Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
File: xvw4sqEAOV-puZGa15LnrLLbLgc.mft (raw, json)
Hash identifier: ssjXjEWvT/zNesxwoJngYbI1+OzUDi8NJeN+ssCN/zM=
Subject key identifier: 48:31:C7:BB:EA:67:8F:28:32:57:81:28:50:04:D1:91:B3:BD:7B:24
Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
Certificate issuer: /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Certificate serial: 019FA8D095D8EEDAE644B9484BDBFE92D8B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
Manifest number: 09A0
Signing time: Tue 28 Jul 2026 13:01:09 +0000
Manifest this update: Tue 28 Jul 2026 13:01:09 +0000
Manifest next update: Wed 29 Jul 2026 13:01:09 +0000
Files and hashes: 1: 4kLVVeCRQJrEoKU2Z3FAZr5ZTZg.roa (hash: N+n4RQm/UCrzmjM9BuILs0DGf1giItqSLrBBjPu0qrU=)
2: MAAniPDXI9HsVNZwiBPzQo7C0FE.asa (hash: +t1AssvVOScBcP/9D61rppScOKqy8/J9uspPTrgro+o=)
3: xvw4sqEAOV-puZGa15LnrLLbLgc.crl (hash: DbU6hS05UfBGIC0GCq5BzFm3i7zlAVxuv3/vq1G+9mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:95:d8:ee:da:e6:44:b9:48:4b:db:fe:92:d8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Validity
Not Before: Jul 28 13:01:09 2026 GMT
Not After : Jul 29 13:01:09 2026 GMT
Subject: CN=4831c7bbea678f28325781285004d191b3bd7b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:21:dd:bc:4a:e7:17:22:9c:ba:ac:87:e4:
e5:e6:9c:42:6d:5c:b7:50:e6:72:72:e9:dc:c2:b0:
52:ac:e6:81:7b:89:c1:29:d2:35:18:d9:52:9a:78:
ee:3d:26:b9:17:d9:f3:eb:8d:0f:74:55:21:2d:b8:
38:85:53:09:95:d4:10:39:e1:06:b9:68:6d:b3:a9:
55:cf:53:f7:6f:95:e5:24:47:e2:3a:d7:95:18:37:
a1:f9:b2:b7:b0:8d:b4:ba:3a:20:76:3f:3a:43:3a:
01:06:7d:c7:9a:4c:5e:04:3a:22:78:11:ce:21:f0:
9f:95:0d:d0:89:c7:7e:2c:7e:98:28:56:20:e5:ed:
0b:d4:cd:5b:1f:1f:62:5a:61:a9:97:0e:e6:22:a5:
c7:58:c3:c0:60:ba:1c:0c:ac:ce:77:0f:b9:77:75:
4e:7a:6e:48:d8:f8:6a:b6:3d:7a:27:9c:91:1a:2b:
d8:e7:9a:d9:ab:e9:3b:5a:b0:9e:e8:da:02:4d:1f:
d7:67:75:d7:10:a8:df:6a:5e:c7:12:da:ed:76:5c:
c8:83:0a:85:66:b7:0d:df:20:cb:2e:98:2c:34:74:
c3:11:83:4f:ae:68:91:aa:59:e4:f3:d4:40:47:b0:
71:f2:bc:fa:04:89:29:32:f4:30:95:7d:96:be:38:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:31:C7:BB:EA:67:8F:28:32:57:81:28:50:04:D1:91:B3:BD:7B:24
X509v3 Authority Key Identifier:
keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:28:4b:cb:0b:99:32:1b:4a:d7:fa:fa:f9:5b:86:16:8c:8b:
e4:22:98:91:ef:c3:4d:0b:3d:a6:7a:dd:55:73:67:b8:33:19:
66:e8:1f:35:44:a8:15:7b:70:a1:4c:91:09:f3:1c:40:ef:05:
c7:2e:65:b6:04:41:c9:fa:4f:10:be:d2:50:70:80:83:15:8d:
6e:7a:02:94:c7:6b:67:50:c0:60:cb:af:42:24:2a:3b:68:4f:
e8:16:eb:d8:26:47:ac:7c:bc:06:e3:a5:dc:df:0c:09:71:bb:
dd:e1:a2:0b:99:e7:7b:31:3b:4e:75:41:7c:58:f7:7a:42:69:
16:b9:47:ee:3a:2e:b4:65:18:fb:44:1d:1e:6f:04:72:a4:44:
33:f6:ff:f4:c9:10:cc:b5:7e:d3:3b:70:04:c7:48:ea:6d:56:
5d:53:ce:e4:77:11:68:95:af:4c:42:a8:31:1e:39:e8:fc:17:
40:75:d0:61:3c:bb:70:fa:e2:3c:33:2b:7a:d2:d5:2e:33:14:
29:f2:09:8b:7b:86:b9:8e:32:fa:20:25:78:b0:6a:0b:b0:60:
97:16:cd:28:fa:82:22:73:b6:e6:de:ed:54:30:78:a6:63:61:
b0:58:8d:83:94:4e:69:cc:3f:3a:23:a3:dd:d3:22:fa:f0:05:
26:55:45:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:46:55 2026 by rpki-client