Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: kKDfV29y9eubyJzAyFXmnJGSYrH9svCKwZsMk8Up7JA=
Subject key identifier: 6B:45:3F:BB:32:E6:8F:D5:C1:45:38:61:40:70:2D:38:27:C6:A3:D1
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 019F8F7F10E02A117E0011CCA05F5DF8ECA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 15:01:36 +0000
Manifest this update: Thu 23 Jul 2026 15:01:36 +0000
Manifest next update: Fri 24 Jul 2026 15:01:36 +0000
Files and hashes: 1: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: FMFljRgcjdurx1kwybQNsPLyb5upV0XGja6prI2YwE4=)
2: awXRcerSAP4jrgOUBQ68Ss0j_JE.asa (hash: 7H/s8bfQHFW6k1q0+FHWfKFzwz0TBvvLD09+Qjh3Rf8=)
3: mde2iraZFBwTbp97_tvjs2IMwjU.roa (hash: Q0iRTXsb5myu//hBM4zbKFOJNKJsTWjqhNvukcS55wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:10:e0:2a:11:7e:00:11:cc:a0:5f:5d:f8:ec:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Jul 23 15:01:36 2026 GMT
Not After : Jul 24 15:01:36 2026 GMT
Subject: CN=6b453fbb32e68fd5c145386140702d3827c6a3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:90:55:bc:cc:ef:42:e0:d4:2e:dd:a0:68:
a2:e8:62:a8:06:dd:ba:94:cb:56:a2:64:eb:02:dd:
46:2a:11:fb:66:c3:46:b1:ab:09:78:62:c2:ef:34:
73:21:9c:ed:81:1e:33:1d:4f:1d:57:d8:02:2e:57:
36:0c:c5:df:32:9a:9c:05:f3:c8:fd:c3:02:21:8a:
f5:f2:b1:97:14:53:28:e3:35:b7:38:9d:7d:4c:de:
52:ad:30:fe:92:6b:32:46:3f:f0:14:de:dd:b9:1e:
77:f3:e8:b9:58:3f:c9:ce:c5:33:60:fd:62:75:18:
7f:74:0b:0d:88:32:69:65:c8:8c:e2:b2:12:5c:e1:
65:5c:70:5a:f6:6f:9e:bd:3f:f1:4e:bf:d5:d3:a2:
2a:c7:24:f7:ee:25:d9:1f:05:bb:49:5e:2e:9e:9f:
66:09:20:21:85:48:9a:f2:47:76:e7:db:56:a3:9e:
dd:20:a0:6a:66:ba:fd:c8:bd:6d:a2:47:23:35:be:
37:c0:7b:2e:63:52:8d:eb:a5:85:da:01:6a:fd:d4:
52:97:3e:43:28:cb:1f:30:e7:42:ad:38:ee:d7:e0:
26:f4:c3:80:28:a8:1d:d5:16:d5:53:af:84:bd:37:
91:dd:bc:6b:a2:de:e7:98:f3:9b:b4:5a:2b:0b:77:
06:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:45:3F:BB:32:E6:8F:D5:C1:45:38:61:40:70:2D:38:27:C6:A3:D1
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:53:26:83:44:1e:43:e1:58:2a:0a:e8:3c:17:53:89:24:c9:
6b:a8:0a:2a:da:f6:48:c4:19:17:4e:17:a9:b5:05:ac:68:e3:
6d:2f:b2:5d:a7:8e:99:3e:48:19:e5:f4:00:58:66:5b:01:dc:
83:4d:39:7b:74:ee:a4:02:56:d5:ea:bb:d9:dd:c0:ac:51:a1:
2d:fa:92:f2:fa:e9:73:b7:6d:6a:0d:3e:11:d2:b5:a3:b5:6c:
f2:7b:9e:f0:2e:e9:aa:f1:ae:bd:a6:cd:2f:5b:07:f9:19:28:
d2:91:9d:39:32:fa:38:7f:6f:91:9c:56:71:d5:ac:5d:27:8a:
53:c8:a8:01:54:dc:81:de:13:09:f0:b6:bf:30:43:11:18:74:
2e:fd:da:df:b7:ab:41:a9:40:06:8f:85:1a:ed:b3:b9:0a:20:
fb:e4:ce:39:c0:16:ec:e6:54:e7:8e:f6:e6:52:a9:87:57:b5:
7f:f1:71:21:99:60:a7:e5:b6:5b:22:79:41:e0:79:02:89:83:
0c:1f:06:c4:08:c2:f8:70:fa:c5:aa:6e:d0:27:8b:82:b7:15:
88:32:68:ad:8e:b0:ba:0e:16:7b:86:c1:72:c6:91:4e:6f:e3:
c9:20:14:71:21:76:b5:17:4c:84:2a:96:ce:24:93:fa:37:3b:
7e:fe:dd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:10 2026 by rpki-client