Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
File: Xhd799BDVEHRrbFIoizv4dbcwPs.mft (raw, json)
Hash identifier: tLIDfPSm2GzPX+2w9oLbFiv0ri5sD/BCvfSgdm53kpU=
Subject key identifier: DB:CD:1A:D5:71:C7:EB:1F:37:60:5F:D3:51:17:FF:98:5C:BE:AE:85
Authority key identifier: 5E:17:7B:F7:D0:43:54:41:D1:AD:B1:48:A2:2C:EF:E1:D6:DC:C0:FB
Certificate issuer: /CN=5e177bf7d0435441d1adb148a22cefe1d6dcc0fb
Certificate serial: 019EC224AF484A351981B95E25DABF9711B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
Manifest number: 8D
Signing time: Sat 13 Jun 2026 18:00:44 +0000
Manifest this update: Sat 13 Jun 2026 18:00:44 +0000
Manifest next update: Sun 14 Jun 2026 18:00:44 +0000
Files and hashes: 1: TYV20I1tmXmrFyD5hD9FE4IPKWU.roa (hash: cuvSEP8hQjrQh4a+NJD6WQS8i4OZ31Rtmx8MtCDraCQ=)
2: Xhd799BDVEHRrbFIoizv4dbcwPs.crl (hash: s/ppKSN3rdwA23vl2wjkqBI4+VInrIEMEeJrajS5UQE=)
3: s8rf2tML831KhZ_f-0fAXEJkgew.asa (hash: vKjVcHxuUGRJ3DxPFJJe7VWqTLEgv9kq3d3TeM8pLOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:af:48:4a:35:19:81:b9:5e:25:da:bf:97:11:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e177bf7d0435441d1adb148a22cefe1d6dcc0fb
Validity
Not Before: Jun 13 18:00:44 2026 GMT
Not After : Jun 14 18:00:44 2026 GMT
Subject: CN=dbcd1ad571c7eb1f37605fd35117ff985cbeae85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:fb:de:b8:24:25:3f:54:5e:70:34:c1:88:
97:63:49:59:d0:9a:bb:a5:94:27:61:43:3c:87:61:
b6:07:6b:8b:64:e2:95:ff:1a:a1:eb:10:06:89:f9:
0d:5e:1e:39:c0:60:96:47:29:8a:89:bd:7d:02:92:
e3:c0:95:86:9e:c3:d1:5d:b2:a2:01:0e:b1:9f:dd:
a1:bd:f0:46:89:c7:ed:20:5a:db:d3:93:4d:c4:9a:
a7:4b:b5:5f:93:6d:b4:53:13:b6:71:a7:0d:8d:2a:
c0:32:ae:e8:9c:9b:1b:00:63:b1:90:77:0f:28:e2:
d0:3e:96:95:1b:70:d8:18:a5:ba:0f:46:6d:a5:53:
25:f2:94:21:fd:24:cd:4e:aa:00:2d:43:a4:d6:9a:
3b:ad:6b:09:14:83:2c:01:a0:5e:ab:c4:de:e1:d3:
57:fa:ae:5d:3b:bc:f1:a8:fb:88:5a:fc:be:3c:4c:
28:9b:f7:f6:ae:7c:b1:64:aa:82:fc:ff:e8:5c:65:
05:a4:c1:24:1b:5a:92:62:54:72:01:d5:e2:09:ae:
12:3e:d7:24:ad:bc:5e:07:f2:d8:41:13:90:9c:67:
3d:f8:04:f7:15:70:28:3f:41:bd:cf:16:cc:33:e6:
26:87:72:a2:73:84:ed:bb:a9:57:d7:b8:ca:68:1b:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CD:1A:D5:71:C7:EB:1F:37:60:5F:D3:51:17:FF:98:5C:BE:AE:85
X509v3 Authority Key Identifier:
keyid:5E:17:7B:F7:D0:43:54:41:D1:AD:B1:48:A2:2C:EF:E1:D6:DC:C0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:54:0f:3e:52:bf:71:e0:eb:07:c0:a2:8a:17:6c:8a:ba:23:
c5:bf:f2:e3:f3:0f:33:d7:d0:5d:b9:5b:3c:18:b4:34:ea:74:
3f:fd:2b:9e:03:de:5b:95:77:0f:64:9c:52:ec:d0:19:39:1b:
34:69:2f:95:bd:5f:4a:65:61:5a:a2:41:19:f5:f1:50:9d:e4:
ed:fb:bd:b8:db:d3:4d:0d:dc:c7:e8:48:12:b8:d2:e4:60:58:
78:92:76:f3:1f:ed:df:69:4f:cf:24:3b:e7:4c:00:17:66:bf:
7a:3f:61:cf:e7:08:14:44:a7:2a:01:a6:39:76:7c:56:e8:d4:
df:f1:4a:c6:79:87:55:04:73:0d:a5:25:9d:74:69:9d:68:31:
7e:18:ea:3b:07:bf:19:c6:24:56:f7:93:b1:54:23:e6:eb:2e:
d7:f8:c0:99:b9:85:6d:03:07:43:2f:af:f1:72:b2:cb:36:db:
72:a6:82:e0:dc:84:5e:43:e1:3b:48:8c:bc:56:10:8e:ce:27:
fe:de:78:8b:c3:29:0c:39:62:19:b3:d2:35:68:ce:7e:c4:5b:
7f:86:44:67:91:ad:07:85:bb:b6:69:2d:a2:8b:cb:94:9f:c8:
27:91:58:0e:a6:3e:24:c3:cd:ea:49:79:30:5c:a5:bb:7c:0f:
b0:60:bf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:38:17 2026 by rpki-client