Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
File: xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft (raw, json)
Hash identifier: Bk2KydLB5Ns5LwiW/6yj5cAWL1rClcQ/n9GiUpsvhE8=
Subject key identifier: 4F:33:89:1A:A0:C1:29:76:60:3C:4A:08:00:FA:5A:40:C7:48:86:82
Authority key identifier: C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
Certificate issuer: /CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Certificate serial: 019FA9752F24152E070192C3E5938A2D47FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
Manifest number: 0B71
Signing time: Tue 28 Jul 2026 16:00:56 +0000
Manifest this update: Tue 28 Jul 2026 16:00:56 +0000
Manifest next update: Wed 29 Jul 2026 16:00:56 +0000
Files and hashes: 1: bkpFrc_6laoYbGdkqTlHlW-Qe80.roa (hash: p/3gwRkkBDXycKoUYkEzWpJbWT3T+RMybdZ5AMyzIgo=)
2: xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl (hash: UGcjA/ZrHHXsJeB5BuigGP+TS2JmIbdO7xTbRlpiHm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:2f:24:15:2e:07:01:92:c3:e5:93:8a:2d:47:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Validity
Not Before: Jul 28 16:00:56 2026 GMT
Not After : Jul 29 16:00:56 2026 GMT
Subject: CN=4f33891aa0c12976603c4a0800fa5a40c7488682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d8:50:33:c4:95:f9:a3:d1:8c:24:fa:86:8b:
ac:74:f1:2c:cd:8e:0e:1a:77:47:39:fa:36:bc:a7:
a4:7f:bf:76:fa:1a:63:68:08:28:9a:b5:02:fa:8f:
b0:af:3e:d8:b5:ac:20:e6:56:51:e1:cf:d3:1c:68:
64:72:b2:6e:b4:71:b7:50:47:b3:c2:a6:13:4c:98:
51:a7:a4:77:9b:b4:1c:8c:d8:58:e5:52:ef:b5:ab:
c5:a0:db:e9:d5:96:b9:b9:bf:a8:f6:66:25:ab:15:
9d:ce:40:b9:f3:c6:8b:ce:45:52:9b:b4:5d:65:e6:
32:66:6e:af:65:d7:8b:17:2b:d7:e3:80:06:7a:ed:
83:87:63:15:bb:a7:2f:f3:b3:bf:a9:75:9d:51:70:
66:16:83:33:ae:df:55:73:2c:2d:34:45:5a:96:3d:
fa:c0:46:32:9d:04:7b:dd:68:45:a5:06:4b:c9:16:
70:d8:7a:bd:59:37:50:35:88:2a:ac:e4:05:b1:9d:
2e:70:55:a9:4c:a7:a1:12:3e:46:bc:be:30:39:fd:
e1:c4:38:bc:50:3c:b4:40:2f:ca:b1:a4:3f:b1:66:
c4:28:cf:d5:34:11:4c:fd:af:12:b8:94:87:bf:11:
48:38:bf:86:61:d0:b9:e8:e9:94:90:99:e3:c7:9d:
ae:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:33:89:1A:A0:C1:29:76:60:3C:4A:08:00:FA:5A:40:C7:48:86:82
X509v3 Authority Key Identifier:
keyid:C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a5:49:31:86:19:a1:bb:5d:d4:ea:47:3d:eb:cc:97:84:42:
35:e0:72:35:99:dd:d0:ab:77:2d:12:1e:a8:15:dd:f4:a1:fb:
99:c5:ce:be:5e:f0:57:85:bb:dc:d1:27:77:30:df:4c:5a:f0:
db:5b:50:4a:64:78:86:1b:a9:d6:cb:82:32:f5:fe:83:eb:3d:
86:6d:e7:ff:d8:66:fc:2e:5a:a8:e9:57:40:58:92:38:51:51:
e4:a1:ef:bf:5a:2a:ea:01:39:cd:02:00:a6:40:51:c5:82:c2:
2d:e4:31:09:79:cd:50:9f:79:66:27:76:f2:d9:25:03:18:1c:
c8:09:cd:96:22:1a:56:35:01:a5:e6:cf:66:59:80:7e:b9:c6:
f0:5e:89:34:97:36:33:1c:e4:34:49:be:61:99:5f:c2:23:e4:
e8:71:89:37:b3:68:42:d3:e3:92:0a:a4:b3:78:b0:68:9e:f1:
a6:ce:a2:e7:f0:4a:35:57:ab:39:cf:78:7c:14:df:67:50:8c:
30:ea:f7:cb:0d:37:2a:b6:1b:eb:cc:4c:54:d5:f5:6d:f5:b8:
01:34:4b:6e:dc:a6:82:2a:ea:01:d6:ea:de:42:b2:69:af:74:
58:61:1e:68:16:77:c3:88:68:1b:73:a3:c1:30:f5:69:92:b1:
59:df:e3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:51:42 2026 by rpki-client