Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier: vlUSLGACUNnszBuDrg2hIztwvR1f0rVzUnLOJpcjG24=
Subject key identifier: 4D:A6:C3:BE:C3:B5:87:DB:42:6A:AC:49:C6:67:F3:30:A4:4F:DA:2F
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial: 019FAAF58A2317E7B2F2FEB7D11937212F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number: 1829
Signing time: Tue 28 Jul 2026 23:00:46 +0000
Manifest this update: Tue 28 Jul 2026 23:00:46 +0000
Manifest next update: Wed 29 Jul 2026 23:00:46 +0000
Files and hashes: 1: RA_P8M2CbE3vpnTaUf4TR1pQq4c.roa (hash: sqZi/SBA/dg8k8Qf9vK6EYY7YFO+mp6oMfC87nRDLEY=)
2: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: UkTsf5MDrikhW8S4jVmgjz/KYYHIQ6Qbbl4zLvbTlCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:8a:23:17:e7:b2:f2:fe:b7:d1:19:37:21:2f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Validity
Not Before: Jul 28 23:00:46 2026 GMT
Not After : Jul 29 23:00:46 2026 GMT
Subject: CN=4da6c3bec3b587db426aac49c667f330a44fda2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:74:fe:81:55:6a:c9:17:84:f7:68:df:81:
65:24:52:2f:83:20:9e:3e:b8:45:fb:f3:e3:f0:00:
f9:f3:8e:d4:f6:a3:9d:61:df:36:bd:13:b7:00:b4:
b4:80:73:67:42:ef:0c:db:46:e1:d5:fa:db:09:29:
09:fa:b2:e4:f8:0c:80:cd:e9:0d:a0:82:ab:02:dc:
03:da:40:33:78:d1:af:85:ca:3a:e5:bc:61:4d:78:
e7:91:51:99:6e:74:b8:82:87:c1:b8:85:78:c0:a1:
4b:9c:cd:50:38:93:ab:8d:36:55:dd:e6:f4:0e:e4:
66:d5:8b:ef:41:5b:8a:98:92:89:a8:86:d5:aa:b0:
1a:6a:95:57:3c:fb:77:30:42:7f:ee:04:3c:cb:ab:
bb:90:07:d3:9b:5e:ef:87:3f:e8:23:ad:50:82:50:
fa:92:0f:56:f0:ab:15:dd:da:52:0a:ac:69:18:58:
c3:1c:34:6a:8e:5a:9d:03:ce:5b:6b:e8:e5:63:b7:
c4:14:c3:fa:c4:a4:2b:fa:a2:0f:b3:57:75:75:65:
9c:1b:82:39:74:5b:94:c3:f6:d3:39:69:67:4b:34:
6c:0e:b5:a6:a7:c7:31:68:7f:2f:45:2b:ea:03:d3:
17:03:b5:1b:e0:e1:40:4e:6f:30:ef:b8:5f:87:99:
f0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A6:C3:BE:C3:B5:87:DB:42:6A:AC:49:C6:67:F3:30:A4:4F:DA:2F
X509v3 Authority Key Identifier:
keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0d:5c:17:cb:ed:c7:a5:54:0b:86:35:55:bf:62:2a:da:1f:
c7:da:bb:fa:92:47:3a:cd:11:ec:91:ba:04:90:91:80:60:e5:
6d:e8:c3:45:a0:2a:c1:01:8b:48:10:2c:1f:98:62:9c:2e:75:
fe:6c:13:3c:2b:4c:a1:cb:3d:c1:52:42:92:c0:74:e5:70:d2:
7b:bf:f3:af:92:cb:01:dc:5a:62:9e:ec:a8:39:52:a2:3e:cd:
78:28:46:94:74:f9:bd:a8:52:af:84:76:a3:40:d9:e3:e3:db:
1b:30:db:58:4f:cb:c6:fd:0f:5d:9f:74:85:c5:ea:22:10:c7:
0a:cb:85:5d:de:db:b8:5c:51:ba:f2:58:a2:fb:15:aa:71:76:
e7:10:90:6c:c0:92:d6:ec:68:f9:52:cd:c2:49:0a:b5:01:ad:
d5:17:de:91:93:32:d4:d8:4b:0e:3d:1e:c4:17:91:de:f3:cb:
8e:6d:49:7a:08:16:5e:e6:7a:54:c0:49:8c:bf:f0:48:2e:f0:
60:ca:7a:70:b5:8a:de:f9:b4:4f:ce:7e:a0:26:f4:5b:b0:56:
44:cd:18:4a:41:16:c5:4b:6f:d7:f2:2c:c7:54:5e:8a:ea:c2:
e6:95:5c:51:f3:fb:7d:33:2c:5f:28:68:da:95:52:be:52:a2:
10:ae:71:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:51:06 2026 by rpki-client