
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: lVFPX3XXU1IDc6NsA/QxWmMNgc0V3HdjUUEqDlO/STU=
Subject key identifier: 01:83:79:A7:03:62:35:36:6B:F3:6D:2C:0E:DC:4E:73:B2:70:56:D4
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 019FA9ABD98A8E951E15BFD8A673A694F0A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 19FF
Signing time: Tue 28 Jul 2026 17:00:39 +0000
Manifest this update: Tue 28 Jul 2026 17:00:39 +0000
Manifest next update: Wed 29 Jul 2026 17:00:39 +0000
Files and hashes: 1: A68FGxDlgvGi2ExLVyu1Rtus6jY.roa (hash: OAq7I962/haIw/8uA0XXyCPjF4pVghhaZk8tZjEL3zU=)
2: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: 0YzUd2eJuoIfozaTw290EcWF3KZYZcBnNlfkrh0109I=)
3: sVAfKvrvvhMbIUsWh385vVnIquc.roa (hash: M9eQGOQqKf4XTtZds1m1OGeYS0UwjPbRi7yLdnFl6LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:d9:8a:8e:95:1e:15:bf:d8:a6:73:a6:94:f0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Jul 28 17:00:39 2026 GMT
Not After : Jul 29 17:00:39 2026 GMT
Subject: CN=018379a7036235366bf36d2c0edc4e73b27056d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:78:93:eb:6b:fd:c4:a9:59:4e:40:7f:50:dc:
71:52:2a:6c:1f:99:57:c0:04:99:29:08:17:a2:f9:
98:0d:a0:5e:58:61:75:c7:8c:ca:da:93:dc:22:4a:
77:74:a3:e7:2b:ee:19:38:eb:ff:23:f1:9d:2b:c6:
36:3a:5d:cb:67:a0:df:9d:20:5f:f8:94:3a:cc:e5:
fc:49:a4:fb:81:52:1c:09:e7:b1:90:e8:49:0e:df:
7e:64:93:97:c5:ff:f5:59:9b:8a:4a:6d:22:bc:d8:
79:48:d6:7a:26:21:ef:13:8a:e5:e8:34:2e:d5:0d:
4a:70:86:8e:ae:29:34:7f:cf:4a:80:27:d3:a4:3a:
0f:a1:f9:b1:da:f8:ed:0b:bf:9b:68:7b:49:d6:8d:
0b:2e:58:f3:7b:b1:2a:a6:e1:46:97:3b:f8:2b:85:
a5:5b:33:33:ba:e6:ab:8c:d0:0c:84:de:2d:5d:21:
a6:d9:1a:f9:04:e6:86:f7:f9:7d:18:2d:30:12:75:
f5:83:27:89:f8:29:60:7a:8b:16:63:bb:9c:71:5b:
24:09:50:eb:52:83:94:f5:06:0f:0c:d3:55:0f:5a:
5f:4b:61:ab:89:5a:bb:11:bd:fe:81:77:52:c9:a2:
9d:28:ea:60:06:c9:21:d4:3a:4f:dc:d2:ec:76:55:
0b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:83:79:A7:03:62:35:36:6B:F3:6D:2C:0E:DC:4E:73:B2:70:56:D4
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:af:cd:f9:c5:ae:bf:e7:65:0e:dd:71:18:66:5d:b4:5d:8a:
db:99:5d:f7:24:af:a8:ff:7c:71:5a:69:b2:3f:ec:ad:1c:1f:
04:7f:f8:32:52:43:09:da:f1:e8:0d:39:0b:13:e6:78:35:22:
b2:39:53:86:7e:33:da:d4:f3:7d:68:68:69:5b:df:f2:f4:98:
9e:60:90:30:35:82:b8:56:67:cd:6b:70:b3:19:16:7e:74:ac:
d9:1c:6d:68:6e:c6:f5:64:c2:5f:c2:38:eb:20:f8:f8:1c:12:
56:e1:eb:7a:00:0d:79:a0:c5:af:85:c1:67:96:d2:e1:1c:22:
3b:6a:a7:ee:03:07:d0:33:38:0c:c0:92:72:df:ca:22:d5:58:
bb:58:92:c2:df:4b:4e:e3:d7:a0:9c:9b:8b:87:43:3d:8a:29:
91:75:84:b9:af:2b:46:d2:5b:25:80:d4:14:97:c7:d5:69:77:
5a:39:91:e8:fb:6d:60:7c:06:f7:e8:8f:98:fb:91:dc:6f:00:
8a:e6:13:cd:16:39:21:15:a9:e4:86:46:6b:c1:4f:94:69:07:
fc:3b:50:e7:63:36:8c:b8:4e:fb:00:7a:92:57:f1:bb:30:e6:
fa:32:e3:23:4e:88:e4:d5:26:8a:40:79:75:3e:39:bd:9e:14:
24:cf:3f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:17 2026 by rpki-client