Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
File: XlFUwaEL4eJaptT4rvpGrTH5uW4.mft (raw, json)
Hash identifier: jE5aQu6bzBkst6gy9Gw44cu5goOwbzicFLW4shVyzac=
Subject key identifier: 60:7C:DB:BF:1B:F4:22:F1:52:3F:E7:6B:ED:18:74:79:F5:F3:78:B5
Authority key identifier: 5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
Certificate issuer: /CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Certificate serial: 019FA82B457C7D7D08CFD518B9B3E401C70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
Manifest number: 01A3
Signing time: Tue 28 Jul 2026 10:00:35 +0000
Manifest this update: Tue 28 Jul 2026 10:00:35 +0000
Manifest next update: Wed 29 Jul 2026 10:00:35 +0000
Files and hashes: 1: XlFUwaEL4eJaptT4rvpGrTH5uW4.crl (hash: 1+SudA/Z+SCdNndDh/3zcYkjbcMn3MMJBNNQt9d0FJs=)
2: y9CLGthskm4bnZl6iRpadOOvcw0.asa (hash: 4oKFMMI1txxJcbOTwatF9YPUQxB0wLl2gg3DiiRkr5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:45:7c:7d:7d:08:cf:d5:18:b9:b3:e4:01:c7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Validity
Not Before: Jul 28 10:00:35 2026 GMT
Not After : Jul 29 10:00:35 2026 GMT
Subject: CN=607cdbbf1bf422f1523fe76bed187479f5f378b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:e8:0b:50:ab:f4:31:c6:00:86:64:5d:77:
98:cf:b1:f1:09:57:78:22:42:a9:43:0b:0a:56:d5:
fd:e7:58:73:33:1d:78:aa:4e:1f:cf:02:fc:62:94:
10:fe:d5:b7:3a:58:a0:37:2f:4e:15:70:21:60:c4:
89:af:6c:e6:ad:65:08:79:7b:92:c3:97:2e:cf:42:
a4:82:27:59:9d:96:2e:4a:89:b8:86:5f:96:04:16:
e3:c0:bd:bd:ad:99:0d:95:60:4a:6f:a6:55:44:cb:
77:89:29:e9:e0:4c:34:67:e0:55:e1:d4:b4:3c:66:
80:8d:04:b2:ce:ab:ed:46:15:c7:19:72:42:81:90:
6d:99:11:f9:d6:f9:5b:df:2f:ed:8f:c7:8c:8a:50:
e0:c3:2d:8a:4a:9c:2e:5a:b4:5e:bd:ec:e0:22:c2:
2d:8b:6a:fa:ad:3f:6f:0a:4a:54:27:35:3a:18:d1:
b9:f1:af:c8:98:d5:9f:ea:b3:33:4f:80:6e:10:ed:
7d:bc:f2:01:8b:ae:3e:53:90:c1:ba:0a:7d:74:f8:
a1:f1:5b:2b:fa:67:c7:38:35:f4:b0:77:e8:ac:08:
09:0b:fb:53:16:45:9a:d3:db:69:1c:d8:0a:0c:e9:
f7:40:cb:92:11:6b:ab:60:97:63:1c:6c:db:67:ee:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7C:DB:BF:1B:F4:22:F1:52:3F:E7:6B:ED:18:74:79:F5:F3:78:B5
X509v3 Authority Key Identifier:
keyid:5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:15:df:2a:00:d5:b7:af:8f:42:c5:a7:23:06:07:06:78:1d:
41:39:e1:4d:8b:b2:58:b9:f7:0a:29:24:15:68:41:72:b4:76:
c8:85:cc:75:3c:4a:82:03:e1:a4:73:2e:d0:42:0e:7b:ef:0c:
b8:d6:62:ac:69:42:ff:03:c6:a5:f7:8b:4d:8f:e1:1f:1f:8c:
e8:e5:0c:70:bd:53:28:4a:a8:c3:d5:a1:65:a1:a4:77:5a:22:
45:e3:05:67:9f:43:4e:be:fe:96:10:db:4a:83:7b:96:51:76:
a1:d0:89:33:15:b9:12:11:53:11:e3:e8:11:89:89:54:8c:51:
4b:94:73:4b:19:39:95:74:60:e0:ea:35:fb:38:55:86:95:c8:
f7:25:fc:d6:e7:d3:9b:c3:25:90:d7:98:cd:10:07:f5:20:4c:
de:32:54:ea:a9:3c:3f:74:b2:e9:44:65:79:7a:2c:e4:b0:46:
24:4f:0a:69:06:e5:c2:3c:b9:0c:26:dd:c3:f8:a2:d4:be:80:
d0:1e:10:42:11:60:b5:ed:82:86:05:ab:24:53:9e:33:80:58:
f6:47:ba:2d:eb:f0:60:d0:86:27:89:76:c2:46:d6:d7:d9:6a:
b7:98:a4:bf:49:24:46:8b:cb:35:85:dc:da:fe:5d:c9:03:41:
0e:8e:d9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:46:33 2026 by rpki-client