
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
File: X7qw05-2l5_k09JIOgG908k77O8.mft (raw, json)
Hash identifier: fjERi7t4pz2N7GjAJulYJmtCvcyU/2hvaRKUjLSIEtk=
Subject key identifier: A7:05:91:D7:A8:DD:59:D6:8E:EA:4C:21:A8:26:D8:DC:1D:C6:AA:71
Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
Certificate issuer: /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Certificate serial: 01A0D917762AE01FF27B4A25F8DF28F71838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
Manifest number: 0F80
Signing time: Fri 25 Sep 2026 15:03:08 +0000
Manifest this update: Fri 25 Sep 2026 15:03:08 +0000
Manifest next update: Sat 26 Sep 2026 15:03:08 +0000
Files and hashes: 1: Fnr8UBCRPeUQhRVFOAHVctCKPfo.roa (hash: PgOyYUmMG9zgljOcOgtP5byxd2cN3HfKRRt85MDBTwk=)
2: X7qw05-2l5_k09JIOgG908k77O8.crl (hash: jDnImAPGXA2e5UlW26J4Sf+GciuQNABpnZUyUQOBGh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:76:2a:e0:1f:f2:7b:4a:25:f8:df:28:f7:18:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Validity
Not Before: Sep 25 15:03:08 2026 GMT
Not After : Sep 26 15:03:08 2026 GMT
Subject: CN=a70591d7a8dd59d68eea4c21a826d8dc1dc6aa71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:30:29:4b:70:bc:f2:70:14:8a:a2:27:60:
53:2a:0a:f0:d8:87:9f:89:86:08:0a:6d:60:fd:9d:
93:00:6f:c1:8b:42:4e:8e:ab:89:72:ca:3c:a2:87:
f3:6e:cd:d3:dc:f9:9c:f7:4c:50:df:7b:a8:1d:f9:
cd:1a:d6:b3:47:32:b0:00:17:95:2a:1f:45:65:8f:
04:84:7a:9e:e1:40:99:e4:8f:02:f0:34:78:30:a1:
38:02:91:14:a3:3a:94:f2:65:28:5e:93:4e:ce:a7:
e4:c0:06:fc:23:7d:7a:ab:5c:f2:d7:8c:6c:40:62:
14:d4:12:17:32:c1:d4:16:ae:92:e8:ad:ad:f1:1c:
26:c1:39:ad:11:56:07:20:b6:05:d5:d8:80:1f:5e:
7f:f5:46:5b:78:52:3c:a2:50:bf:c8:1a:43:c6:ce:
21:88:e6:35:77:33:a8:f5:c3:46:40:8d:1d:2d:ac:
ee:e2:bc:db:79:e2:77:01:49:0f:56:fb:e9:36:d5:
f0:88:93:c9:ed:e4:47:80:59:dd:dd:a9:2a:2f:00:
fe:94:bc:89:9c:fb:61:d0:4b:47:46:d0:c2:df:01:
90:43:3f:93:87:c1:0b:56:2d:bc:ee:73:6b:6d:68:
7a:00:66:2c:0d:40:ee:bc:fb:1c:51:e3:19:68:f4:
77:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:05:91:D7:A8:DD:59:D6:8E:EA:4C:21:A8:26:D8:DC:1D:C6:AA:71
X509v3 Authority Key Identifier:
keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0f:f3:a5:94:33:28:77:e5:47:d0:9a:73:3c:a1:46:87:3b:
ec:83:59:dc:96:38:93:84:0e:38:5e:2c:a8:44:64:40:fe:57:
99:b5:83:1e:05:89:c8:0c:40:49:d9:2a:72:f0:c9:1f:33:74:
e9:68:63:4e:e6:87:f5:90:d3:7f:06:59:a1:53:11:18:d3:3d:
79:e0:bf:18:84:ad:94:11:5b:fd:93:48:a8:b1:32:ee:99:b9:
51:95:42:62:37:e4:26:ad:4b:c4:70:c2:e0:fb:67:5a:60:49:
94:f8:27:52:8f:4b:fe:fb:a1:5b:a4:ea:bf:6d:19:ac:f9:67:
09:f6:38:b3:42:53:d7:1d:57:2b:0f:e8:24:ca:9c:1e:b0:52:
19:67:e2:36:eb:f7:4d:24:a0:29:88:7d:b1:80:98:61:05:a6:
34:91:8c:4f:32:bb:f1:d5:a8:14:46:bf:a0:d9:f9:91:82:7f:
bf:38:b3:3d:29:13:f8:5c:c6:3e:02:59:ad:87:3d:28:04:8c:
2f:ad:bb:af:d0:20:d1:56:7c:03:1d:b1:2d:01:a0:8b:4f:3f:
0b:77:76:db:53:8e:cb:7e:f9:53:47:f4:7a:58:98:4a:62:9e:
4a:ab:fd:84:d4:39:d3:3b:e0:e9:c8:b9:2d:13:dd:01:f1:56:
63:d9:ac:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:55:36 2026 by rpki-client