Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: i7FLd18klyKhmYCFbGRLR5DUVGIgiMf+QxoHyIEGhDU=
Subject key identifier: 52:F9:8C:5A:6F:8A:1A:E3:1F:2C:14:B7:2A:C4:46:AD:C1:17:61:3C
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 019FA898EEDDBE43DB36D13929F012A9F463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 12:00:22 +0000
Manifest this update: Tue 28 Jul 2026 12:00:22 +0000
Manifest next update: Wed 29 Jul 2026 12:00:22 +0000
Files and hashes: 1: Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa (hash: Ykk34DqNXHApsE9nxxAgQ38pONoyVUESYWMP39kBFzk=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: rlDsZDSdGMyZHOqxlZVTDw7h9nf0RdnM1cuOOCdBuLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:ee:dd:be:43:db:36:d1:39:29:f0:12:a9:f4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Jul 28 12:00:22 2026 GMT
Not After : Jul 29 12:00:22 2026 GMT
Subject: CN=52f98c5a6f8a1ae31f2c14b72ac446adc117613c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:ac:53:b3:f5:ca:6c:36:04:d9:5d:b4:38:
12:35:4c:53:18:8b:0d:a3:67:5c:a3:18:fd:0d:a7:
85:1b:78:ee:21:31:3a:cf:84:2e:ee:3d:8a:c1:24:
27:8b:5b:e3:a9:23:13:15:69:30:fa:8c:1d:c2:a3:
e8:c8:69:4e:b0:9f:02:fc:56:01:d0:f8:43:ce:c7:
33:23:05:ca:ba:b5:38:75:a2:a2:84:cc:5f:64:3b:
2f:17:a4:85:8a:f6:75:af:c1:80:90:d2:b1:0e:06:
68:fe:8b:02:4f:2d:a7:61:69:e4:59:94:b9:36:56:
54:36:36:76:e0:91:87:47:bd:2e:1f:25:fb:87:3a:
a9:75:a0:59:ce:8b:49:64:f7:b1:48:a5:b4:72:33:
f4:e8:78:6a:5e:35:ea:d3:40:3d:4e:ca:b2:17:90:
63:8c:d2:70:2d:ad:25:32:ba:73:4b:43:0b:dd:44:
c1:b6:52:64:8f:6b:a5:af:1f:5a:65:88:b5:c3:02:
0d:88:da:d3:d8:93:09:78:7a:38:39:d6:84:03:f4:
85:8d:2c:f2:e8:81:6d:1b:93:45:d3:a8:f0:4f:0c:
0b:29:27:bb:0f:ef:4d:5e:35:c8:8c:be:de:03:df:
fe:e0:58:7d:83:53:02:1b:88:43:bd:ab:25:af:fc:
f6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F9:8C:5A:6F:8A:1A:E3:1F:2C:14:B7:2A:C4:46:AD:C1:17:61:3C
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:52:05:08:0c:4b:20:3d:a6:42:cd:b3:09:29:b4:2d:52:68:
6a:9b:e5:a1:ce:40:c0:d5:59:35:3e:d7:ed:03:07:f0:44:aa:
be:04:33:c8:f2:42:d6:1a:ea:55:8c:54:e5:16:3d:9b:ee:68:
d5:84:95:a8:dd:be:41:b6:11:34:49:8e:c3:63:51:0f:4f:d5:
30:65:00:ae:50:93:b6:ef:06:21:03:dc:8f:b5:ea:ea:1f:36:
04:ae:f0:ff:fb:3e:37:37:2b:89:da:7a:ce:74:8a:fa:13:7d:
e7:83:48:46:85:e9:84:ed:86:0f:5a:65:7e:c3:77:38:d0:87:
d6:f3:b4:fa:5e:0d:0a:53:0f:c5:8e:16:9b:84:23:37:91:2c:
66:66:a8:72:1d:92:98:2d:f7:e8:1d:df:c1:fe:51:22:2c:9f:
a6:f8:ba:68:54:b1:9a:03:e8:ea:80:5b:25:ea:52:79:ec:5e:
2d:9c:98:2d:d4:ca:8f:cf:ef:f1:48:de:3e:c2:ea:95:79:1e:
ce:d5:21:b5:57:ec:62:c5:45:0e:55:8a:ed:48:9d:e2:75:f0:
99:d1:c8:fa:08:25:b9:ac:02:06:6b:5b:d4:a1:22:cc:25:ae:
0e:6d:89:11:b1:5e:60:44:ec:a6:5c:b8:4f:75:a2:a0:12:fa:
d2:7b:4b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:32:37 2026 by rpki-client