Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: 42l3l7UpndEni2TWoV/1qJqKSmYMCTkSUDYw8gOJyuo=
Subject key identifier: 6F:48:11:D6:BA:1D:5D:DB:A3:CC:DD:C9:DF:A0:E5:AA:72:36:25:23
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 019F93C8B653E334832BF438218A43BA6B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 0CEA
Signing time: Fri 24 Jul 2026 11:00:32 +0000
Manifest this update: Fri 24 Jul 2026 11:00:32 +0000
Manifest next update: Sat 25 Jul 2026 11:00:32 +0000
Files and hashes: 1: 6KBg76wO49ZTNeUZLEQvdfuAEnc.roa (hash: C78F4tRrcjaUZ0tkRMKZ6DDDl8hmlq6D1hHs1hdNls0=)
2: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: DAhhEDFXtwqgoy9YtK0nJetOZ/4RCrTPcFtOVJsK5NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:b6:53:e3:34:83:2b:f4:38:21:8a:43:ba:6b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Jul 24 11:00:32 2026 GMT
Not After : Jul 25 11:00:32 2026 GMT
Subject: CN=6f4811d6ba1d5ddba3ccddc9dfa0e5aa72362523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f9:34:8e:50:02:32:49:57:71:9b:7e:30:4d:
48:4b:90:9f:df:df:2d:93:b5:66:d2:58:7e:0a:0b:
32:da:a6:9b:07:22:fc:c8:0b:f2:84:51:21:d5:ae:
51:33:7b:04:e2:7d:0e:9b:8b:5d:21:80:29:9d:dd:
5e:0e:01:9e:85:c9:f6:6c:63:1a:bb:e8:28:72:c1:
c6:18:83:e4:d0:45:0a:d8:c6:2b:93:e9:79:69:4a:
64:b9:1f:b7:f9:0c:40:d4:ef:df:ee:f6:86:9d:3a:
09:ff:d8:64:40:a1:cb:57:42:3a:33:2f:06:6b:f2:
fc:e4:d8:ed:5b:54:e1:f1:ac:4c:c0:66:5c:cc:a9:
f4:fc:31:f8:6e:56:c5:4d:c3:6e:70:c9:69:c3:e1:
ff:57:3d:e1:6e:0c:2d:8d:fe:4a:e6:1a:3b:9e:cc:
51:4e:fa:9e:1c:af:b9:9f:cb:96:b4:d8:e8:f0:e8:
b6:79:f9:1b:ad:60:a3:8a:bf:22:9c:80:6e:b8:b5:
27:62:3b:8a:50:c2:f5:3e:c6:ec:f1:29:b4:56:6d:
69:b0:6b:1d:69:ca:fb:16:da:4c:c8:58:fe:ea:c6:
9c:6b:67:20:23:a2:f3:b4:a0:6a:10:6d:96:0c:0f:
7f:ab:3a:6e:e8:02:f5:85:0e:6d:5c:2c:59:d3:b4:
37:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:48:11:D6:BA:1D:5D:DB:A3:CC:DD:C9:DF:A0:E5:AA:72:36:25:23
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:59:f2:91:69:05:fc:33:d4:98:37:c1:26:47:b5:ee:b9:a3:
1c:69:02:84:ba:ac:4b:e6:c9:22:32:9e:31:8b:78:b0:2d:d3:
a1:46:37:3c:8d:77:a3:14:26:a2:ef:2c:86:43:11:be:25:ff:
9b:e5:5c:7f:5d:38:be:bf:bf:15:6e:9a:2c:4a:cd:5c:96:3f:
f3:4b:c2:04:d2:c0:8d:83:21:cf:84:be:da:82:e3:71:fd:cf:
75:1e:4c:28:3c:43:ac:c4:71:ec:ce:c4:4a:00:f0:e9:85:f7:
aa:42:cf:d4:0f:d8:c7:76:b9:a3:12:20:e1:f6:a0:f7:5f:6b:
51:35:6d:3f:7f:3f:a1:18:7a:8c:66:37:8a:92:2a:cd:f9:08:
2f:48:1a:15:c9:b3:44:7e:1e:05:0a:a9:8b:21:a2:41:71:ac:
4d:79:e1:e4:3d:89:cd:df:9a:cb:b9:2d:93:d7:ce:a4:0c:3c:
e9:39:b5:cc:19:23:82:4e:a6:09:fc:86:0d:73:89:d4:83:e5:
1c:41:6a:5c:18:53:23:b6:53:10:6e:c2:61:b8:dc:c4:91:7b:
cd:6e:be:d2:12:1e:a1:4e:fe:a1:dd:9f:fd:c6:85:46:10:49:
19:42:dd:06:93:ef:d3:44:eb:eb:e2:95:72:5c:4b:c6:c2:70:
88:b6:23:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:10:38 2026 by rpki-client