Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
File: XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft (raw, json)
Hash identifier: J2fvTZZBtspi1+dWJ4eZME4hUY91lZ0eIiJA6roH6kw=
Subject key identifier: 24:93:AD:63:84:02:20:72:1B:41:4C:19:6F:FE:BD:F8:D4:92:DD:BC
Authority key identifier: 5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
Certificate issuer: /CN=5d41d330dc8c7293e729451db2646383838e3f8c
Certificate serial: 019FA899688E14CA54B45630AA3715E07369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
Manifest number: 01C5
Signing time: Tue 28 Jul 2026 12:00:53 +0000
Manifest this update: Tue 28 Jul 2026 12:00:53 +0000
Manifest next update: Wed 29 Jul 2026 12:00:53 +0000
Files and hashes: 1: XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl (hash: 1uBEHcL1pIiBcdkKdVesgqYk21YUXKvKVNrDCW1J8Zs=)
2: hFrzrATwthoWhcz0MUU5me2hxsI.asa (hash: qasjw1PBGin1L+tvp/txSHK72tERURo1h0R6cieBtNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:68:8e:14:ca:54:b4:56:30:aa:37:15:e0:73:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d41d330dc8c7293e729451db2646383838e3f8c
Validity
Not Before: Jul 28 12:00:53 2026 GMT
Not After : Jul 29 12:00:53 2026 GMT
Subject: CN=2493ad63840220721b414c196ffebdf8d492ddbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:bf:3c:ea:cc:57:8e:a3:59:b5:82:51:48:
9f:d9:86:e1:ca:39:d9:46:4a:2a:2d:c0:b1:9a:65:
60:b7:db:ec:aa:60:b0:ef:e0:cc:cd:8f:3e:cf:3b:
4b:d9:f0:fe:fa:9e:a0:34:51:1e:97:56:f0:8b:32:
ab:cb:f5:0b:ff:e8:16:07:2a:33:d1:e6:42:ea:57:
87:ae:a2:0d:27:a7:3c:81:c0:8c:43:73:22:97:c8:
e4:70:86:23:de:52:0a:9a:3d:2a:93:1b:db:1b:45:
8c:ef:35:33:19:9f:9f:c4:68:ba:f7:68:27:c5:90:
ea:e5:54:50:d9:b3:2c:1c:83:b3:5d:ae:49:08:89:
05:5f:8d:a4:f3:62:ef:0a:f5:30:a9:79:65:d1:3c:
52:81:73:0c:3f:95:fb:2a:38:43:65:12:26:16:21:
ae:9f:a9:1a:1c:a0:a7:64:24:fe:56:35:dc:4a:1d:
99:88:54:0e:75:0a:98:2f:c3:49:fd:16:8e:d9:a5:
41:53:c8:52:c6:d8:5e:e2:3f:e9:d5:81:3f:61:7b:
f7:bb:ce:71:2e:ea:76:c5:eb:25:f0:aa:c9:0f:61:
46:6c:f4:c9:5c:b1:67:2c:8c:14:27:38:ab:89:93:
26:eb:b3:13:21:7e:72:57:8d:d5:e1:fb:0a:3f:b6:
05:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:93:AD:63:84:02:20:72:1B:41:4C:19:6F:FE:BD:F8:D4:92:DD:BC
X509v3 Authority Key Identifier:
keyid:5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2f:93:13:e1:7b:f9:52:22:81:5a:8a:78:27:2b:0f:57:c4:
d3:bd:9c:b7:ca:22:ac:87:aa:61:4b:82:9f:96:7b:86:ff:9f:
86:50:c7:7c:a8:1f:0b:41:b6:8d:f7:10:19:ec:66:1d:06:b4:
41:de:d9:bc:2e:ad:82:9e:49:b9:e3:c7:94:f1:35:c3:ef:e3:
bc:6d:f2:86:f4:4f:26:da:11:46:c8:31:5e:d6:cd:1b:fc:4f:
2a:aa:56:e4:6d:94:dd:2d:2c:e7:d2:89:bc:87:81:9e:d6:dd:
cf:13:b6:09:c9:28:0b:db:71:02:8b:55:d8:48:60:fd:7a:d6:
87:dd:8d:3d:7f:67:4c:99:18:c9:9a:26:42:68:15:32:10:87:
19:6d:0f:19:64:26:9a:f0:75:af:0c:77:6a:de:06:0c:f6:e1:
7e:34:75:75:bd:1d:3c:38:db:37:93:e2:ff:e4:55:bb:af:25:
82:e8:4f:a1:31:32:f5:0f:ec:6b:51:99:05:ce:29:a8:d7:f6:
7e:6a:3f:30:f9:89:f9:a1:4c:3f:20:e4:26:48:0d:31:27:ca:
65:6c:ab:92:75:42:05:0e:4e:33:2f:92:76:2b:49:5a:a4:4a:
6a:8b:28:37:dd:e1:e7:36:a6:ef:f3:80:e3:8d:cb:2d:f3:96:
7b:fe:10:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:09:38 2026 by rpki-client