Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
File: XAAsRHm7TJbiI0OZznH1YDRSmdA.mft (raw, json)
Hash identifier: nP0lQ97H7CvdG0JhvCsFU6lEM1khT6UmQxWfpKw2ahA=
Subject key identifier: 22:2A:93:89:2F:4C:8D:66:CC:E5:5F:D2:9C:51:94:DF:5D:5A:4C:66
Authority key identifier: 5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
Certificate issuer: /CN=5c002c4479bb4c96e2234399ce71f560345299d0
Certificate serial: 019FAABED02164B30CC2128AA0C6ED0D8305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
Manifest number: 0C68
Signing time: Tue 28 Jul 2026 22:00:59 +0000
Manifest this update: Tue 28 Jul 2026 22:00:59 +0000
Manifest next update: Wed 29 Jul 2026 22:00:59 +0000
Files and hashes: 1: TxbDZ92_D1JcE6gFaCzsdbEg8Dw.roa (hash: w4shAAAl4BC6mnnYlahv1hVwM6Z+ODkO+q4aaMk3Of8=)
2: XAAsRHm7TJbiI0OZznH1YDRSmdA.crl (hash: Ti3QlXzZJnqXwR3Sr5QVZnvvHQLF2USSbVXFiOQvKB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:d0:21:64:b3:0c:c2:12:8a:a0:c6:ed:0d:83:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c002c4479bb4c96e2234399ce71f560345299d0
Validity
Not Before: Jul 28 22:00:59 2026 GMT
Not After : Jul 29 22:00:59 2026 GMT
Subject: CN=222a93892f4c8d66cce55fd29c5194df5d5a4c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:48:93:1d:76:20:01:f1:5a:c6:3d:6a:44:a1:
75:25:f9:c2:bd:d4:1a:97:81:54:92:cf:76:3d:1e:
c7:26:de:f6:ad:75:d7:83:5c:d0:1d:58:ad:52:55:
20:82:8d:34:f1:31:6c:a2:6a:28:cc:3a:e3:e9:2e:
4c:90:7d:e0:fa:70:e3:14:1b:28:9c:04:f5:5e:5a:
bc:16:f4:f6:07:ad:c7:e7:81:5e:a6:80:80:f3:a4:
9d:47:44:b0:ad:3e:ce:fc:94:99:53:26:6c:ba:32:
cd:99:e7:de:b1:b0:2b:79:7b:ef:f3:86:b4:d2:8e:
e5:0a:a1:39:e8:3f:14:93:83:51:51:af:4a:62:84:
cc:2b:d7:94:42:23:48:84:de:a8:cb:d6:b1:67:18:
0e:22:89:ac:9a:f1:62:f2:93:ce:ee:f8:39:cf:b2:
42:ca:e1:a5:f7:74:b1:97:ea:02:a4:39:34:e1:e4:
55:c4:14:47:7f:92:59:47:ef:76:26:c3:3c:8f:63:
c8:1a:30:b2:ea:11:2c:a9:3c:23:39:12:1c:7a:c4:
c3:4d:bc:36:51:b3:a6:8e:1d:1e:ac:7e:a6:95:b0:
ba:18:74:d2:de:43:37:04:8c:ff:e1:dc:27:0d:a5:
e3:c4:21:21:4b:c3:17:93:14:ce:44:3a:f1:ab:02:
45:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2A:93:89:2F:4C:8D:66:CC:E5:5F:D2:9C:51:94:DF:5D:5A:4C:66
X509v3 Authority Key Identifier:
keyid:5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b7:b5:ce:90:83:48:cc:a0:2f:86:2f:9d:a8:d5:95:ee:ff:
c0:ce:3d:af:3b:18:3f:f7:c0:b3:dc:d1:b4:ea:50:3d:da:83:
9a:c4:e9:fb:63:22:bf:57:31:d5:4d:3c:30:2a:b8:3f:93:37:
00:4d:b5:25:af:61:8f:06:d0:6b:11:e8:76:c4:47:b8:1a:d6:
7d:71:00:ec:8e:ef:ee:f3:f1:93:2d:59:c0:2b:39:2a:ba:22:
27:67:90:8b:b4:38:c8:65:21:2a:95:61:24:59:b9:17:94:7e:
ee:74:25:40:09:58:24:d0:22:89:62:38:62:ae:35:53:a6:e9:
10:b8:df:7e:a1:3f:74:bf:78:73:8a:f2:78:4a:c2:c8:42:26:
95:46:b7:ea:80:af:8e:83:c2:bc:03:e5:e3:10:f0:53:1c:98:
a4:16:d7:bd:03:80:82:ab:35:79:4e:55:6f:85:fb:86:4e:97:
ad:c7:fd:e5:87:67:00:2d:93:4e:eb:31:37:5c:88:e1:a4:cc:
d0:cb:6e:9b:fe:54:5c:3f:56:87:ae:b0:21:7f:ea:5c:c9:03:
25:58:ed:90:18:d1:5d:5b:54:69:09:29:76:4e:4c:07:57:25:
04:d2:d6:69:1a:a7:43:4e:64:ac:b6:fd:a8:46:da:c6:77:81:
78:ae:61:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:04:12 2026 by rpki-client