Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: kV85jVlYk02miLF1f4hGnv4c5caJL5E4N+v1pGvX0ko=
Subject key identifier: 16:D6:D8:72:9D:F4:53:A0:06:FB:CA:09:E3:82:0E:D5:EB:A2:CB:97
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 019FAC7610A64581EB4E4108E602883F7520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 06:00:46 +0000
Manifest this update: Wed 29 Jul 2026 06:00:46 +0000
Manifest next update: Thu 30 Jul 2026 06:00:46 +0000
Files and hashes: 1: 7dSZZTHJ1-e2dDdweLpiAslwQS0.roa (hash: TsQjPnCqokf75A2IgOvFTsvPj11pJfIjU93Enfc2xSU=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: NLmdXfGhvawcp0iCWVIjq3tQzX0PrRijfclLvtWgEK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:10:a6:45:81:eb:4e:41:08:e6:02:88:3f:75:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Jul 29 06:00:46 2026 GMT
Not After : Jul 30 06:00:46 2026 GMT
Subject: CN=16d6d8729df453a006fbca09e3820ed5eba2cb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:c3:d9:03:38:5a:8d:de:57:4b:65:15:04:
c0:69:40:59:f2:4b:06:48:ec:d6:31:9d:fb:ba:99:
17:7e:bf:21:af:00:02:a2:93:e2:48:df:7d:a2:e2:
b6:29:a7:cd:fe:e3:aa:88:80:5d:27:10:90:31:4f:
08:d3:fb:dd:86:86:5b:f6:7e:bb:a8:85:e5:59:5e:
eb:74:76:a3:e0:f8:d9:93:df:89:29:c6:ee:0a:02:
d2:85:5b:d4:00:7a:56:f9:46:1f:04:0b:32:06:9c:
2e:be:7f:52:4f:7c:e8:95:a4:cc:53:2f:5c:e2:21:
08:51:fb:b5:28:ca:5a:22:1e:4a:2c:a5:bf:37:01:
cf:ce:3d:0a:6d:22:3c:b7:94:99:be:b6:d0:a7:16:
f5:1f:58:cd:f4:13:db:e4:6a:07:e2:77:91:e8:35:
40:4e:18:d0:aa:9e:f2:e0:05:72:0a:79:68:fa:f4:
41:75:65:c2:10:ba:e0:be:e9:97:b3:91:ac:fa:41:
bb:90:3b:a5:c4:31:6c:bf:aa:45:cc:8f:d5:03:28:
23:99:c1:4d:6c:d1:92:b8:c7:fe:3f:4e:83:18:4d:
ea:46:52:1f:d4:20:fa:75:81:a9:90:6a:81:a1:a1:
dc:05:ec:e6:78:26:70:bd:fa:ef:24:2a:10:da:0c:
d1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D6:D8:72:9D:F4:53:A0:06:FB:CA:09:E3:82:0E:D5:EB:A2:CB:97
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:52:f0:ff:f9:21:1a:cb:79:6c:ee:31:ca:49:85:f7:67:a9:
d7:a5:0d:20:95:b8:40:3b:f8:5f:f0:6b:15:72:37:09:c0:ae:
4d:b8:0b:5c:91:ac:b0:e3:06:20:05:d5:2a:ac:41:ab:18:40:
35:95:8c:a0:e9:34:e4:d3:4b:f2:31:a1:f5:78:2d:2e:58:11:
c3:53:5b:33:43:2e:88:21:b7:bf:25:d4:c8:34:10:42:21:8e:
7f:da:6e:02:4f:b8:85:cd:3c:56:2a:bf:a8:1c:24:40:38:cc:
41:50:e4:28:88:d1:85:29:d9:f7:25:98:30:9f:30:9b:8f:2d:
b4:e4:de:91:5a:1d:9a:58:a8:c1:c2:ab:6a:e0:fd:f5:b1:36:
66:31:7a:45:90:44:90:de:6d:51:a5:41:ba:6d:1c:da:31:ec:
2c:1c:4f:b3:29:f7:af:56:0e:d6:3c:82:82:8f:c2:ed:76:d0:
fe:30:58:2f:3b:1c:44:8c:fe:2c:13:f6:f8:de:80:33:1e:90:
87:cd:6e:ad:7a:44:79:2e:3f:83:42:03:25:63:d5:0b:54:b0:
e5:69:00:ed:3b:4c:c0:da:97:64:b5:78:53:4b:d0:fa:8a:99:
d9:61:8f:3e:3c:d5:5c:ca:1f:8d:da:ac:3f:ba:d9:4c:e9:7b:
ea:aa:a1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:12:48 2026 by rpki-client