Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
File: XhP-KBZzV0iLUE_qxGll0U23upw.mft (raw, json)
Hash identifier: ipjSbveidcEFJ01YFmTbVvDaV3n0d5HHY4NWiLvRoug=
Subject key identifier: AE:8A:0A:A6:C5:4F:0F:A9:8D:A8:6C:4E:B5:D7:B2:40:5F:56:EF:9B
Authority key identifier: 5E:13:FE:28:16:73:57:48:8B:50:4F:EA:C4:69:65:D1:4D:B7:BA:9C
Certificate issuer: /CN=5e13fe28167357488b504feac46965d14db7ba9c
Certificate serial: 019FA89987E5603361AC387227B02E4EDF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XhP-KBZzV0iLUE_qxGll0U23upw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:01 +0000
Manifest this update: Tue 28 Jul 2026 12:01:01 +0000
Manifest next update: Wed 29 Jul 2026 12:01:01 +0000
Files and hashes: 1: OsWqV5kxvLO3zxITMBJcQ1-SzWo.roa (hash: JSe4ZxDgFulyfZ8DBgoN9opn6yDV2vfR5CfVXcGr6vA=)
2: XhP-KBZzV0iLUE_qxGll0U23upw.crl (hash: pQq5XONjRF7AtAy71CGTZHRQe2AQauLxAgnYW+q8/wY=)
3: eZbZTXWIEfvwIX9vrH3W1UJ6wb4.roa (hash: UarGyxZlxuTDN6MQKGhHWE7FjSFEv7rUD+yerIHdN7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XhP-KBZzV0iLUE_qxGll0U23upw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:87:e5:60:33:61:ac:38:72:27:b0:2e:4e:df:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e13fe28167357488b504feac46965d14db7ba9c
Validity
Not Before: Jul 28 12:01:01 2026 GMT
Not After : Jul 29 12:01:01 2026 GMT
Subject: CN=ae8a0aa6c54f0fa98da86c4eb5d7b2405f56ef9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:5e:3f:b9:24:ae:1f:1b:a3:b2:85:81:8b:
6c:3a:40:90:8e:63:c2:3f:72:b2:68:96:83:0b:ef:
e7:3b:b0:ea:6c:ff:75:8a:93:67:03:1b:fe:61:e8:
3f:7d:c6:c2:31:8b:41:df:d0:c6:dd:04:4c:89:91:
8a:8a:85:ed:8d:24:9d:83:47:8c:17:27:5d:b5:a8:
c6:d2:4b:15:5f:ff:6d:06:38:c3:e6:68:f5:e5:1f:
3e:44:c4:32:5f:ea:ae:18:27:21:87:b2:76:dd:c7:
a4:4a:63:2b:3b:b9:99:66:95:ac:03:53:ae:dc:f7:
32:d8:6c:b9:ef:0c:dd:a3:5e:61:36:41:3c:64:8f:
33:59:00:49:1a:15:e3:de:d8:0e:a6:40:a9:45:ea:
de:6d:61:8a:d3:16:06:8a:57:72:b7:3a:97:be:d4:
61:4a:0d:73:16:34:b6:98:bd:13:95:eb:20:f8:1e:
80:69:43:c5:25:c2:5e:58:b5:de:c4:be:67:cb:f0:
1e:a1:5a:ad:05:06:b6:e1:ae:89:11:cc:93:30:a3:
fb:d3:76:1f:21:11:6f:cf:41:2c:0f:17:af:c5:ef:
69:f0:72:d1:da:c1:4b:7a:7b:79:f3:de:71:5c:e1:
bf:da:a3:3d:0d:2f:3e:f2:7f:36:57:7f:1d:b1:b7:
5e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8A:0A:A6:C5:4F:0F:A9:8D:A8:6C:4E:B5:D7:B2:40:5F:56:EF:9B
X509v3 Authority Key Identifier:
keyid:5E:13:FE:28:16:73:57:48:8B:50:4F:EA:C4:69:65:D1:4D:B7:BA:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XhP-KBZzV0iLUE_qxGll0U23upw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:43:2c:e1:78:28:48:d3:b6:0f:c4:56:29:0f:0a:13:59:e8:
07:c2:d6:66:1f:8d:30:b9:ae:5c:10:ac:3c:b0:62:3d:e3:3a:
1c:9c:98:40:f5:0c:9b:0d:2a:02:25:44:4b:7a:21:75:8d:f8:
2a:0b:19:1c:f0:46:e7:43:a1:ac:fc:56:c2:d7:24:00:25:29:
af:78:32:2e:63:52:46:aa:78:f3:7c:04:3f:41:be:06:70:93:
8d:81:bb:90:9e:c2:a1:c3:28:00:f8:36:cb:01:56:9d:93:da:
ac:05:66:23:fe:7c:de:9b:a8:35:d0:25:48:90:13:0d:fa:bb:
ae:d9:0a:21:33:48:61:94:81:1f:9a:5a:78:66:fa:6f:09:56:
f0:a6:11:e4:71:b2:3a:09:d0:b3:6d:ef:d3:64:7b:2f:72:3a:
3c:0d:83:86:1a:9b:5e:c8:27:e4:7a:99:12:ee:0e:e6:fa:fe:
e1:fb:26:7a:bb:b5:10:f9:ca:63:90:12:02:c7:3e:a6:f6:f6:
0a:f3:39:8b:ac:5a:8e:01:a6:b1:ce:70:c7:f4:ef:56:26:6a:
fd:46:00:e4:5d:cf:2e:ce:ff:b5:ef:c8:28:71:56:69:9d:44:
b2:fe:67:5a:34:57:df:17:0e:36:73:7d:47:e5:12:45:a2:67:
66:5a:43:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:57 2026 by rpki-client