Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: DSggdT/II5eDrSuiboug5gB+pydeMmHljiS/d7Xd0MA=
Subject key identifier: 95:40:7C:00:30:05:58:4A:1E:04:80:12:FF:CE:2F:4B:49:73:19:B6
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 019FAB635D3362C4B46B67A6BAD7687546AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 01:00:43 +0000
Manifest this update: Wed 29 Jul 2026 01:00:43 +0000
Manifest next update: Thu 30 Jul 2026 01:00:43 +0000
Files and hashes: 1: FX91S7TqeS_5eNXFwkhAJLeDMDY.roa (hash: 7/g0n2srHScQb2lUJNavUfjGDwgVOP/uF61M1Zy+4aU=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: MMLthOlCt/EaiIrYjDk6WK+QMyWpECKPooMLP3699Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:5d:33:62:c4:b4:6b:67:a6:ba:d7:68:75:46:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Jul 29 01:00:43 2026 GMT
Not After : Jul 30 01:00:43 2026 GMT
Subject: CN=95407c003005584a1e048012ffce2f4b497319b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e3:fb:87:3d:48:8f:9e:46:0c:84:82:27:8e:
53:12:12:5a:aa:03:e6:f1:e3:ae:4e:3a:1b:26:9f:
4d:9d:1f:82:60:8b:52:b7:19:06:6c:25:59:cf:75:
d5:2a:a6:e4:5a:88:13:a4:c2:6c:54:da:c3:74:9a:
b2:27:f7:6e:c0:aa:a7:99:0d:16:78:e0:4f:cd:34:
aa:ce:5d:f5:80:8f:96:b9:8d:68:21:15:e3:76:f1:
a6:55:85:69:43:37:b5:30:a5:c7:54:7f:9e:50:cb:
59:d0:66:8c:93:2e:e3:47:8d:d0:88:6d:cf:19:be:
a0:2f:44:97:7c:0a:2b:42:12:4e:4b:4f:5b:0b:0c:
51:12:53:57:ca:3a:12:df:26:bb:f3:d7:a0:9d:78:
fc:7a:08:6b:0d:e7:60:4f:c3:af:33:c8:b1:54:64:
06:82:4b:ea:7d:df:df:5b:4b:29:68:33:61:8d:a5:
74:33:5a:11:f5:29:3b:b4:01:8c:d4:33:ac:50:1b:
09:50:d8:08:02:4b:5d:a5:fb:f7:bf:48:68:11:7e:
9b:91:19:96:2e:de:b4:04:e7:ce:96:d1:2e:fd:22:
e6:06:92:35:03:ce:a3:77:b0:e3:3a:f7:e9:b7:a3:
21:99:e8:a7:06:06:d1:75:70:a3:3b:c1:33:7c:3e:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:40:7C:00:30:05:58:4A:1E:04:80:12:FF:CE:2F:4B:49:73:19:B6
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:75:09:01:4d:36:d7:66:ac:50:13:98:31:ad:13:93:ed:b1:
8b:3e:cf:cb:16:53:eb:7b:79:83:62:ec:b8:c2:99:bf:36:89:
17:ec:fd:b9:cf:ff:57:39:3a:f2:38:d4:7f:12:18:97:b8:40:
40:5f:39:03:4b:4b:82:32:5b:34:b4:d8:08:0d:e8:45:66:86:
8d:d6:c2:5b:e7:b3:30:6d:16:d7:23:c4:de:e7:0c:b4:f5:72:
17:e3:dc:24:13:d8:50:68:96:b4:91:fc:68:23:5d:e6:5e:63:
d1:40:3d:af:5a:40:b1:4c:01:a2:e5:2d:db:dc:12:a3:ab:5e:
32:8c:ea:88:43:2e:96:64:3f:9a:c9:1c:4b:96:f6:8b:e9:93:
54:34:b9:34:df:b4:d3:99:7e:84:da:60:45:3a:b1:39:10:e4:
77:ba:48:cc:88:5e:8f:c1:c4:70:eb:e3:89:39:32:4b:15:c9:
ef:5e:d0:29:f8:56:4e:df:ee:2f:76:20:00:7b:64:cd:4c:e8:
21:6d:fa:31:e4:10:96:a5:7a:f2:c9:06:d4:b0:0e:3a:2a:ea:
8e:63:0e:2a:b8:7a:fd:04:8f:f5:a4:aa:94:0b:ce:41:c1:d8:
83:b7:fb:e3:fe:e8:01:fd:f9:a7:3a:df:88:bc:e3:df:4a:9d:
26:2e:08:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:24:44 2026 by rpki-client