Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: 2HSwvn8tmr45ls1717SxwGy4ySc2ebkQXPOFrWy4I98=
Subject key identifier: 61:76:8F:42:A1:39:78:C3:A5:CF:93:30:AE:E1:9F:C0:D7:10:80:A2
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 019FA975773F823BA03705758DA8823CC29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 16:01:15 +0000
Manifest this update: Tue 28 Jul 2026 16:01:15 +0000
Manifest next update: Wed 29 Jul 2026 16:01:15 +0000
Files and hashes: 1: 2oiBg97yJfcku7AZ1xtBGexIP9I.roa (hash: ZkJc6vel+43QcyypXskCAIYVCyw1+ndC8Q1LjIoI34g=)
2: GWcwAEGL8dWNpctIdaHLmJt2F-M.roa (hash: icoIbE+7HxZrn6cToVlzjrHBi9MeFRezSthDAS8pPcs=)
3: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: 98pJ0UPesjyoJmeugWErJ/ZUL/1U13yo3u5W9HfRL3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:77:3f:82:3b:a0:37:05:75:8d:a8:82:3c:c2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Jul 28 16:01:15 2026 GMT
Not After : Jul 29 16:01:15 2026 GMT
Subject: CN=61768f42a13978c3a5cf9330aee19fc0d71080a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:cd:22:a0:c2:3f:f8:29:7b:e7:e0:cf:6d:
f4:6b:1f:a7:d0:64:11:f3:79:b5:a5:de:f2:d8:fa:
b9:ea:4b:a6:c2:d2:8c:81:2f:cf:91:ab:af:09:b9:
2a:e7:dc:eb:02:68:1f:f7:9d:6e:7b:5d:56:cd:ed:
6b:7a:bd:64:65:33:eb:35:08:3a:49:3f:10:63:72:
8c:f3:fe:e6:32:6e:b6:a2:b5:e2:5d:87:08:c1:4e:
0c:65:2e:3e:0e:12:16:bc:ff:47:b3:40:4c:b0:5c:
8d:a8:74:8a:f5:71:40:94:3f:13:4e:c3:d3:89:b1:
f1:7e:a4:31:75:f2:65:f0:55:43:43:e3:a2:0c:18:
e6:62:d5:f5:98:eb:26:53:4a:dc:42:20:7f:92:72:
48:13:09:97:a2:10:88:09:70:80:6e:95:df:9c:16:
84:95:ec:59:37:d0:a8:72:0e:7b:e8:54:92:c9:b8:
0e:eb:31:14:1a:76:45:8e:61:8f:36:c7:57:49:93:
ae:01:26:c5:7b:0f:4e:c6:be:06:33:44:ea:fb:41:
fd:99:64:f5:89:44:17:48:0a:0e:3d:bc:6e:f8:70:
89:28:86:c7:0a:fa:7e:bf:20:94:90:6b:b1:29:a7:
7d:10:bb:55:9d:3e:4c:69:cd:42:3d:e9:c8:c1:50:
d0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:76:8F:42:A1:39:78:C3:A5:CF:93:30:AE:E1:9F:C0:D7:10:80:A2
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:21:52:c4:b5:e7:76:21:0f:46:e6:1f:cc:77:87:e9:7d:26:
6d:79:ff:b9:e2:22:47:d6:05:96:16:78:67:6d:5a:09:07:02:
28:8c:13:ef:17:18:b0:4a:cd:c1:d2:9f:42:42:48:7f:cb:5c:
39:04:e9:e7:ac:88:a0:4d:02:61:6f:ec:e7:75:68:6b:3c:86:
ce:f4:82:48:1c:c0:cb:f8:e7:6a:91:b6:77:a1:a5:9e:72:ac:
00:df:6c:c1:68:bc:d8:a2:92:d0:23:1e:2f:82:a6:19:2e:01:
8e:2c:a8:03:67:5d:c6:d9:4f:30:20:50:21:9a:79:a8:3e:f0:
5e:b7:b8:6f:e2:6a:73:43:5a:57:1b:13:22:b9:ef:36:98:f9:
89:86:e2:3b:d6:23:57:ed:f8:ff:54:da:3e:6f:f2:38:d3:cb:
86:fc:af:55:79:9f:ab:7d:ca:54:9b:4a:c6:99:14:50:07:7e:
53:98:dc:62:61:94:73:55:3f:60:cd:74:1b:5a:54:ee:f9:7d:
34:ab:c8:cb:a0:6e:36:71:f5:2f:2e:d2:6d:a6:1e:1f:9a:c2:
b9:4f:d3:8e:de:8a:d4:62:2e:d5:7d:b6:2b:2b:0a:4b:67:2d:
1f:9d:01:b0:0f:f5:1f:30:c9:0e:82:44:84:7c:2b:ac:14:b6:
09:0c:c8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:44 2026 by rpki-client