Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
File: X7qw05-2l5_k09JIOgG908k77O8.mft (raw, json)
Hash identifier: KiE24ikmlILbPLdFoAM59nZCAz51KNRfETssHrzlGZk=
Subject key identifier: 4E:CC:5D:9A:F3:1D:E3:2D:A9:9B:8B:A5:0C:F9:DC:2F:04:5F:E8:73
Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
Certificate issuer: /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Certificate serial: 019F90C77C82B2D84C726417AEAF2261BD57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
Manifest number: 0ED6
Signing time: Thu 23 Jul 2026 21:00:20 +0000
Manifest this update: Thu 23 Jul 2026 21:00:20 +0000
Manifest next update: Fri 24 Jul 2026 21:00:20 +0000
Files and hashes: 1: Fnr8UBCRPeUQhRVFOAHVctCKPfo.roa (hash: PgOyYUmMG9zgljOcOgtP5byxd2cN3HfKRRt85MDBTwk=)
2: X7qw05-2l5_k09JIOgG908k77O8.crl (hash: cjHeUYDModD+NY53vUrHM4koR4V7645k6DHpy6LtsvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:7c:82:b2:d8:4c:72:64:17:ae:af:22:61:bd:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Validity
Not Before: Jul 23 21:00:20 2026 GMT
Not After : Jul 24 21:00:20 2026 GMT
Subject: CN=4ecc5d9af31de32da99b8ba50cf9dc2f045fe873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:1e:ae:e4:81:d2:0f:86:64:1b:5a:89:c9:
4e:50:7d:7d:4f:f9:ad:51:9c:c6:28:de:a6:23:7b:
80:6d:a8:63:74:fd:da:67:05:a6:79:e9:88:7a:00:
99:64:48:e0:98:a5:0f:f0:d9:40:cd:27:ca:29:a8:
4c:06:6e:35:40:8c:df:5b:38:57:6e:d8:cb:8e:0a:
36:23:ce:c8:f6:d8:c3:0a:81:8b:c0:21:21:a9:3a:
07:da:8c:94:3a:6b:1b:5b:47:a9:18:f9:47:be:83:
74:cc:af:53:bf:9a:c8:b4:1c:5d:d6:27:d5:61:c8:
25:50:35:15:4a:e0:b6:4c:b5:e5:72:3e:e2:cd:4f:
26:94:e4:57:4b:14:bf:d6:bc:3a:e1:48:d7:a7:28:
9b:e9:4d:5c:41:b2:27:fc:c4:aa:30:a3:ab:c4:7f:
6a:87:49:0f:e7:71:2b:11:64:85:04:dd:b6:55:ea:
41:dc:e5:ee:0d:54:fc:ae:a7:55:57:d6:fb:4a:59:
c3:77:c4:ff:22:81:45:64:11:5a:a9:b9:99:f5:02:
d8:41:d1:a1:b5:20:34:0b:58:f7:e6:18:dc:34:4c:
a0:c8:e7:44:2a:68:ca:45:5c:2b:27:94:57:08:59:
de:45:19:03:7f:c4:77:28:25:db:d4:a6:98:05:d8:
b6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CC:5D:9A:F3:1D:E3:2D:A9:9B:8B:A5:0C:F9:DC:2F:04:5F:E8:73
X509v3 Authority Key Identifier:
keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:18:ba:25:1d:45:df:82:94:eb:6e:55:1a:ae:3d:2c:1b:de:
d2:5d:56:e0:bc:8f:d6:be:47:ac:3d:ff:82:2a:9f:d3:fb:2e:
b7:9b:22:2c:07:0d:49:a5:e4:c2:53:02:97:55:c8:8a:c6:95:
ec:fa:43:21:ad:f1:7a:99:fa:a9:50:53:9d:bc:5b:d7:4b:8c:
be:4d:e2:1a:7e:49:84:4d:35:8a:bf:14:90:9d:d2:0e:c4:21:
0a:ae:4e:c7:87:2f:d2:21:d5:52:d9:a1:58:00:64:a1:25:e9:
84:e9:98:27:07:c1:d2:97:b0:ff:e8:fd:1a:1d:3c:db:e5:76:
b3:33:a3:72:1c:73:7e:84:60:8e:3b:6b:39:26:c9:a1:2d:4c:
81:93:71:9c:f7:33:16:5a:3c:0a:3f:63:86:02:15:39:52:af:
fe:71:22:b3:97:b5:ee:6f:8e:4e:39:c2:1c:3a:af:05:95:da:
a9:2b:dd:ce:8a:c1:a5:e4:7f:72:04:9d:f5:c6:d6:a7:98:5a:
bf:e2:6d:23:1c:b4:28:36:d5:b5:0e:b4:cd:59:0a:03:3c:be:
c6:c3:f6:f1:79:d7:9c:a6:f2:48:16:01:48:7b:25:08:cf:8e:
d1:9e:17:a8:9b:2f:ef:27:b1:5c:2b:e7:29:62:e3:bd:07:d9:
da:d0:1a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:08:00 2026 by rpki-client