Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: QPQGlnCv5wL/5aDuc74Gl8i5PwzKCiAb4B2gZtl6Hg0=
Subject key identifier: 05:50:6F:60:7A:8E:41:32:D9:75:CC:6A:33:F6:BC:F1:29:7F:10:D0
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 019FAD1AC177CD422359798853DDFBF90553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 1969
Signing time: Wed 29 Jul 2026 09:00:39 +0000
Manifest this update: Wed 29 Jul 2026 09:00:39 +0000
Manifest next update: Thu 30 Jul 2026 09:00:39 +0000
Files and hashes: 1: AorOXJjA6o7VIXG2KhmRn45N0UY.roa (hash: opct1yXiFy361tzWw8bb0wIPcRKu5irJGelwFQC/fvQ=)
2: ErvwJYNq58NBwdxg4NllytvGu58.roa (hash: L/oQiFOQUaagNx6+74y64js5tlg2OsPgxLI2bOEuDOs=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: wC8Y3vs6U6xc5Hyjrg2Nh7dRZ7JV6IBH/WF7PdpxKyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:c1:77:cd:42:23:59:79:88:53:dd:fb:f9:05:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Jul 29 09:00:39 2026 GMT
Not After : Jul 30 09:00:39 2026 GMT
Subject: CN=05506f607a8e4132d975cc6a33f6bcf1297f10d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:48:00:bd:30:64:a1:c0:f4:99:63:ae:5c:
ec:7e:8d:ba:09:7c:fe:cd:fa:53:79:42:e7:ab:e9:
46:2c:7e:15:0e:ef:b2:e1:cd:05:41:6c:0c:8f:3a:
9a:2a:b5:20:be:22:79:2e:c3:6b:30:de:68:7c:01:
36:6e:aa:25:7e:63:f1:74:8a:1c:b3:e5:5c:1b:a4:
04:75:b7:08:95:cf:6d:b0:51:71:98:38:85:d1:87:
08:bc:46:1d:0f:17:ec:68:08:89:c0:48:a1:f1:d9:
08:4e:ac:d7:8e:6b:59:5b:08:00:f0:c9:0b:c4:29:
6f:6b:60:05:bd:37:5f:1b:6f:a1:11:85:8b:72:e5:
ad:cf:0b:ec:c1:5d:02:cd:13:9f:de:1f:82:db:5d:
12:31:ef:61:cf:0c:bb:5f:92:58:ea:29:ae:45:f3:
b8:6a:11:f7:cc:7c:6d:75:37:36:d4:13:42:fb:33:
fa:4e:ca:e5:b5:49:f6:df:2a:50:7d:23:de:64:1e:
bd:4a:03:81:e5:73:87:5b:55:83:96:16:f4:9a:65:
7a:c3:37:35:b2:28:c4:78:ae:19:f6:eb:50:a4:6e:
29:b3:36:cb:ef:12:d7:aa:53:6b:1e:2d:b3:aa:18:
58:6a:82:f1:14:41:73:19:d2:c1:fc:32:88:a8:1c:
e9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:50:6F:60:7A:8E:41:32:D9:75:CC:6A:33:F6:BC:F1:29:7F:10:D0
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:de:61:88:b0:29:b4:31:ae:b8:9d:b1:e5:36:4e:86:c0:c6:
34:42:38:6b:3f:7f:f9:74:11:f8:6b:ff:bc:97:9f:71:a0:5f:
3d:d5:dd:31:0a:0d:8a:48:61:87:ee:c8:7f:9e:7c:61:27:ec:
92:4b:90:83:df:18:f6:42:e8:07:14:52:e9:1e:c5:62:a0:ad:
f7:f6:4a:5d:e3:fc:75:8d:f1:39:de:90:c5:52:04:f6:3c:53:
9c:4a:0b:6a:ed:34:c7:34:67:ab:5d:ff:91:01:eb:89:51:65:
b1:1e:3f:79:b4:8a:c9:0d:1e:90:2c:94:64:e2:55:14:8f:68:
b0:59:a2:0f:a4:4c:bb:c4:27:e7:9b:3f:21:f5:3f:a4:0c:05:
ff:e9:80:91:46:eb:78:d6:8e:94:fc:1e:eb:2d:17:12:56:af:
30:cd:87:dc:7e:7b:9a:f3:d2:e4:16:b4:fb:54:21:bf:43:1a:
1f:d5:12:3d:37:ec:01:bc:b4:86:55:6d:64:c9:55:5d:0b:fe:
33:a0:d4:36:35:7b:cd:c8:c0:3b:e9:ab:aa:ce:df:5f:45:b0:
67:7f:f8:f2:0a:e2:c8:fb:95:90:ac:8d:61:35:06:1f:27:5d:
fe:80:e6:0e:da:63:5f:0e:a4:2d:5e:dc:65:36:3b:d4:b4:d0:
63:88:da:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:04:27 2026 by rpki-client