Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
File: XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft (raw, json)
Hash identifier: 9ZmvPrOPBjHqA6Jegxzdnld90I8NFh20EEyI/9ReUpk=
Subject key identifier: 23:B6:1D:D2:EE:E3:4F:2E:41:23:47:4E:8D:3B:88:D9:B5:E4:5F:96
Authority key identifier: 5E:E5:DF:38:60:B2:4D:DB:BA:57:3E:D0:48:D4:A7:23:0B:F5:B1:A2
Certificate issuer: /CN=5ee5df3860b24ddbba573ed048d4a7230bf5b1a2
Certificate serial: 019FAA198743B771C65D985911F8A0427B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
Manifest number: B6
Signing time: Tue 28 Jul 2026 19:00:27 +0000
Manifest this update: Tue 28 Jul 2026 19:00:27 +0000
Manifest next update: Wed 29 Jul 2026 19:00:27 +0000
Files and hashes: 1: 5AArOA0LkskA5tw5SWJx3j9Dv6g.asa (hash: g3ncVbCPorzKexZkECV8nZNdPxcAqa14QO98wuTocr8=)
2: XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl (hash: nQ3sAF3QRYvAy7BVcXZL05JlrpwQO47b0euO6u6EmzQ=)
3: sZcKQ6cgnSFOArUoubXO-7UtF2w.roa (hash: i70yL5ZQtlkXeA37PkWypyq+6GqmS0P1o3XFiLGyrFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:87:43:b7:71:c6:5d:98:59:11:f8:a0:42:7b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee5df3860b24ddbba573ed048d4a7230bf5b1a2
Validity
Not Before: Jul 28 19:00:27 2026 GMT
Not After : Jul 29 19:00:27 2026 GMT
Subject: CN=23b61dd2eee34f2e4123474e8d3b88d9b5e45f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:cf:ba:35:84:d6:f2:b6:f1:1b:37:a6:5f:
f8:5c:fa:3b:1a:c1:75:d0:b2:90:b3:7e:b4:4c:ef:
d3:91:bc:58:e8:25:3d:42:68:4c:96:30:68:f5:8b:
5c:a1:b0:28:5d:6e:ba:68:9b:22:84:4d:46:75:33:
0b:13:e8:b3:9d:03:82:71:91:26:53:18:16:80:8a:
b6:f7:4f:07:31:b3:cc:47:ab:67:ff:75:9c:69:dd:
57:8c:9e:7b:a7:06:e4:ee:0e:97:23:a4:9b:06:b7:
29:c5:3a:5d:cc:64:f5:b1:66:b1:3c:62:eb:e8:75:
94:87:7c:d1:7b:75:f2:b6:d6:e2:3c:3f:ae:08:de:
38:40:72:1b:b7:dd:b3:61:cb:bf:70:b2:b8:99:a7:
c2:1e:37:35:78:e7:9d:66:7d:a8:74:8f:6d:f3:c6:
d5:e7:5b:87:e1:4d:c7:f6:c6:68:7f:ab:c2:1a:32:
94:fd:1e:21:7f:c8:40:da:c3:23:88:6d:d9:d2:78:
45:53:31:ff:c8:78:2f:26:2a:4b:8f:4d:37:3f:a5:
e0:bd:de:a7:f7:63:18:16:b2:f0:d7:17:69:64:9d:
0f:2a:80:90:9e:5d:51:41:4a:88:3f:5a:26:a1:ce:
ad:a1:9a:d8:b7:c5:93:6b:b1:80:01:ce:59:ac:89:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B6:1D:D2:EE:E3:4F:2E:41:23:47:4E:8D:3B:88:D9:B5:E4:5F:96
X509v3 Authority Key Identifier:
keyid:5E:E5:DF:38:60:B2:4D:DB:BA:57:3E:D0:48:D4:A7:23:0B:F5:B1:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:26:59:91:0b:77:15:8f:9b:b4:83:38:66:ed:8a:43:bd:d8:
fe:3c:b8:8d:b2:6c:52:fd:81:75:1f:76:6b:16:b0:67:4c:1b:
da:15:20:aa:b4:74:81:f1:bf:88:3e:95:13:5d:8a:55:70:40:
c9:a9:9c:89:95:19:0f:07:d3:f9:cb:82:fe:2c:09:75:ba:ea:
f7:76:a6:30:24:b6:02:d7:7f:57:fe:5c:06:74:82:32:b0:57:
50:01:f4:58:92:8b:4b:0f:c5:07:81:87:5c:23:c1:9e:8d:39:
1c:1f:09:f0:d5:c3:63:3c:bc:38:76:38:d0:0e:da:4d:8b:3f:
b5:0d:bd:f3:23:99:e0:88:50:b1:3d:3a:7c:a9:83:69:81:8e:
2f:3d:14:0b:ff:96:ac:48:91:40:2e:d7:52:79:01:02:eb:96:
76:63:54:ba:52:83:d6:e3:0a:62:b0:06:5f:13:57:eb:09:3b:
9e:bf:66:c5:1e:c6:6b:fb:e8:37:c1:df:fe:11:e5:a5:29:8e:
86:cc:29:58:10:8e:c5:e0:ba:79:81:25:eb:f4:3d:f0:49:b6:
e0:9a:a8:cb:45:8a:66:29:7a:ad:44:f6:d3:c1:9b:2c:56:f3:
23:3b:8f:4f:79:5f:37:2f:4b:09:d9:a6:7d:5e:04:f6:55:14:
d2:c9:06:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:19 2026 by rpki-client