Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: DjEpHxdNtDQxjkMknm4ZSWTZUma8z0AWyf2ToRYDuUs=
Subject key identifier: 69:06:6D:0B:F6:BD:01:28:08:97:3C:BA:AD:60:E8:C5:C0:D5:24:9F
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 019ED499BCA2BCD0464BF65A853CC2F4004F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 0CD2
Signing time: Wed 17 Jun 2026 08:01:45 +0000
Manifest this update: Wed 17 Jun 2026 08:01:45 +0000
Manifest next update: Thu 18 Jun 2026 08:01:45 +0000
Files and hashes: 1: OvbRlSnTXlATqx6AnWYr1toDU7w.roa (hash: Q7J38waQ9GMMd+3BefTKWI7xIc5v9QQp9c12zI1W6yo=)
2: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: UmgcUaD9JJKhwjZULxiZEsZd1cSAf8WlUQPMrA3vRdc=)
3: ka4LXP3r8o1mdLFuGzD128vQb8c.roa (hash: b2UoUARxm+G737EGkLibfrOXAzwN80OkLpiAV/fDR/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:99:bc:a2:bc:d0:46:4b:f6:5a:85:3c:c2:f4:00:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Jun 17 08:01:45 2026 GMT
Not After : Jun 18 08:01:45 2026 GMT
Subject: CN=69066d0bf6bd012808973cbaad60e8c5c0d5249f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9f:7d:2b:5e:3a:72:be:7a:0b:98:43:f7:3f:
c8:2a:99:4b:17:7f:65:40:ff:f7:d8:20:50:b8:11:
5a:8f:c9:ea:c9:e5:88:22:e8:ee:b8:1f:77:f6:8a:
52:4e:22:17:ee:7a:ed:5f:57:d5:b6:5c:6f:0c:55:
4b:36:4b:f0:1b:fd:25:3c:53:ae:7c:44:37:76:06:
c1:80:f8:df:a3:72:48:c6:fa:27:78:ee:2f:77:ea:
be:14:a3:db:36:a1:62:41:da:e9:65:7a:f2:23:c3:
37:8a:83:cb:6b:e3:f4:fc:79:40:7a:52:d1:85:14:
20:e5:37:e5:dd:b9:be:7d:be:ce:2f:be:dd:c1:96:
93:b6:e2:e2:ff:6b:64:a6:a9:e1:e3:1f:40:8d:be:
7c:ef:fe:27:12:ab:e2:c4:72:22:c7:62:78:2f:84:
55:0d:94:35:21:5c:4d:c8:81:1c:a8:68:a5:ca:b6:
83:2e:9d:95:19:29:40:53:8d:02:31:ef:68:b1:c7:
fb:d2:d3:fa:2d:a7:74:27:ce:6f:da:04:29:35:5c:
88:2e:00:58:73:eb:8a:c9:19:ac:c5:8c:c1:2a:43:
ff:f4:87:2a:53:1e:ed:4d:8c:62:31:0f:45:d0:5b:
68:b1:89:c4:62:7a:66:f4:7b:e9:8a:f8:de:d3:88:
7a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:06:6D:0B:F6:BD:01:28:08:97:3C:BA:AD:60:E8:C5:C0:D5:24:9F
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fc:b4:d9:61:72:71:08:ed:f7:c2:22:b7:4b:5a:67:a0:77:
23:0e:91:78:59:41:65:bd:d9:b7:a6:a6:f5:a0:a4:ad:5b:59:
0a:64:a3:2d:5c:fb:0d:bf:38:91:34:db:7f:8a:85:26:d0:b2:
37:1b:4c:cc:91:89:24:b6:a2:79:94:59:4d:26:1c:56:c3:ea:
df:e5:2f:3c:ca:bb:4f:8a:f7:1a:af:5c:63:2e:55:7c:8c:55:
a0:b0:ba:09:2e:c9:c5:ae:31:9d:28:94:a4:1d:04:ae:28:1d:
6f:94:95:6c:cb:b4:27:1f:d2:99:83:a2:c0:61:2e:d2:ea:87:
51:4c:10:6f:49:7a:b0:62:a1:98:8e:b1:e0:71:77:03:81:a1:
f2:bb:5a:52:4b:1b:ad:69:50:13:a3:55:7d:63:4c:0b:eb:c1:
9a:d4:b9:f5:f9:c0:49:b3:49:73:08:d1:13:89:25:dd:6b:42:
b1:b3:80:5b:4c:a7:ad:26:6b:cd:76:07:d4:2c:30:10:58:c8:
9e:b6:72:e0:9f:53:32:78:4d:c5:53:3f:53:4b:af:dc:d1:32:
91:60:e4:74:68:3b:30:d5:ca:ff:f6:5f:21:85:39:86:c6:35:
c2:72:bf:d4:5f:5d:14:02:83:75:27:2a:19:54:ae:43:36:f3:
c2:df:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:21:12 2026 by rpki-client