Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
File: Xhd799BDVEHRrbFIoizv4dbcwPs.mft (raw, json)
Hash identifier: FNGdrfRYWqKjfkrjtbqhSTV7B/k/YqWrFh3sqGJsB5o=
Subject key identifier: 0B:D5:D4:4C:D3:F5:72:33:5F:49:E5:5A:BC:40:A6:01:E5:39:75:F4
Authority key identifier: 5E:17:7B:F7:D0:43:54:41:D1:AD:B1:48:A2:2C:EF:E1:D6:DC:C0:FB
Certificate issuer: /CN=5e177bf7d0435441d1adb148a22cefe1d6dcc0fb
Certificate serial: 019F8EA2270798F76624112EC64805D590F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
Manifest number: F7
Signing time: Thu 23 Jul 2026 11:00:19 +0000
Manifest this update: Thu 23 Jul 2026 11:00:19 +0000
Manifest next update: Fri 24 Jul 2026 11:00:19 +0000
Files and hashes: 1: TYV20I1tmXmrFyD5hD9FE4IPKWU.roa (hash: cuvSEP8hQjrQh4a+NJD6WQS8i4OZ31Rtmx8MtCDraCQ=)
2: Xhd799BDVEHRrbFIoizv4dbcwPs.crl (hash: AzVHP1Rc3HOjIbFxsduMednhGUlfQKhe+Td+mQ25q9A=)
3: s8rf2tML831KhZ_f-0fAXEJkgew.asa (hash: vKjVcHxuUGRJ3DxPFJJe7VWqTLEgv9kq3d3TeM8pLOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:27:07:98:f7:66:24:11:2e:c6:48:05:d5:90:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e177bf7d0435441d1adb148a22cefe1d6dcc0fb
Validity
Not Before: Jul 23 11:00:19 2026 GMT
Not After : Jul 24 11:00:19 2026 GMT
Subject: CN=0bd5d44cd3f572335f49e55abc40a601e53975f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:2b:35:bd:5f:fb:8b:2e:14:ba:f1:7d:c1:
26:a5:f3:46:6f:88:47:79:d9:ba:47:98:99:60:5b:
23:ec:63:47:f9:36:a2:9c:a1:c3:79:f5:40:3b:9e:
9b:cc:b0:57:03:5e:3e:2b:36:50:63:86:23:b9:fe:
b1:79:0c:ee:6c:7a:4d:eb:30:2d:74:03:15:de:af:
6e:9c:40:45:17:ae:b5:54:1b:17:b3:a1:a2:88:20:
8b:58:10:bf:d6:e9:62:43:0b:50:fc:60:59:0a:fb:
b3:ae:42:65:3d:14:5f:e2:5c:f4:41:75:2e:a5:d4:
a6:1b:67:30:0b:75:67:ab:68:86:cd:09:49:6b:94:
35:05:7e:bd:0f:43:ca:ca:c2:77:b3:3b:2c:55:e2:
40:40:33:f1:ca:11:6c:1b:96:2c:e0:27:be:48:60:
4b:48:46:93:4d:d4:de:03:3e:3f:7a:45:46:5c:fd:
38:51:c7:23:a5:5d:74:3e:13:c1:7a:49:84:9f:7e:
0b:50:0e:7e:d6:a4:84:03:0f:b8:16:d9:89:d9:26:
44:3e:e0:cf:ce:09:07:cf:5c:eb:14:2f:7b:15:34:
c1:55:c1:3b:ff:dd:d2:db:91:11:d4:95:81:04:81:
6e:e0:d4:de:9c:a4:2e:ac:e3:70:e6:c2:b8:57:3b:
3f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D5:D4:4C:D3:F5:72:33:5F:49:E5:5A:BC:40:A6:01:E5:39:75:F4
X509v3 Authority Key Identifier:
keyid:5E:17:7B:F7:D0:43:54:41:D1:AD:B1:48:A2:2C:EF:E1:D6:DC:C0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:23:63:ff:a1:7c:d8:28:cc:0f:7b:3d:a3:17:17:94:56:4a:
c8:82:31:55:e2:b4:37:9b:7a:30:67:5f:7b:a2:b9:8d:e8:5e:
30:15:4e:ce:39:81:c5:63:79:3d:5e:8a:1b:8b:da:54:5f:ee:
4e:6a:79:00:20:f6:f0:0c:c5:d2:0d:6b:92:64:0a:16:8f:93:
52:83:c3:95:87:85:85:c2:d7:0a:3f:e6:df:85:25:cc:5c:e0:
e6:86:91:22:a1:e7:94:6a:01:b8:ae:00:6e:3e:02:88:8d:c0:
12:2b:a3:d1:9c:db:d7:e2:39:1e:b0:c8:4f:b4:12:70:b1:27:
ae:a5:ce:80:69:d5:92:a0:5d:02:6c:11:7b:2a:82:55:37:6f:
c1:71:15:97:52:8d:90:37:ff:12:65:b3:71:2d:01:b3:84:d4:
97:95:6e:b7:64:8f:1e:a7:b1:04:1c:ea:63:6c:e5:b6:da:9e:
34:c5:22:1d:a9:62:fd:6a:58:9c:82:97:ab:3a:6a:28:53:49:
06:32:d9:3d:67:a3:2d:e8:76:0e:6c:87:eb:5d:57:3d:40:f2:
cc:4c:91:15:e6:8b:40:f7:d3:43:58:2f:db:47:de:8c:bf:3b:
f3:2c:1a:79:f0:34:66:60:a5:b1:76:fe:de:3b:4d:a4:2b:75:
cb:16:e4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:13:12 2026 by rpki-client