Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: o40kuGyAv2E3pjLe3NwLAue9d228LKgFtCkxbQGtLfA=
Subject key identifier: C3:D4:E6:58:E0:E0:47:39:4F:F3:8E:88:59:61:2C:5A:69:5A:46:EC
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 019FAC3F37EE56612483103F2D72B2383C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 19DA
Signing time: Wed 29 Jul 2026 05:00:51 +0000
Manifest this update: Wed 29 Jul 2026 05:00:51 +0000
Manifest next update: Thu 30 Jul 2026 05:00:51 +0000
Files and hashes: 1: BVjAALpJvxuQy2GyePspuTkr6KE.roa (hash: n2Oqqyn+P3DE0EdI3BsAkGnYPcIXpRm9D9/3qqS3Klw=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: L90cl2jtjnqXwlXmD7gcpDWrFqdgXcEYtu4O+ulXtqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:37:ee:56:61:24:83:10:3f:2d:72:b2:38:3c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Jul 29 05:00:51 2026 GMT
Not After : Jul 30 05:00:51 2026 GMT
Subject: CN=c3d4e658e0e047394ff38e8859612c5a695a46ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:7c:c3:f0:a3:3c:0f:36:a9:31:68:63:83:b3:
0a:d5:b0:3e:24:fd:2e:de:5c:e7:1e:df:3e:99:cb:
6b:5f:b1:f5:2e:e9:3f:cf:43:03:a8:27:2a:f1:70:
fb:0b:d0:94:05:0f:72:2c:cd:dd:a7:ae:02:5d:c3:
62:08:30:51:ae:25:1e:38:aa:1e:24:d2:87:00:7b:
b1:c8:45:aa:41:70:ac:21:2e:21:9d:66:52:67:c7:
89:d5:9a:f3:bf:a0:77:0b:50:4f:1e:fb:ae:ff:35:
5b:7b:37:6f:f0:ad:af:01:1d:7b:d7:5f:79:67:3d:
9b:4a:67:02:5c:00:1d:ae:47:2f:52:99:32:67:6d:
57:9d:24:a2:7f:e4:0f:ec:a5:4d:01:e8:cc:e7:d4:
b1:0b:fb:52:f1:25:6e:7f:58:ed:5e:30:c6:d6:7b:
da:5f:75:71:c9:8d:32:18:96:c4:4e:4f:34:ff:1e:
4a:04:64:dd:af:6b:5a:8b:16:4a:80:86:86:d6:65:
94:6f:41:2a:d3:2f:51:e4:19:48:a5:a1:8b:cc:80:
b1:64:c6:ee:12:0b:2e:55:3e:a1:e7:fe:26:68:d9:
5f:b5:30:cf:79:77:ad:cd:7c:e8:d1:41:16:7d:c3:
11:a2:f5:3a:53:b8:06:c7:39:ee:ed:d2:a1:b9:2f:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D4:E6:58:E0:E0:47:39:4F:F3:8E:88:59:61:2C:5A:69:5A:46:EC
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:34:ea:4e:9a:92:4a:f9:9c:b5:b3:85:88:b6:09:2d:b6:84:
b3:fb:2e:14:e5:2d:e5:9b:aa:cd:70:34:78:c3:bc:45:9c:54:
4a:59:ad:1d:0f:b1:72:23:63:74:6a:f7:12:68:7d:79:a1:92:
57:3e:36:ab:28:d6:a6:75:18:04:6e:6c:81:5c:01:e4:9a:0f:
0b:3f:b2:f3:0e:29:e1:a9:59:71:a1:b3:1b:93:21:2d:1e:c1:
c0:4c:1b:95:af:94:3c:3c:c6:51:66:10:4d:3c:ae:74:8a:ac:
4c:7b:4d:dc:86:b3:74:28:4d:f3:fd:b0:2b:57:1c:af:80:1b:
ae:8d:e0:8d:47:cd:86:e7:6e:9a:7a:ce:4e:01:d6:2a:f5:f5:
16:c9:ec:b2:d6:6a:ef:ba:af:c0:ba:4e:d3:ad:45:8c:f1:ee:
45:9a:21:29:6e:cb:90:6c:c2:db:e2:43:a0:76:97:7b:5e:ee:
40:f9:ef:8d:22:0d:bf:ff:3f:62:aa:b7:88:36:32:78:8c:33:
57:94:00:c2:e2:e3:be:4a:66:67:ae:cc:1d:e0:1e:99:cc:f9:
4d:ab:a6:7f:67:f3:5f:a6:46:b8:75:bb:d3:d3:7b:df:34:75:
82:0e:24:39:72:e4:59:7c:ce:04:3c:a6:d8:ed:4d:6d:f2:32:
27:0d:26:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:26:53 2026 by rpki-client