Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: bWq58+HH1p53uM8rO892z9TfihsQSosM/SJv4KONXZk=
Subject key identifier: 3F:F2:98:62:D0:CC:69:96:F1:23:C2:2D:CE:CA:7D:4F:8C:A1:9E:7D
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 019E1D23031DB37F0B3FB6800BBC283856EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 0C73
Signing time: Tue 12 May 2026 17:01:34 +0000
Manifest this update: Tue 12 May 2026 17:01:34 +0000
Manifest next update: Wed 13 May 2026 17:01:34 +0000
Files and hashes: 1: OvbRlSnTXlATqx6AnWYr1toDU7w.roa (hash: Q7J38waQ9GMMd+3BefTKWI7xIc5v9QQp9c12zI1W6yo=)
2: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: xfJqlGEGG9T6j6aEqlsQ6ZdUS/3yqKQhJuXI+DoPF24=)
3: ka4LXP3r8o1mdLFuGzD128vQb8c.roa (hash: b2UoUARxm+G737EGkLibfrOXAzwN80OkLpiAV/fDR/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:03:1d:b3:7f:0b:3f:b6:80:0b:bc:28:38:56:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: May 12 17:01:34 2026 GMT
Not After : May 13 17:01:34 2026 GMT
Subject: CN=3ff29862d0cc6996f123c22dceca7d4f8ca19e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:52:15:a4:16:4f:40:46:f5:b7:1e:7d:cf:
33:29:0e:19:ba:92:bc:eb:71:cb:02:c7:da:fc:75:
e3:06:f4:43:eb:e7:f4:9a:9c:6e:ae:0c:f1:61:de:
88:dc:da:81:a7:11:b3:4c:75:10:9e:dd:e5:d8:3a:
69:fe:fb:f2:5a:3f:e7:33:fc:e4:7e:86:43:2b:a5:
69:a5:90:78:69:96:e4:28:4d:c4:ab:1e:45:4d:d5:
19:a7:70:9a:2a:03:36:3d:1f:45:05:fc:b2:03:1f:
6c:c6:e3:aa:bb:9c:1a:3e:5b:3a:f1:d8:bb:77:b8:
d4:90:20:21:9b:fa:c5:19:bd:41:e7:7a:52:2a:93:
76:f3:44:15:0f:e0:63:d9:d5:17:30:01:f9:17:42:
d1:19:97:14:df:3e:c5:fc:a8:70:6a:cb:e5:68:be:
ab:3e:1c:76:b2:f2:02:af:8d:f5:78:af:03:69:13:
a7:3d:f0:29:e1:83:4b:68:d0:e4:0c:53:d7:51:0e:
6a:b4:75:d6:08:60:e2:3a:81:41:b9:a1:1f:b3:e9:
79:e8:1e:0d:8a:c6:10:b3:ee:17:f8:7b:6e:82:d5:
bf:a5:11:04:b0:49:57:b8:8e:46:1c:63:a1:11:6a:
26:00:82:9a:4f:40:ab:c4:4c:a8:84:c7:de:8e:14:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F2:98:62:D0:CC:69:96:F1:23:C2:2D:CE:CA:7D:4F:8C:A1:9E:7D
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b2:05:24:d1:13:df:70:10:7e:7b:7d:86:a6:fc:aa:50:86:
67:ac:25:ba:f9:8e:bc:f5:a9:fc:db:a6:35:67:93:4e:04:45:
0c:da:82:2d:d3:39:4d:a7:20:51:3d:23:fa:be:a3:8e:b1:58:
c2:eb:25:37:a7:47:8e:a2:94:2e:64:d3:fe:b8:0b:8e:79:76:
c4:f2:46:8f:49:04:8b:af:f7:49:62:23:b8:f6:2f:80:ff:4f:
c7:bb:45:02:42:03:df:ae:2f:de:ce:ea:be:ef:1f:67:19:20:
d6:f1:1f:d9:15:04:13:6e:9c:a9:46:28:1a:f7:23:43:ae:6c:
5a:f5:fb:c7:99:a7:99:74:99:89:85:78:9e:60:f0:18:82:84:
f2:d4:e4:a2:65:7c:42:d6:73:cd:68:94:7f:2f:1f:06:b9:b2:
ce:0a:44:5f:9f:f3:03:3d:8a:69:33:e6:f7:28:00:36:33:b8:
31:d2:16:9b:bc:d1:a6:bf:d8:b8:ed:9d:bf:c5:21:63:a3:46:
ad:3c:a5:ba:1c:9c:68:57:1b:2d:c6:7a:bb:41:e0:43:0a:ed:
11:ea:8e:da:97:e1:91:1f:27:d5:cc:74:61:09:0e:5e:cb:5b:
7a:69:42:e8:4b:cc:8b:d3:1a:88:d8:01:99:4c:98:39:25:28:
86:21:55:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:49:30 2026 by rpki-client