Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
File: rxxaicQTkD_UwrlE07xJezIZYsY.mft (raw, json)
Hash identifier: IsJHUINo6Wn9lTcdAVmlKJ3kLY/pWpwnV/Jqx55HgCQ=
Subject key identifier: A6:3D:67:84:EC:67:B2:84:A3:D1:F8:38:EA:34:5A:B7:B3:CA:50:2C
Authority key identifier: AF:1C:5A:89:C4:13:90:3F:D4:C2:B9:44:D3:BC:49:7B:32:19:62:C6
Certificate issuer: /CN=af1c5a89c413903fd4c2b944d3bc497b321962c6
Certificate serial: 019FAC770B8DC160D13594B503367BAAD964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:50 +0000
Manifest this update: Wed 29 Jul 2026 06:01:50 +0000
Manifest next update: Thu 30 Jul 2026 06:01:50 +0000
Files and hashes: 1: a7niK7itDYSAcUcCWKLaVdepvNQ.roa (hash: zEoozmz189Usv1lYQlwpIyRkVXe/3xP6YFoEE3AiyZQ=)
2: rxxaicQTkD_UwrlE07xJezIZYsY.crl (hash: szAwXq0ZPW5pqBRtqAukgUiiilWp0zw6lOI6zLRwx2M=)
3: tE6JJBGGYfL7pOmd9ScGG-PBKR0.roa (hash: U6b+qcJDlZitVxi4VTwdzLaOqGFdF5aocVEDkGTIcVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:0b:8d:c1:60:d1:35:94:b5:03:36:7b:aa:d9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1c5a89c413903fd4c2b944d3bc497b321962c6
Validity
Not Before: Jul 29 06:01:50 2026 GMT
Not After : Jul 30 06:01:50 2026 GMT
Subject: CN=a63d6784ec67b284a3d1f838ea345ab7b3ca502c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:77:cd:43:7c:27:80:d1:74:21:a2:de:2e:
2a:72:aa:00:a5:56:89:62:06:73:cf:1c:3c:bc:bd:
95:2e:c3:c7:5b:14:ff:7f:88:ba:29:06:5f:6c:f6:
81:ce:9d:79:34:5e:6f:84:80:0a:e3:39:49:a9:0c:
58:ab:1f:14:30:54:e6:2c:92:fc:2b:bf:62:a4:78:
a7:db:46:a8:40:9d:37:d9:f4:b8:6b:f2:c9:40:a0:
f9:c0:0f:dd:80:78:15:1a:24:17:a8:86:62:12:08:
74:9b:3b:96:99:9b:7e:97:81:2d:8e:84:e6:95:54:
41:2d:19:6f:7c:5c:a2:10:e5:9f:b3:fc:47:ee:6d:
d0:f3:e4:00:a0:6b:6a:a0:02:8e:eb:b2:b9:3c:63:
5c:cc:a0:39:ba:a7:fc:af:4d:f2:05:0c:4a:0f:4f:
51:9b:71:5b:39:17:d2:94:4d:e4:97:15:9c:5f:1b:
6c:4b:e2:8a:61:d4:ad:c3:73:14:63:ce:75:96:f3:
a5:3a:bc:4c:01:4b:ed:0c:f4:bb:54:a8:dc:e8:f3:
2c:c4:3c:02:d6:3c:ba:0a:22:06:b0:83:dd:a9:fb:
c6:f7:ab:df:a3:ab:9a:05:40:b9:85:96:5a:bc:7a:
87:47:71:76:bd:6c:9e:39:30:ae:83:59:f2:1f:b6:
14:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3D:67:84:EC:67:B2:84:A3:D1:F8:38:EA:34:5A:B7:B3:CA:50:2C
X509v3 Authority Key Identifier:
keyid:AF:1C:5A:89:C4:13:90:3F:D4:C2:B9:44:D3:BC:49:7B:32:19:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d8:1c:5d:7e:68:e6:4b:dd:2e:b2:f1:60:f4:61:33:7b:6a:
b4:46:15:36:84:16:79:6e:9f:ca:74:13:f5:35:7f:6d:14:56:
11:5b:9f:2a:71:61:1e:ac:5c:76:23:6d:29:e9:f8:41:2c:6a:
ea:b8:3c:ef:37:1e:eb:43:f0:27:65:f2:ce:6c:12:88:f7:3c:
bb:d9:18:c9:4f:98:ca:12:8a:df:c3:9c:b5:13:67:d2:83:65:
a9:00:88:25:b2:ad:0a:71:4c:9c:f5:1d:ca:10:a1:a2:94:84:
7a:1e:2d:ca:de:5e:04:48:19:1d:0b:9d:d7:8c:7a:8f:ea:2a:
ff:84:31:b5:b1:9a:26:31:93:27:20:ef:f1:5c:51:94:71:16:
26:74:d9:15:dc:8b:a6:1e:e1:60:9e:24:f8:b2:03:6c:61:e6:
0a:52:f6:32:ed:79:ce:a4:f2:2b:fa:8a:09:27:74:45:ba:83:
e5:45:15:62:bc:53:1e:6a:ab:31:29:cd:bd:ed:c2:cd:0a:b0:
41:9b:d9:89:e8:5a:11:dd:b8:c0:ce:3f:56:4f:65:08:aa:14:
bf:c6:59:21:85:92:b1:44:6c:69:b4:96:31:e5:1d:ab:37:fd:
8a:a3:05:b7:ac:a3:d4:d5:cc:57:1e:3f:c3:42:9a:a9:ed:80:
10:3e:1b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:07:05 2026 by rpki-client