Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: jc02nh3gGbQupwuCnr747wLPH2LEFJKFDEAUMdtqh14=
Subject key identifier: C5:27:3C:2E:56:06:13:F7:DD:58:DF:E1:49:A4:68:1D:45:8D:A1:3C
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 019FAAF516EC80BC7F2A817B36425B467DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 125B
Signing time: Tue 28 Jul 2026 23:00:16 +0000
Manifest this update: Tue 28 Jul 2026 23:00:16 +0000
Manifest next update: Wed 29 Jul 2026 23:00:16 +0000
Files and hashes: 1: 1HMsGfdsMj6bVCe_HqSPHKmPGQA.roa (hash: Aa+3horScinkb91IcV06nuOTEkzdcEAPUq8TBlQGMDg=)
2: Q6q5ifTmogwJicn2e4z2f5_1UN8.roa (hash: ZCT+LPivkmFqXHHIYRE3kEHzKOk9mVM2bvW0OtpppFg=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: YITQOyek83ASKsWWKazr0D/Ln1ftiTSjFrINcPA6I2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:16:ec:80:bc:7f:2a:81:7b:36:42:5b:46:7d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Jul 28 23:00:16 2026 GMT
Not After : Jul 29 23:00:16 2026 GMT
Subject: CN=c5273c2e560613f7dd58dfe149a4681d458da13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:ab:5f:e7:f6:43:14:df:de:32:72:8f:5f:
07:de:0d:1b:53:22:70:ba:5a:6b:ca:e5:2d:2a:f0:
e7:f4:03:6d:42:aa:e3:9f:e6:5d:95:3e:e6:02:bf:
1f:e9:98:a3:d6:9a:63:24:ab:90:ea:c5:8f:72:39:
92:69:a3:0e:73:b7:e0:47:05:83:37:53:da:45:14:
41:b2:59:15:ba:64:9e:27:15:cb:3c:5d:0d:c1:45:
2c:25:58:ce:f9:b0:c1:f2:7d:eb:63:1e:df:cb:80:
16:5c:79:a9:f6:b8:1a:3a:67:cc:9b:ea:bf:fc:c6:
48:3b:99:96:9f:ab:bd:bb:58:d6:5e:85:90:44:39:
69:ac:84:99:3f:3d:ab:3d:77:4e:0a:80:a3:4b:02:
d6:49:16:69:d9:b4:63:b8:b5:7d:99:1e:0b:b5:7d:
f2:04:ee:d2:90:61:d2:14:21:7d:af:18:8b:fc:e8:
94:87:2e:0d:58:3a:70:97:35:17:be:09:e3:0a:3e:
b6:ac:a3:39:a6:f4:45:da:06:4b:10:c9:d2:9d:1c:
b1:5b:1b:51:d9:49:64:39:0f:8a:28:ae:6c:d3:09:
39:0a:7f:3f:39:4d:da:4b:0c:ac:f2:98:3a:8d:4e:
ad:98:35:72:2d:ed:59:f1:89:33:0e:a4:dc:4c:41:
bf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:27:3C:2E:56:06:13:F7:DD:58:DF:E1:49:A4:68:1D:45:8D:A1:3C
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:25:4d:43:9e:76:b2:ac:5c:9d:09:19:9e:7f:20:bf:10:40:
da:07:e0:0b:59:fb:98:6f:07:6d:79:2e:5b:9a:88:cf:03:1f:
f6:87:bb:0b:d1:ba:fa:f7:a9:d8:fa:95:df:25:6f:aa:56:c7:
38:ae:08:e7:31:d1:61:5b:15:56:e1:91:ab:22:49:c5:14:62:
93:a8:28:1b:1e:f0:dc:28:5d:2b:66:b9:67:ba:11:27:97:16:
6f:56:2c:52:d6:a6:dc:5d:79:09:84:e2:e1:01:31:6f:db:ef:
26:9d:0a:a7:49:6a:6b:e5:ef:10:34:db:42:51:10:fd:c4:81:
cd:32:b9:b1:5f:6e:9d:fd:9a:2c:c3:46:62:62:47:5b:62:83:
7e:76:97:e5:73:ae:8b:62:8a:80:0c:17:f7:0c:52:8c:c0:11:
24:a7:fe:3a:1f:6a:f7:f2:09:f0:4a:4f:fa:18:ec:a2:30:46:
40:4c:b0:ec:d9:42:25:03:34:01:b2:8a:94:7b:e4:6e:9e:32:
d9:04:08:0b:3f:1d:81:a2:32:51:ce:66:19:69:64:ef:cb:fe:
6d:b8:3c:22:93:6b:32:b6:92:a5:64:49:a9:60:e1:a0:17:4a:
56:5a:13:9e:98:b2:32:f5:ad:e6:e3:de:e9:6b:1a:ef:24:69:
2e:a0:09:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:32:06 2026 by rpki-client