Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: 9r3HcGTc1KN5fndOGtY9sV7K7Vt/5IuEV6CdYWL3JY4=
Subject key identifier: 50:59:8C:B7:21:AA:93:30:F9:F5:30:9A:EF:41:DC:E2:A3:9B:E3:C0
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 019FAAF54EEAD2CDCC135B3B868EDCF5D85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0FB9
Signing time: Tue 28 Jul 2026 23:00:30 +0000
Manifest this update: Tue 28 Jul 2026 23:00:30 +0000
Manifest next update: Wed 29 Jul 2026 23:00:30 +0000
Files and hashes: 1: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: py+GUvmKiXwwhyb2VbbWptuKvAVXtGgtJGLa542xHV8=)
2: qvDZMPgKFD7gi5Q44AZYhiZ--Ig.roa (hash: cmgO04c2D3BrRGS4WvX7cY6GozgnK7NT0TwhEs+74Kg=)
3: uKoRxEv3mOldDEo6fDHAk9yg0S8.roa (hash: 4hEUcG83yfbcyvkKT/jDeEV25ZBIHXMO6CdGZ2yW5wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:4e:ea:d2:cd:cc:13:5b:3b:86:8e:dc:f5:d8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Jul 28 23:00:30 2026 GMT
Not After : Jul 29 23:00:30 2026 GMT
Subject: CN=50598cb721aa9330f9f5309aef41dce2a39be3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:b4:69:2d:3b:63:07:67:ff:07:0b:8b:eb:
80:c4:fe:6a:5c:64:91:98:e4:ba:89:c4:ab:16:ed:
32:bd:69:11:2b:a9:5b:10:6b:e6:1c:90:dc:0c:7b:
3e:10:d4:3d:da:91:ec:47:b4:b9:37:62:8a:a8:3f:
59:9d:a1:27:68:5c:56:87:52:21:15:10:11:ba:ae:
5c:8b:a7:30:ae:88:17:05:a0:a3:94:15:0d:d1:12:
58:90:59:e4:a4:2a:a5:1e:78:ff:db:27:ed:4f:2a:
81:37:8b:d6:00:62:86:ec:0b:66:f1:18:43:65:b0:
05:f1:1d:86:7b:9f:a7:2b:b2:15:62:90:1c:e7:e6:
56:52:8f:eb:9d:0f:b2:4f:bf:fe:71:1e:ca:fc:07:
67:73:b4:0d:e6:25:ab:0e:58:57:fc:da:ce:47:54:
ae:38:eb:f0:f4:7c:cc:90:46:f5:aa:d6:0a:de:da:
ed:42:a3:64:f3:b8:c3:cd:05:0e:da:0c:9d:45:5b:
2c:13:0b:a4:30:57:46:b4:6c:21:2b:b7:e9:bf:ea:
ed:c3:6d:30:b9:45:0e:97:ff:dd:be:48:be:a4:ab:
97:44:86:8a:bb:02:28:eb:6c:6b:36:54:da:13:3c:
d1:10:58:ab:77:55:a8:24:07:54:5b:21:85:06:bb:
94:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:59:8C:B7:21:AA:93:30:F9:F5:30:9A:EF:41:DC:E2:A3:9B:E3:C0
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4b:a5:1d:18:08:1b:26:e0:90:f8:de:71:73:08:ac:db:90:
b2:ca:86:c6:7a:ef:f5:7d:5e:f8:8a:76:ba:e5:4d:65:b2:2d:
2f:32:a6:de:65:48:61:48:29:c5:90:09:81:4f:ea:e7:db:8b:
1d:5e:c8:b9:6c:9e:18:3a:ef:6f:ab:ed:7e:e1:8c:a9:1c:1e:
e0:af:9b:6c:4b:b2:27:7c:75:d9:bd:28:2d:6d:1e:b1:27:09:
40:e3:bc:fd:5a:8a:d7:d0:fe:4a:ac:58:5f:89:2e:78:ba:b3:
f6:6e:5b:44:61:fd:da:fb:9e:92:87:fe:28:01:a3:ee:26:db:
a3:8f:cb:78:9a:55:cd:1e:6a:2b:ba:34:be:18:5c:ce:5d:e8:
12:f0:18:b1:3d:18:ff:1a:73:5a:ff:b4:eb:5f:55:13:65:4e:
e4:6e:48:ae:3f:60:77:30:de:0f:ae:7f:02:d3:41:66:c9:91:
ed:ca:92:e8:3a:98:82:cf:c4:c8:e0:27:de:43:39:ba:26:09:
fa:60:43:57:89:54:1e:a3:62:6a:ac:d4:71:f8:cb:66:84:64:
8c:71:00:66:77:69:f5:d2:d4:69:8a:bb:98:55:f2:84:13:43:
33:e0:bf:bf:56:80:eb:3d:ac:bb:67:49:0c:5b:d3:b4:ee:20:
11:b0:67:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:48:02 2026 by rpki-client