Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
File: xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft (raw, json)
Hash identifier: IFby8pm9WksmORDa+klakAZcFUlHRkY5XjNdTvG+j0M=
Subject key identifier: 7D:1C:93:72:AA:A5:C6:04:75:03:11:28:D3:6D:0A:55:A6:06:43:7A
Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
Certificate issuer: /CN=c59c41daf0092b703bc059ba1353f071ed12199b
Certificate serial: 019FA97521A1BD5FB932DA1949ED8022C9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
Manifest number: 1966
Signing time: Tue 28 Jul 2026 16:00:53 +0000
Manifest this update: Tue 28 Jul 2026 16:00:53 +0000
Manifest next update: Wed 29 Jul 2026 16:00:53 +0000
Files and hashes: 1: 8cS6Qj5MYE4B8boPnbZ2kcXbU-k.roa (hash: AKR29eJxFVsOMPaiI3uGdOD049mIqIl+nuPgud2mgtc=)
2: xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl (hash: CikZObzr8oaeQxhOAq52R1FOoCkhLB+9lD9w0631cLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:21:a1:bd:5f:b9:32:da:19:49:ed:80:22:c9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b
Validity
Not Before: Jul 28 16:00:53 2026 GMT
Not After : Jul 29 16:00:53 2026 GMT
Subject: CN=7d1c9372aaa5c60475031128d36d0a55a606437a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:b6:b4:1f:5f:7d:44:6b:d5:92:8b:84:bf:
79:62:4b:6b:e1:63:29:c5:ef:74:8e:89:d9:8d:7d:
99:90:cf:7e:cf:2f:bf:86:f5:2e:f9:a0:eb:78:ab:
94:33:fe:03:3e:10:b4:b4:73:68:d6:5f:af:1d:f3:
6e:7f:2e:0d:1f:9d:98:06:d1:0e:96:3e:2c:96:8b:
8f:9b:eb:01:af:36:90:d1:4c:ea:c1:b4:72:e9:a2:
c7:5d:d5:77:95:09:4d:f4:c3:ec:dd:a9:fb:11:03:
c5:66:7f:69:2b:33:76:16:9b:46:26:80:ac:1a:58:
73:6a:d1:e6:b8:3f:6b:98:c4:d5:83:a3:0e:90:16:
36:e9:56:b8:59:fa:0b:8c:e0:89:3e:95:d4:cd:de:
db:0e:b3:7b:7c:22:16:11:af:98:75:da:d6:4c:63:
ae:5c:21:cb:73:a2:4e:43:c7:32:c8:5e:b3:43:49:
00:b3:83:76:38:18:5a:83:fd:05:4c:58:0c:ec:0c:
dd:e7:e1:22:a0:62:94:3d:8d:41:40:a0:2e:c5:48:
4b:2d:4b:2d:a4:a4:c4:30:83:b3:9d:1c:dc:19:85:
bf:f3:24:41:a9:bb:e1:d6:3f:3e:8b:74:25:d0:84:
4d:2f:ab:3b:05:36:c8:82:4f:3e:78:dd:91:a6:22:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1C:93:72:AA:A5:C6:04:75:03:11:28:D3:6D:0A:55:A6:06:43:7A
X509v3 Authority Key Identifier:
keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:01:42:73:7d:7c:18:37:2a:87:b9:1c:d4:34:29:6f:30:84:
5f:85:ff:55:61:96:61:70:80:0d:a0:5d:96:2a:45:8e:ff:4e:
ce:e6:d8:01:88:55:2f:cf:d3:9a:53:ee:28:a2:80:0e:7c:77:
a7:79:2b:61:de:2c:5b:62:4d:4e:bc:b5:b8:1d:27:67:c5:fc:
94:6b:49:60:23:cf:06:42:ee:bb:dd:ca:fc:a6:fc:5c:5c:53:
6c:f6:8f:91:36:84:bd:cc:33:31:3e:ee:15:b1:cd:7b:79:08:
86:9d:79:23:9c:0a:f3:81:7b:99:c6:46:dc:9f:04:dd:84:85:
49:2e:a2:9a:08:8d:38:71:60:51:c8:cc:44:b2:eb:34:85:43:
de:1c:6d:2b:10:ad:f4:6e:43:a0:7d:b0:b9:c9:a6:25:3e:45:
8f:16:62:ad:11:7d:eb:e5:24:98:ca:5f:f8:b1:78:86:b3:e7:
57:ab:4c:63:8e:02:4e:33:8d:bb:e4:ea:10:0e:df:6b:f0:b4:
4f:17:0b:44:87:ea:b8:7a:4d:dd:d0:e7:ca:1c:85:d0:eb:2f:
53:c5:a4:25:47:9f:fd:19:d4:be:3a:aa:38:d7:56:38:b2:87:
c0:d5:36:f0:2d:51:13:ab:55:2b:27:3c:64:5d:27:d1:69:89:
ec:88:cf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:09 2026 by rpki-client