
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json)
Hash identifier: UuPAkpB4pCkb7t1sEsX+bJQ+cOYg9OBs79nHfZZsATE=
Subject key identifier: 6B:CC:1B:80:46:01:C2:44:F0:7E:95:C3:B7:6E:7C:A7:CA:7E:79:55
Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03
Certificate serial: 019FAB2C7F38D46B7FF4FC6AD78BC046DA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
Manifest number: 05A2
Signing time: Wed 29 Jul 2026 00:00:47 +0000
Manifest this update: Wed 29 Jul 2026 00:00:47 +0000
Manifest next update: Thu 30 Jul 2026 00:00:47 +0000
Files and hashes: 1: RKz3IJpK3tLGmxT3W9hM3i7PGMs.roa (hash: RoVqVK5DIJNCCPA2hRYkxQFyuiyebRh/F8G7DU407FU=)
2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: jAT7oPc9Dtzav2xtBC+RWpsZYBHiGj9zqoSuv78aLNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:7f:38:d4:6b:7f:f4:fc:6a:d7:8b:c0:46:da:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03
Validity
Not Before: Jul 29 00:00:47 2026 GMT
Not After : Jul 30 00:00:47 2026 GMT
Subject: CN=6bcc1b804601c244f07e95c3b76e7ca7ca7e7955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ef:a2:dc:bf:71:fa:99:a8:09:47:08:d3:da:
5c:32:0e:2b:29:58:fc:a1:3e:7f:97:bb:59:45:44:
57:f9:79:3d:8c:7a:cd:f7:50:aa:c7:8b:28:a3:80:
76:ef:19:b3:c8:be:27:08:72:30:ec:47:49:45:ee:
b9:3e:68:c5:0e:2e:5e:27:0a:4a:f6:68:a7:9f:a2:
ea:7b:89:19:9d:1c:0c:2c:68:b5:b6:18:3e:42:37:
75:4f:6b:e5:53:24:59:a1:b3:2c:59:47:e6:f7:b5:
6c:98:2c:67:8c:3b:bf:2f:19:06:8b:70:d9:a5:0b:
a4:ae:a6:c2:b5:fc:72:26:b6:e6:07:3a:fc:69:df:
c7:5d:70:68:eb:7c:ed:fb:c2:7d:0d:10:47:3e:7c:
6d:60:1b:d0:18:1b:72:b4:db:d1:53:9d:76:55:ff:
eb:fa:83:e7:ad:ed:fb:39:c6:75:fc:bc:52:b2:7f:
98:2c:f0:91:41:ff:fd:e1:9d:7d:93:ca:98:39:64:
f6:60:75:6f:c0:16:9a:c2:2a:d1:ed:9b:db:83:52:
20:b0:24:af:d8:ba:2e:fa:39:69:b0:df:94:cc:e2:
a8:94:c4:b8:83:c7:8b:4d:0f:28:68:6b:1e:97:4f:
70:c1:ca:94:52:3c:45:8c:f8:fe:d2:12:f9:ff:8b:
31:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CC:1B:80:46:01:C2:44:F0:7E:95:C3:B7:6E:7C:A7:CA:7E:79:55
X509v3 Authority Key Identifier:
keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:95:25:e9:ca:cc:f6:21:6d:05:c3:98:75:7e:66:e8:ff:a8:
83:6f:31:82:c3:59:14:02:8c:27:fe:be:d5:51:63:f7:32:0e:
fc:4b:3d:77:23:11:d6:97:6e:79:0e:7c:eb:10:79:8d:4c:bc:
d3:0e:27:12:f4:4b:4d:ee:57:5e:71:28:f1:3e:27:5d:0b:ec:
d8:03:2e:6a:79:b3:f8:6b:e4:28:07:9a:31:60:0c:78:9a:78:
bf:48:53:67:b7:19:09:93:48:08:d8:8f:ea:5d:d9:f9:25:a3:
93:77:97:5e:d0:fa:e4:82:4a:88:e5:c0:2a:77:74:c1:d7:e1:
92:98:42:e9:8c:7b:14:24:f4:da:7b:a2:22:f1:b2:c9:05:a8:
4e:3e:17:e2:ca:ab:13:fe:86:28:a2:92:c2:45:a0:96:ae:51:
f1:2f:af:2f:57:10:f2:80:6b:fc:e2:68:70:71:8e:e3:74:7d:
0e:45:d1:47:c6:bf:c4:c7:be:d4:04:c3:22:ca:ab:ec:80:cd:
34:2e:b6:54:69:ec:f0:51:d1:7d:44:f4:37:bb:69:52:d1:4f:
8c:d2:b6:09:8a:00:d5:4b:fe:3f:f3:25:60:0b:c2:84:8c:c1:
b9:d0:4d:e4:96:6d:8b:cf:f1:54:e2:a3:af:ee:f5:16:d5:b5:
57:31:9e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:02 2026 by rpki-client