Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: DlI/sfdgB4YlVDIlr+SYZ8sniylHaV6N7jAysahxsjA=
Subject key identifier: B4:F3:AB:3A:E0:53:CE:A3:8F:C9:38:A2:46:AB:65:89:D2:F3:71:F9
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 019F91DA900712DF921F9BC579F85A20ED0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 0D34
Signing time: Fri 24 Jul 2026 02:00:47 +0000
Manifest this update: Fri 24 Jul 2026 02:00:47 +0000
Manifest next update: Sat 25 Jul 2026 02:00:47 +0000
Files and hashes: 1: OvbRlSnTXlATqx6AnWYr1toDU7w.roa (hash: Q7J38waQ9GMMd+3BefTKWI7xIc5v9QQp9c12zI1W6yo=)
2: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: mqYSHALdlB5UoiiAXrIXWZSpYDt3VYE8OydW5PDroLY=)
3: ka4LXP3r8o1mdLFuGzD128vQb8c.roa (hash: b2UoUARxm+G737EGkLibfrOXAzwN80OkLpiAV/fDR/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:90:07:12:df:92:1f:9b:c5:79:f8:5a:20:ed:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Jul 24 02:00:47 2026 GMT
Not After : Jul 25 02:00:47 2026 GMT
Subject: CN=b4f3ab3ae053cea38fc938a246ab6589d2f371f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:cd:1f:c1:fd:7a:19:e7:4f:92:00:3f:92:
46:2c:b9:11:00:d4:58:d4:63:bc:7f:0f:3e:e3:11:
13:53:3f:56:ea:6b:eb:ef:a2:03:0a:ab:22:de:77:
f6:41:71:32:08:2b:e3:5f:5d:7e:fa:fc:5e:bf:f2:
f2:4e:fd:b9:df:e2:e7:88:f2:fe:3d:6c:62:31:cb:
63:f6:b7:ac:e8:e4:e2:5c:ce:b8:bb:74:b5:76:08:
4d:43:89:a4:1e:83:bf:07:7a:dc:30:90:99:62:13:
1a:ea:67:78:61:c6:6f:b6:d9:91:87:a3:52:71:ca:
bd:f9:99:12:3b:ec:1e:8f:53:e6:94:a0:ff:86:56:
4d:07:00:99:ed:20:2b:2c:fc:e3:ca:34:0d:14:f7:
66:55:1e:aa:c5:6a:0d:21:25:63:f4:d4:41:38:df:
ce:67:ee:cd:17:5b:ad:f2:1f:49:b4:a2:88:a5:56:
4e:46:cc:a5:64:3c:25:ce:ef:f5:53:d4:12:70:06:
4f:cb:fc:43:e3:af:dd:9e:9d:5e:6b:3f:c4:cb:bf:
3d:38:06:cc:ef:e6:e0:d7:68:94:75:3b:65:3b:0d:
ad:15:fc:c8:f7:4b:26:dc:68:06:0d:44:25:54:e2:
c1:77:d8:2e:26:95:39:ed:a6:63:f0:f0:84:65:6a:
d9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F3:AB:3A:E0:53:CE:A3:8F:C9:38:A2:46:AB:65:89:D2:F3:71:F9
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7f:67:11:cb:ca:6f:37:79:5b:aa:5d:df:66:d5:55:67:03:
1a:7e:b1:6d:a1:9f:4d:42:74:56:45:e1:f4:2f:0c:eb:30:b0:
fd:4e:4b:4b:d3:54:7e:82:ce:3d:77:a0:1b:99:5a:71:e5:13:
a7:41:c9:d0:3d:3b:56:39:e5:d0:9e:35:da:9b:4c:48:a3:0c:
97:18:e1:41:b1:24:d6:fb:6e:95:8c:60:61:71:a8:8d:85:9d:
8f:ab:71:52:e9:2b:bf:60:f0:06:71:ca:46:7e:eb:64:38:3b:
72:e4:eb:4e:94:41:91:43:f5:bb:a0:2d:3a:07:b8:97:ed:0a:
1a:f6:44:2f:13:03:30:5c:4c:6d:60:56:eb:77:b6:f1:8c:e3:
e7:3d:c7:c1:6a:7e:cd:15:16:0e:51:ee:7f:10:d9:90:86:a4:
60:94:8d:46:08:45:4c:9c:a0:93:55:44:d4:16:0e:03:51:f7:
4c:66:b5:39:5f:c1:e8:b4:41:ec:0a:81:a2:19:61:84:f8:0b:
28:62:4a:06:7e:30:ea:d0:b9:61:7d:f8:03:32:92:14:a8:bc:
eb:ca:38:d6:c8:46:fb:24:17:99:d5:e8:ad:34:7a:9b:27:17:
e2:50:31:42:58:e6:eb:0e:db:ee:bd:5b:23:61:c9:20:07:54:
e6:77:e8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:56:31 2026 by rpki-client