Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier: Re2RJzpDES4kUKBWNuerWaDFmJZtyq1aAQn65ecMlmU=
Subject key identifier: 38:5F:1E:0D:8D:D5:EC:71:20:CE:EC:C6:7F:8C:2D:48:38:D5:2A:78
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 019FAB2C5D121DBCEFE27A1274D23BBC5A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 00:00:39 +0000
Manifest this update: Wed 29 Jul 2026 00:00:39 +0000
Manifest next update: Thu 30 Jul 2026 00:00:39 +0000
Files and hashes: 1: jbS8RSSk1qPuBMHXiz0NFlG5gaU.roa (hash: ffpPuQq0nfWr1B/H6xQP1tfUAtvyoDxPWUAq5WEIXy0=)
2: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: pTXilJTFGsN9xt+EvSrIw7wEyk3WxdzcsE6OhD1Uxcc=)
3: xo3E7B75wnW1W3d1HJPhSZevYZA.roa (hash: PthsrXu6VgY7H1QeefirkpT9auw29AQ4kvdF+HY+Frc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:5d:12:1d:bc:ef:e2:7a:12:74:d2:3b:bc:5a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: Jul 29 00:00:39 2026 GMT
Not After : Jul 30 00:00:39 2026 GMT
Subject: CN=385f1e0d8dd5ec7120ceecc67f8c2d4838d52a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:ea:58:7d:30:4e:3e:8d:05:6f:45:ff:52:
6c:14:12:a7:5a:9a:81:aa:7d:51:35:81:de:93:95:
e7:a3:8a:1b:58:a3:42:8e:5c:4d:9f:83:1c:3f:a6:
c9:fa:da:1c:1e:d9:86:96:d7:d3:0e:94:35:12:e1:
d6:8e:9f:4c:33:50:f8:92:d6:9f:46:6e:1c:94:32:
34:c9:58:51:2f:7e:d3:0a:60:29:4f:b4:d9:b0:f4:
f2:c3:bb:72:30:fe:06:e7:51:d9:80:a0:38:ab:15:
f9:b3:19:03:44:26:22:11:25:93:8a:3e:df:21:75:
f9:78:c1:95:21:c9:67:ca:56:d6:07:85:1d:9d:45:
94:d5:8d:bc:95:f4:95:7d:82:22:50:6c:10:68:60:
71:2e:58:99:0f:aa:04:80:d2:43:be:5e:d9:32:dc:
29:7f:81:9a:ee:7d:7f:c0:4b:51:6d:14:44:39:bd:
a1:1d:1c:76:f8:6d:e6:87:17:1a:67:24:df:01:8e:
60:85:25:d5:f4:d8:da:04:58:c8:11:35:70:eb:a4:
8b:f2:2e:81:8d:b0:96:9d:b2:6c:bd:a0:bf:b9:3e:
c5:9e:cf:75:fa:46:be:57:a9:49:f9:3c:65:33:10:
76:27:ae:74:20:05:7a:39:39:d9:03:a9:83:8f:3e:
4a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5F:1E:0D:8D:D5:EC:71:20:CE:EC:C6:7F:8C:2D:48:38:D5:2A:78
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:af:9e:18:89:a7:55:16:b4:b4:62:c8:23:ef:f7:d9:8e:77:
56:26:2b:c1:b7:65:4f:c0:99:b3:bf:52:86:44:97:24:74:d9:
b2:10:98:42:d5:4d:4f:eb:ea:a6:9a:0d:fe:01:ec:97:c2:63:
0b:c7:55:21:fa:a8:72:48:ff:a6:28:60:c5:15:b3:4c:a7:6d:
c7:c8:a0:09:c6:80:43:77:87:b5:6e:c7:44:f1:38:b1:50:ac:
45:ff:08:52:aa:3d:a3:65:73:48:58:1f:11:58:01:63:22:0e:
df:73:f1:c8:ee:65:cd:a3:3f:a4:34:0e:7b:15:3b:2a:13:1a:
ad:91:9b:c8:b6:21:55:38:cf:da:fc:35:22:6c:4b:19:6b:e5:
c2:21:28:18:26:8f:ba:16:03:ce:e3:fc:c1:d3:df:4e:eb:2a:
c8:79:0f:fa:16:cd:f7:0a:26:77:cd:dd:a1:c9:5a:39:26:d9:
98:35:ab:71:42:fb:e4:b4:98:a1:68:d0:ed:e9:31:f6:30:f6:
87:d5:65:f3:d6:ec:19:32:14:5d:97:bf:09:a9:80:e7:65:aa:
9c:62:b7:82:bc:7c:aa:e3:47:54:09:c2:17:e3:08:df:6a:fa:
1a:d8:63:f2:fc:e5:af:b8:6a:a7:d0:e0:1d:be:1f:e8:b7:5c:
ea:fa:dd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:57:59 2026 by rpki-client