Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: SdxyW3lFEm1HKQOj1i6mwYnFls7ZvZbJXVGtyPkIGBE=
Subject key identifier: 31:92:6F:7F:EF:45:D2:25:19:2A:6F:69:BA:31:8A:C1:2C:34:E4:06
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 019FAABEA90D2AB91635E4C8383412232564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 10B5
Signing time: Tue 28 Jul 2026 22:00:49 +0000
Manifest this update: Tue 28 Jul 2026 22:00:49 +0000
Manifest next update: Wed 29 Jul 2026 22:00:49 +0000
Files and hashes: 1: 1-nsaGOYJDQs8nE83JBsjbwYRoPA.roa (hash: ZorqeuTKQ8BzMES+IbO5PhiAMx62C25+2z4OV8xpzBs=)
2: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: 263IAwMM9an91r+zmfFMgnsx4bzk3eYoqIv1Io0huvw=)
3: fYv6u6ZqsaaVuf2RxvvaolhNBjk.roa (hash: jVk92j+q/o1dRJaAKw+eFCSe6j9s2E6quPaItwZl0/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:a9:0d:2a:b9:16:35:e4:c8:38:34:12:23:25:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Jul 28 22:00:49 2026 GMT
Not After : Jul 29 22:00:49 2026 GMT
Subject: CN=31926f7fef45d225192a6f69ba318ac12c34e406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:78:08:da:b0:cb:62:30:81:73:34:07:2e:
be:d4:4f:24:9a:f1:cc:69:d2:8c:b4:cb:ac:94:38:
4e:ad:2e:4f:e5:c6:0f:48:70:ec:3a:6f:f0:70:1f:
c1:55:9a:27:b0:d2:a3:b8:38:a9:89:c1:30:da:ab:
54:7e:95:12:76:56:26:f1:a7:e7:9d:e8:d2:61:d6:
1e:85:07:71:c2:c9:7a:a2:fe:53:fa:a8:9b:72:f4:
0d:b0:f5:02:db:51:a9:cf:0c:51:ab:9b:18:04:80:
55:b1:ca:f7:ab:02:6e:d5:c9:e8:63:14:26:23:c5:
37:4b:d5:0f:35:36:44:4b:5e:2d:da:a3:0d:ed:9a:
0d:67:53:65:43:3d:8f:2e:b1:b0:a5:81:98:9a:7f:
46:b7:f9:a3:e0:19:2e:eb:b5:0d:90:5a:c7:7c:ea:
54:7a:d0:f9:12:f8:61:8c:e0:03:d2:b4:8e:62:dd:
65:e3:7b:f2:0d:3a:3a:44:f3:cf:47:af:00:48:64:
ba:e8:27:f7:af:72:48:b5:1a:31:c7:77:53:02:75:
34:9d:ac:46:a5:eb:13:19:87:97:86:c9:67:8d:01:
d7:97:bb:f8:20:84:c1:10:f6:df:fb:2c:7e:36:33:
29:ed:8e:25:14:2c:65:94:0d:14:0e:75:7f:0f:c3:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:92:6F:7F:EF:45:D2:25:19:2A:6F:69:BA:31:8A:C1:2C:34:E4:06
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e2:e2:14:89:65:43:1d:23:93:29:1b:cd:fa:12:d7:b8:ef:
ae:5b:31:67:ca:1a:e6:7b:23:2a:87:a1:ea:e1:61:60:50:8c:
ea:3f:7e:da:9f:77:a2:37:e4:35:55:6b:2d:63:66:ad:37:55:
97:7b:79:b0:25:91:3b:57:b3:a8:93:5a:d7:dd:b6:ea:69:0d:
a6:28:f4:d9:29:4e:52:10:1e:89:5f:f9:fe:b7:c6:da:34:12:
c1:1b:9b:d6:e3:61:2c:f6:fa:78:66:f7:4a:eb:a7:39:2c:fb:
2b:54:0e:21:42:6f:84:85:f7:5f:b9:fa:87:e1:83:ca:ff:f9:
b8:60:ce:d5:da:f5:24:72:a7:82:04:e9:bc:b1:ea:cc:d1:b7:
46:35:37:f9:cf:cb:e4:fe:09:70:63:ae:1f:c8:11:71:05:24:
f4:e2:28:e4:ce:62:02:a4:5e:af:4d:e6:bf:b3:7c:04:f0:50:
51:af:d0:14:45:89:a5:16:9d:1d:fb:dd:d7:7a:35:8b:69:1b:
76:83:35:2e:c0:08:a4:ba:f9:18:12:02:08:db:b2:1b:9c:bc:
e4:09:23:4f:a2:b2:a5:dd:70:5e:b4:89:5c:7e:b2:24:77:95:
df:f7:a2:5a:60:6c:ce:20:2e:f0:fe:10:cf:d3:d7:35:af:3a:
1c:90:78:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:36:25 2026 by rpki-client