Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
File: XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft (raw, json)
Hash identifier: 012GYQ0TIuFxOFk8YHCxvM7GiYLcWsF3wscVAQKtP08=
Subject key identifier: 97:CF:F7:3B:2D:8F:0C:A9:A0:14:FB:87:86:63:B1:E3:BD:FB:DF:20
Authority key identifier: 5C:14:65:0A:6F:9E:C8:C3:85:70:B1:BC:49:97:58:65:86:8A:DE:E0
Certificate issuer: /CN=5c14650a6f9ec8c38570b1bc49975865868adee0
Certificate serial: 019FAC762D26AA405A519478FD7900739B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:53 +0000
Manifest this update: Wed 29 Jul 2026 06:00:53 +0000
Manifest next update: Thu 30 Jul 2026 06:00:53 +0000
Files and hashes: 1: 04Jned94Tm4i1zjB6zNQbqDkj_E.roa (hash: SONtOeyZ10Os/7J4wXL7zFzVJyuJnftLszlFQu+LaN8=)
2: XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl (hash: xvqijHrHPVMS8z8uGf2kJ0gMkZ4AK3ZjjICZBgHTvkM=)
3: ZVwy0ZfFb9sOAQVJkv6jGWwOzQA.roa (hash: aaY2/fswTLKyyajK0wJbHpj/eHxX7OB2bAMISHRWGRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:2d:26:aa:40:5a:51:94:78:fd:79:00:73:9b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c14650a6f9ec8c38570b1bc49975865868adee0
Validity
Not Before: Jul 29 06:00:53 2026 GMT
Not After : Jul 30 06:00:53 2026 GMT
Subject: CN=97cff73b2d8f0ca9a014fb878663b1e3bdfbdf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:12:49:29:d9:e0:cd:e5:b2:cf:39:ba:1f:
3d:c4:8a:8a:3d:2e:c4:91:5e:ec:27:e7:44:89:c1:
dc:e1:f5:46:06:82:4f:fa:07:f8:4d:1e:a1:14:4b:
79:8b:f5:b1:8c:ad:87:d8:f0:f4:47:a0:f7:f0:8b:
20:6d:c4:63:a7:0e:bc:aa:ce:ff:df:fd:ec:42:f2:
d7:74:82:0f:82:88:3a:33:b0:46:57:97:6a:5b:5b:
ce:a9:e8:3b:a2:ae:79:8c:0d:1a:80:bc:2b:ec:66:
0f:43:cc:6a:5d:71:ef:a9:2e:6c:f5:2c:75:c2:bb:
cd:3a:b1:2a:f9:9a:3c:bc:64:db:d3:f6:4c:8c:f8:
1b:f1:16:cb:b4:c5:83:c9:af:22:e8:c1:cd:8b:53:
47:f8:76:d1:fe:19:d0:8f:ef:18:12:e2:71:b7:20:
76:e1:b5:96:4b:02:71:bc:bc:76:b4:fc:94:4e:72:
a2:f6:fe:6f:00:06:c4:fd:2f:96:c1:96:62:4c:2e:
d2:72:8d:07:8b:ad:0a:87:fa:be:b9:91:3b:1d:30:
62:c1:80:1d:5e:98:b1:63:0c:b0:ea:43:f1:7e:7d:
a4:fe:49:65:02:c0:55:b5:50:0f:11:3e:1e:05:52:
d6:a6:8a:39:47:b9:e7:51:20:bc:b8:9a:55:83:16:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CF:F7:3B:2D:8F:0C:A9:A0:14:FB:87:86:63:B1:E3:BD:FB:DF:20
X509v3 Authority Key Identifier:
keyid:5C:14:65:0A:6F:9E:C8:C3:85:70:B1:BC:49:97:58:65:86:8A:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f2:73:8c:f2:c7:0b:dc:b6:b2:a5:69:11:d6:2d:40:5e:09:
c0:73:b9:ed:54:cb:85:6a:c5:69:ed:b5:a4:b7:4a:9c:4b:57:
60:de:59:ed:d6:71:fe:f4:58:bf:0b:90:1e:14:a4:80:72:6d:
eb:ef:a6:82:77:49:4b:b4:d1:82:a9:56:ee:e5:b5:6b:4b:e7:
2c:59:1f:e3:db:3e:4d:63:2c:7a:b0:0f:bc:a7:f5:c1:0a:d5:
4c:1f:f7:7b:d0:07:40:6f:8d:10:f7:c6:16:33:f3:49:b5:30:
7c:94:f4:62:46:12:fd:16:c5:cf:38:d1:e9:d2:d8:38:0f:0a:
0c:fc:70:ba:6d:04:c7:55:20:75:1d:40:45:a6:9d:a6:c4:79:
7f:31:6d:b9:60:e1:39:d9:7b:f4:bb:e8:05:d6:1b:83:b1:25:
b8:48:09:76:ae:b4:d1:0c:5e:ac:d4:ca:d9:a6:e5:96:d8:ea:
33:2e:a1:65:84:f3:ae:23:1e:13:19:76:82:ce:4b:24:52:11:
03:b4:29:d1:2c:d2:e8:85:f6:aa:f2:8d:15:0d:96:d4:99:39:
5c:fd:de:92:e2:cb:93:a6:1f:22:2e:7a:fb:3d:e8:bd:4b:fa:
be:51:fb:a4:23:fe:64:a5:82:a7:4b:9f:32:97:95:1b:a4:25:
86:8b:ea:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:24:57 2026 by rpki-client