Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: M3HnTGLn8i3pI9nXQxa/t3NJZ2FErzALUIjsLkz3j8I=
Subject key identifier: 08:5A:FF:30:AB:2E:00:AE:9C:E1:AD:0D:E9:03:F7:29:77:F3:96:95
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 019FAC7677B1EAFC68F1E25FCC2D57466EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 06:01:12 +0000
Manifest this update: Wed 29 Jul 2026 06:01:12 +0000
Manifest next update: Thu 30 Jul 2026 06:01:12 +0000
Files and hashes: 1: pl4G0drpVsiUnTNv0aNJRxAq40Y.roa (hash: TIrmY5F1mz/rcq5o0AaF7KuNyHFmI5rxVVBApqp6+Ig=)
2: uCT5qS0TatwLKR2syBgBgC34NYE.roa (hash: 6Pav0LB8Y/JGRbLI7vMShFMSStiFyP+H+ECIrWK519s=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: BRohuOgHhtkE3eGSo/OMipzkufuBteAFY5djCG+Iwps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:77:b1:ea:fc:68:f1:e2:5f:cc:2d:57:46:6e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Jul 29 06:01:12 2026 GMT
Not After : Jul 30 06:01:12 2026 GMT
Subject: CN=085aff30ab2e00ae9ce1ad0de903f72977f39695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:91:7b:a4:46:9d:83:3f:d8:7f:83:f2:5d:
f3:df:86:6f:7b:4a:90:b0:33:d4:3b:57:8c:a0:ff:
4a:0a:9d:a8:3b:d6:3c:e5:50:5f:e3:ff:23:e2:b2:
13:fb:5d:ce:ca:db:55:08:c3:fd:64:95:c9:89:af:
5e:81:0a:01:9b:68:78:04:4e:dd:8c:ca:4b:34:d8:
d8:cb:2c:01:75:40:36:34:03:b8:00:dd:9d:7e:8d:
05:83:60:14:56:ef:8b:3e:e5:f3:b0:e9:6c:0d:ed:
66:50:3c:da:e0:97:73:19:af:6a:0e:00:07:b3:c1:
0c:13:ad:01:33:f1:d1:36:f4:94:30:33:67:62:cc:
58:93:03:25:bc:ec:c3:2f:b4:42:09:6b:d9:bb:4d:
d2:af:8b:38:ce:55:06:4f:8a:d8:ed:03:dd:a9:85:
63:dc:65:31:8c:f2:d0:d3:d3:93:bf:cc:86:11:dd:
7a:e8:5d:1f:77:9c:f1:0d:96:85:76:f6:28:8f:96:
2b:66:e9:73:09:38:0e:0c:a9:1e:dd:09:45:0b:20:
42:6a:a1:24:15:72:69:73:0f:99:99:f5:77:45:2f:
e0:43:fd:70:25:e7:4a:de:8d:8e:30:d8:2f:97:df:
9b:26:ef:05:ce:34:bf:09:2e:cf:d0:88:19:60:2d:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5A:FF:30:AB:2E:00:AE:9C:E1:AD:0D:E9:03:F7:29:77:F3:96:95
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c6:54:67:a4:63:78:9c:59:ac:d6:13:4c:aa:fb:a1:94:12:
3c:43:ab:ab:9a:3d:fd:e0:70:33:d5:c6:49:4b:52:0d:d5:e2:
1a:cc:92:ea:ce:47:17:0c:63:0e:90:b6:35:24:93:07:13:9d:
72:44:63:d0:35:f9:49:ad:21:42:ff:9f:53:08:0c:ec:47:9b:
21:e8:87:1b:ea:00:5c:cf:4e:1b:38:78:2d:1d:73:74:e4:b6:
38:6d:a4:af:2d:c0:04:df:23:ec:04:07:67:5b:f0:5a:cf:a9:
42:be:b1:9e:76:6a:f9:f6:e7:13:b7:bf:41:22:30:62:b9:57:
81:ee:7d:b0:c3:6a:ba:c8:53:c9:6b:50:d3:3b:43:53:ed:76:
c0:28:1e:6d:1a:64:60:71:09:b8:be:95:cf:e0:69:43:b8:1c:
1e:94:a7:ce:14:0d:00:f8:b7:19:27:3b:99:d1:ba:93:f8:e9:
bb:48:fe:9b:ea:5c:b4:13:1f:ea:1c:95:6f:ec:2b:a6:49:cf:
8b:01:81:c8:26:82:56:c3:8e:d6:b6:37:80:17:cd:91:2e:e2:
00:f0:9d:85:38:39:89:f1:09:ea:0c:77:09:2c:06:9a:ff:d0:
2d:d4:ce:35:94:3f:dd:be:54:f5:0b:3b:1b:a5:fd:4c:ba:9a:
57:7d:62:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:41:18 2026 by rpki-client