3x5XrDpbqc+XNqaNoXL
/sFNg10D1PtI5ymAhcEZv7XlQAyEecyxGZYVbalCbTbFAk4QfJ6TznAcz463EKcl
SFuBvzzVvz8XV6eVLiQ0GqF1KTH8TmyXRxfQeJl7eCri74j/Zi15uHC1hQmB5LwO
Cu9bFl5Crss1EGyLRCTc2FG5mYOuHo4uqyfnag16hfjtAgT1E9bBh1gF4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSmePt9hb6+5OCmRtiKCmLnmqQpMB8GA1UdIwQY
MBaAFMQ/xrFAd1OT/DNprz0LziDEPl1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveERfR3NVQjNVNVA4TTJtdlBRdk9JTVEtWFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zMTBlNzQtMjdjOC00MDUzLTk1ODgt
MGM3M2YwMTYwODA0LzEveERfR3NVQjNVNVA4TTJtdlBRdk9JTVEtWFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zMTBlNzQtMjdjOC00MDUzLTk1ODgtMGM3M2YwMTYwODA0
LzEveERfR3NVQjNVNVA4TTJtdlBRdk9JTVEtWFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEBDMys8
OTCM32MY5Is+OkiyM5i4NvSR7C/rvkY6o1Kr9IqXEY8Vhaz177OBxNfxTmwjE3a7
y6EDyaguS2pfxGShh9DDnxY87lM9GLUsSq1QXmum+teP3S6Sx42FMOKV6XW1wKVG
+5OlHkBSNgsJ90/inGzwQtmtXzGSxjmQHIUk0yXbKyurWeqwdYU26GiJIhHJprNR
Vg3tvJBN7H0R6qPVv5I3EFXr0K4XiIUe4GR39J0o95MzeRdMwDBvHnQqCaU/PJzk
P7D53iayu2kGLDW174lJzB31SntucDaWItc0fRNwEI86PfWfMSXD0tRhTaCscyUp
7+N02DAYj9axrg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:48:27 2026 by rpki-client