Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: GKztP7aaeEEFJGvl0kvD32xuM7HnJRbV0Lb8DUBnCB4=
Subject key identifier: 17:B2:06:FD:2B:FA:71:47:56:31:C9:07:95:DD:C6:BD:E3:25:4B:69
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 019FAB630A5BA2F23213C4A8B1DFA1B80257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 1741
Signing time: Wed 29 Jul 2026 01:00:22 +0000
Manifest this update: Wed 29 Jul 2026 01:00:22 +0000
Manifest next update: Thu 30 Jul 2026 01:00:22 +0000
Files and hashes: 1: FWP58ajjb0tkpM-YIjMEubI9eHI.roa (hash: 8d5KqUUs2iCVjFLb2FSp+rBEK2zv9joKO9sjvkw4TqU=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: lQxE56Cl1KacHk8sDMX83ucAjf5eajLtLKSGHOiIVNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:0a:5b:a2:f2:32:13:c4:a8:b1:df:a1:b8:02:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jul 29 01:00:22 2026 GMT
Not After : Jul 30 01:00:22 2026 GMT
Subject: CN=17b206fd2bfa71475631c90795ddc6bde3254b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:da:5a:52:1f:dd:f8:0c:ee:46:57:3c:2b:
8c:dc:f9:75:11:cb:ff:1e:8c:04:e6:43:ca:8c:a6:
29:27:9c:e4:15:e3:be:82:da:c9:fc:f3:50:27:ea:
49:dc:e0:3e:43:a7:ed:67:e8:db:36:9d:22:1d:6c:
e6:1d:f2:9f:0e:3c:6c:6e:76:86:62:77:90:18:bf:
41:58:96:2f:29:f3:23:9b:19:81:7d:79:f7:4b:74:
54:0d:6c:58:ab:4a:12:6a:ad:d1:4b:55:20:dd:a9:
10:c0:c5:d0:40:24:90:07:7d:c7:af:09:20:f3:8e:
4e:1e:7c:f4:ec:ab:74:22:ef:89:57:2d:28:29:0a:
8a:82:94:d1:c1:61:25:31:1f:d2:4a:6a:c9:0a:cd:
3e:7c:f0:96:70:06:c4:74:5d:d4:f1:07:11:dd:2c:
81:a0:b1:ba:18:3a:da:c4:00:95:40:0c:c8:76:d9:
20:58:ce:74:ff:e9:51:ee:3f:40:59:75:fd:e7:03:
d7:24:17:12:71:8d:08:2d:57:99:f8:7c:59:67:a3:
1d:c8:cc:e3:9e:c7:7d:87:4d:a4:f2:53:0d:96:12:
6f:d3:0e:21:e4:5b:83:e5:35:df:d1:b6:91:d4:e5:
e6:d1:e1:ec:78:54:a5:ab:90:0f:08:54:34:1a:06:
88:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B2:06:FD:2B:FA:71:47:56:31:C9:07:95:DD:C6:BD:E3:25:4B:69
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4a:d3:d5:72:b9:92:6b:a5:e2:8b:44:e0:2c:35:4d:fa:87:
df:c2:2d:a1:06:db:16:01:ef:b1:cc:43:92:2d:3d:66:dc:71:
84:23:4f:32:d0:92:4b:90:35:97:1a:01:f2:43:bf:e8:4c:3d:
e7:3b:da:0a:e0:33:dc:8c:59:04:1c:cc:5a:00:56:0b:e2:f7:
b7:31:42:90:28:39:bc:2c:ad:06:16:8d:c2:89:23:83:10:db:
2c:55:3d:66:ea:53:3a:6e:5b:fc:95:a9:81:78:98:17:b2:1c:
4a:f9:9d:3a:82:ed:6f:2e:50:17:ec:a1:84:45:d3:8b:bd:63:
5e:61:aa:01:b1:49:96:9e:90:e3:fc:b7:7d:a3:6d:97:27:dc:
d9:e8:11:82:6b:1a:58:3b:3e:48:67:4a:07:7f:a6:cc:0f:99:
d9:6f:7a:f4:06:8c:ee:a4:f7:59:ea:0c:f2:76:f9:0a:df:c3:
27:1c:05:cb:21:a4:00:b8:15:55:b5:70:a4:2c:71:10:4f:00:
b0:5c:69:67:b8:b9:7d:82:72:33:eb:ce:0d:f9:8f:ee:88:18:
2b:bd:34:7b:a1:18:a0:6b:6d:0b:b1:f7:19:6e:19:62:58:86:
bb:6e:4c:af:6b:ae:87:9e:0f:a2:69:30:21:dc:c1:5d:95:76:
28:42:80:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:02:38 2026 by rpki-client