Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: kIRZcseQyxZYw59ozyxJt8SzVRt7uXkspgDw8PQ8w+I=
Subject key identifier: B7:7F:B1:A3:1C:02:E8:B7:AA:20:61:AE:A8:53:D8:EA:45:36:D0:2F
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 019FA899E0A168C2132969055C02C7E57B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 12:01:24 +0000
Manifest this update: Tue 28 Jul 2026 12:01:24 +0000
Manifest next update: Wed 29 Jul 2026 12:01:24 +0000
Files and hashes: 1: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: PDAOJ6HwAM/X31WdfSmnSaJr5JzcrAhZ/gjiUaJPX2Y=)
2: awXRcerSAP4jrgOUBQ68Ss0j_JE.asa (hash: 7H/s8bfQHFW6k1q0+FHWfKFzwz0TBvvLD09+Qjh3Rf8=)
3: mde2iraZFBwTbp97_tvjs2IMwjU.roa (hash: Q0iRTXsb5myu//hBM4zbKFOJNKJsTWjqhNvukcS55wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:e0:a1:68:c2:13:29:69:05:5c:02:c7:e5:7b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Jul 28 12:01:24 2026 GMT
Not After : Jul 29 12:01:24 2026 GMT
Subject: CN=b77fb1a31c02e8b7aa2061aea853d8ea4536d02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:85:6a:94:8b:04:eb:57:5a:2e:41:86:fd:a4:
fb:46:3f:93:a8:da:b7:54:ed:80:aa:e0:25:c1:f4:
27:ea:b3:31:13:e5:b7:4b:ab:42:88:ea:c1:67:ea:
f7:51:51:ca:56:ba:99:c3:2b:82:13:75:05:d1:52:
09:29:38:05:66:ed:90:da:ba:37:cf:4e:ef:f6:05:
b7:f0:6e:48:35:dd:fa:76:01:40:43:c7:c8:d6:1b:
c5:e0:b6:a9:a1:6d:b5:27:bb:03:9f:02:c5:aa:5b:
35:44:9a:11:b0:67:c5:25:05:be:ca:ce:e5:bc:d9:
f5:43:b2:64:aa:03:46:19:68:34:75:e6:7c:e8:0c:
37:eb:eb:c0:94:59:32:90:7d:75:eb:19:3c:b6:3c:
01:62:f7:fb:a2:a1:83:60:29:b6:ef:44:cf:ec:43:
41:35:07:b5:b7:66:ec:7c:af:58:fe:2b:7a:01:d7:
11:23:6b:04:cb:0a:04:69:c5:0e:98:47:89:b9:47:
de:a1:ca:08:99:80:85:ea:dd:69:df:cf:ea:31:c1:
35:3f:dc:b7:6a:b7:fd:1a:03:d7:08:0c:2e:8c:6f:
f5:2c:a4:cf:48:6c:7e:89:14:0d:ba:07:ee:89:e3:
3d:a3:0d:1f:ac:87:e1:11:e2:c2:24:94:b1:53:be:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7F:B1:A3:1C:02:E8:B7:AA:20:61:AE:A8:53:D8:EA:45:36:D0:2F
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b2:35:15:0b:47:df:19:66:01:e6:90:0a:28:f2:65:98:cf:
69:10:3f:be:99:6a:f8:90:a9:45:85:6e:c7:64:59:cd:8a:cc:
3d:52:61:cd:d2:f4:c2:a1:bc:2d:c0:9d:69:36:7e:6f:77:f8:
63:ca:9a:73:b5:f0:be:44:d9:0c:32:9a:13:28:f1:57:dd:c1:
84:c4:a6:57:b3:5a:22:ed:7e:2d:7d:82:af:e1:17:b8:cf:b6:
6f:23:ba:68:03:69:3b:85:60:06:d7:f7:71:ae:20:7e:0d:66:
98:64:0b:fc:8e:b1:a1:b6:ba:8e:0d:c2:6c:49:25:fb:d4:3a:
70:f2:77:5e:1b:98:6c:cd:82:e1:bb:c3:b2:83:92:a3:ed:8b:
fb:88:0c:98:31:a0:f2:d8:1d:fd:d9:9f:11:21:4a:3e:a9:ca:
41:c7:cd:da:93:92:ad:34:03:5a:30:32:77:e6:b9:48:11:d5:
e1:85:d5:af:0c:51:7c:62:98:84:00:73:eb:4c:5e:fd:ac:fa:
ea:ec:dd:56:29:0b:e3:c1:e8:ce:86:89:b6:e8:a2:8c:7d:cf:
33:1d:92:dd:4c:02:ad:87:03:0e:3f:03:15:25:67:a6:89:5a:
bc:82:2e:52:9c:f6:ed:e0:d5:6b:4a:9e:39:38:c9:59:d5:3c:
47:92:b6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:39 2026 by rpki-client