Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
File: XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft (raw, json)
Hash identifier: iA+TTzYd2evRzQcNpg1iSo47ez3zMafaTFEGDZ+F99I=
Subject key identifier: 8E:47:AA:5D:42:D4:74:3D:93:26:7E:1E:CF:2D:9A:8B:32:08:AF:34
Authority key identifier: 5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
Certificate issuer: /CN=5e774467e21849524943d2bd459010720f3e20e4
Certificate serial: 019FAAF569D96F543840515E8EAFD8C3892E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
Manifest number: 14E3
Signing time: Tue 28 Jul 2026 23:00:37 +0000
Manifest this update: Tue 28 Jul 2026 23:00:37 +0000
Manifest next update: Wed 29 Jul 2026 23:00:37 +0000
Files and hashes: 1: 46eH9Cj2ZoAvvZOdO1gLEixXty0.roa (hash: nutrSegvu5QxeGV6g/QuVOtrzFyb4Km/JeoI/dWaXRo=)
2: XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl (hash: fuu+wi+HZmZ/8exGY64nNAkyjmhzVTOPbYlRlTqYLQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:69:d9:6f:54:38:40:51:5e:8e:af:d8:c3:89:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e774467e21849524943d2bd459010720f3e20e4
Validity
Not Before: Jul 28 23:00:37 2026 GMT
Not After : Jul 29 23:00:37 2026 GMT
Subject: CN=8e47aa5d42d4743d93267e1ecf2d9a8b3208af34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7a:43:46:e7:69:5f:e1:0d:42:64:3d:a9:2e:
df:58:c4:70:22:37:2d:cb:a4:3f:81:2c:63:cf:23:
44:52:8d:2a:07:0e:6f:23:80:0a:58:14:5d:07:16:
3e:f0:9f:c1:6a:4b:f3:ff:48:90:77:36:63:4f:b8:
dc:c5:e1:fb:a3:07:67:db:44:de:e4:d5:15:fa:96:
ff:77:a0:c1:6b:cd:e4:c5:2e:79:f3:24:b2:76:6b:
2b:62:d9:6d:e4:24:25:a8:b5:c3:8f:bf:cb:5a:4e:
6a:40:81:fb:c5:f7:a5:87:0f:70:39:d8:64:ea:ee:
46:db:78:9b:1b:ab:ca:ba:0a:32:46:7f:25:a5:5b:
3a:ad:fc:59:46:5b:12:b2:37:26:fd:a2:7a:55:e1:
cb:86:f9:77:9a:a8:b8:04:0a:c3:ca:5e:7a:fb:c6:
cf:27:c4:15:7d:df:75:d4:d3:cb:d7:11:52:ce:b8:
aa:a5:25:ee:32:ac:70:75:a7:ef:bb:fe:1b:87:49:
78:5a:6f:64:01:0e:d2:16:1a:34:14:70:b4:6c:20:
af:ef:3b:44:39:01:42:b8:ff:76:31:cd:f5:a5:a2:
5d:bc:b1:e6:ff:14:dc:25:04:f7:e5:8f:fa:92:42:
9e:45:73:08:43:05:78:83:96:e2:3d:3d:3f:fd:f7:
39:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:47:AA:5D:42:D4:74:3D:93:26:7E:1E:CF:2D:9A:8B:32:08:AF:34
X509v3 Authority Key Identifier:
keyid:5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f2:6e:d1:f2:00:c1:f4:ce:58:4b:0d:b6:16:44:ca:97:9c:
52:09:b7:01:29:45:02:43:28:5d:e4:11:9a:62:de:c9:cb:d2:
4b:08:23:b7:d0:8e:70:a7:70:a3:ff:b5:79:b1:d2:5d:35:49:
46:15:b9:a8:ef:01:70:62:d4:80:06:95:b9:ad:2e:3e:a3:9e:
9a:3b:c8:7e:c2:af:46:fa:78:b5:7e:a9:33:d7:93:cd:7e:07:
d7:b9:f7:36:c4:1e:3b:cc:86:c9:a5:86:52:9a:a4:4c:ec:e8:
ea:91:c7:0c:33:1c:6a:d9:17:1d:92:e4:93:18:13:07:3a:18:
f9:34:07:36:3e:aa:25:02:26:c8:71:b6:e7:00:b8:4d:bd:28:
2a:e2:ae:72:2a:f1:42:d3:a0:7e:7b:04:68:4e:60:52:08:4f:
5f:a2:6a:44:e4:ae:ed:a3:71:48:16:27:00:e2:75:b8:11:c2:
16:bd:7a:f2:e4:00:72:9c:d5:19:1e:78:db:e0:23:32:19:68:
fd:63:b5:21:61:4a:08:a2:3f:8e:b7:8b:63:ed:f3:d8:95:c8:
62:4f:b1:bb:37:55:1e:0c:09:5f:10:d7:c4:ea:55:c9:89:02:
9e:6c:60:91:d7:38:6b:4c:44:f2:46:1d:50:43:09:15:83:61:
43:f3:7a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:50:12 2026 by rpki-client