Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier: LfLwfoSGdxcgGu1MC0N4k8vEwTdB8D3AsDjfhPVQIzY=
Subject key identifier: 8F:24:4A:8A:F7:4B:09:65:AC:D5:D3:49:1B:B6:1D:E0:DD:0B:12:DB
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 019FA862692F74A41B75F1CE55488A8082B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number: 11A3
Signing time: Tue 28 Jul 2026 11:00:49 +0000
Manifest this update: Tue 28 Jul 2026 11:00:49 +0000
Manifest next update: Wed 29 Jul 2026 11:00:49 +0000
Files and hashes: 1: 3iYvgJ_eTlUQ-O3G1juF5EdX47M.roa (hash: cQV4nw2YNAHZleBjiJhNysmR6KlbphemL85k3lR/q4I=)
2: IRKwCUFzai38fr65-FRH_xYS0jI.roa (hash: oO+4buqTDLcCJZOc7fvRD7YLk4AQs3LNbZe5FzwGorY=)
3: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: y2dDcYc1nyBNkqOvM5svlkihFyfUjuNFAnrspusR9M0=)
4: egWOQdMCICFVY-fSqkSUyufqt9w.asa (hash: KLL7Z4S+Cwpn2TeUDxPx/ngJ0cRsd9rXvcGeQB6iLDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:69:2f:74:a4:1b:75:f1:ce:55:48:8a:80:82:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Jul 28 11:00:49 2026 GMT
Not After : Jul 29 11:00:49 2026 GMT
Subject: CN=8f244a8af74b0965acd5d3491bb61de0dd0b12db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:6a:6d:93:df:0f:d0:08:02:a2:09:63:29:
43:5b:3d:7e:b0:ff:0f:bf:01:d5:06:fd:52:ca:62:
ee:7d:61:dd:40:77:de:59:c6:79:a2:e9:4f:b1:9f:
c1:86:7f:38:84:12:1c:e4:d2:50:ea:88:d2:d5:65:
2c:c6:43:d9:30:6f:d2:9b:80:61:1a:d8:7b:df:f9:
13:83:58:b8:ad:54:02:ef:23:9e:76:48:47:7f:d6:
96:37:8b:04:e2:b8:9f:bd:d0:be:16:93:98:7e:e0:
a5:f4:5c:9a:61:cd:18:e8:4e:75:6b:d9:52:6e:98:
23:a4:a3:1a:24:e8:0d:76:a4:0b:69:6c:c6:2a:1b:
9c:9d:bf:fd:cf:dc:bc:e8:b5:4b:50:2b:84:2f:ca:
43:75:32:5d:6b:4b:d9:30:27:7b:c8:cc:af:e9:12:
af:cf:9d:e8:d4:a6:52:92:f1:d9:12:96:6c:5a:50:
4d:29:b2:22:84:6c:d5:65:b2:39:b4:ca:a2:16:a4:
ea:7d:1e:d0:42:66:33:43:c3:11:a5:48:c8:00:59:
1d:3b:14:15:10:62:68:c9:4c:c5:04:26:c2:be:b9:
63:38:09:e9:3c:e8:2d:ba:bb:52:a9:42:97:96:8d:
44:29:e0:19:30:a3:c2:1a:64:70:a9:b8:92:70:9c:
90:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:24:4A:8A:F7:4B:09:65:AC:D5:D3:49:1B:B6:1D:E0:DD:0B:12:DB
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:fa:ef:33:07:62:58:f0:a0:11:43:0e:e7:12:e5:9e:24:23:
cd:a3:6a:8d:db:96:78:15:b1:37:f5:6f:0d:1e:2b:db:2e:db:
9b:84:37:52:13:e8:7b:54:20:c7:26:e2:b8:e8:09:2a:88:de:
19:fd:82:40:66:b8:5f:b1:94:88:a5:72:98:9b:0f:28:87:1d:
cf:99:4c:a3:cd:fc:9b:5e:9e:b4:6c:c0:8e:92:e2:d1:ba:ce:
40:3f:7f:6c:9b:6f:71:6b:02:e3:a9:dc:de:73:ba:67:e1:af:
32:20:1c:fe:c7:5b:0c:ed:e4:87:af:c9:8a:8d:ab:17:4f:c6:
c7:04:b4:3c:f2:33:fb:05:48:67:2e:c3:4c:4c:69:a8:ac:24:
96:87:26:b2:13:fc:a4:f3:2e:c8:cc:08:64:61:71:1d:40:16:
e2:07:7e:38:22:d9:2c:bc:b4:aa:86:9b:76:fe:80:7e:cc:3b:
34:e5:bd:e8:17:7f:09:9d:17:ee:65:91:e4:6e:fb:2f:ac:98:
1f:2a:fa:96:60:b2:e4:73:32:4e:a7:9a:07:fb:b3:63:41:64:
c2:23:a1:54:f3:69:e9:59:5b:18:89:c7:f8:4c:1e:b6:bd:fe:
83:ab:d2:25:95:93:00:73:9b:71:21:83:8d:82:f1:d6:f3:03:
17:ce:9a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:50 2026 by rpki-client