Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: 8L6eC5R+PCg6pacxDfHmwFwjf50GMjOWJY+r1bLNxA0=
Subject key identifier: 98:42:D8:90:5B:20:EC:BD:F0:B7:CB:F8:F4:04:D2:18:36:7B:B9:D0
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 019F943698F44AC98B7478EA4AD53626C19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 07E8
Signing time: Fri 24 Jul 2026 13:00:33 +0000
Manifest this update: Fri 24 Jul 2026 13:00:33 +0000
Manifest next update: Sat 25 Jul 2026 13:00:33 +0000
Files and hashes: 1: 1yTxuvJTgzp3vueVNPtMM4HSlnE.roa (hash: C3mQ9ASRyTlSwgnHvOngoGQirohvWMvEni68YFNubqo=)
2: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: HKt01OVmaMjO2J9lTuRfa4vam7rwhbfnY3qXtBt6N8Q=)
3: xweu5qCO47VIbmMKNVD40EQTVOU.roa (hash: 2Ggr+oJ9NSlt1DGrtrpkA0zHBUc5XOHY+zg99GvfTiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:98:f4:4a:c9:8b:74:78:ea:4a:d5:36:26:c1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Jul 24 13:00:33 2026 GMT
Not After : Jul 25 13:00:33 2026 GMT
Subject: CN=9842d8905b20ecbdf0b7cbf8f404d218367bb9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:57:52:9b:0b:2b:63:ca:df:e5:33:91:16:
ed:73:89:d0:5d:e2:58:3b:b1:ee:26:97:c0:3e:30:
77:5a:95:7b:d9:be:e2:b1:36:51:2b:62:17:97:0a:
ac:e5:56:61:7b:e1:f3:04:74:1e:67:93:1d:a1:b3:
84:e6:5f:b1:99:ff:26:fd:b8:6d:28:a0:f9:1c:86:
1e:e7:ba:59:e3:07:8d:a2:ef:b0:3f:35:30:ba:be:
15:5e:84:db:5a:47:fa:8c:d8:19:05:7f:54:b3:aa:
56:7c:f5:ca:62:53:60:25:c7:1d:d7:5d:72:e9:54:
d2:f5:d1:b6:23:4d:47:21:e0:07:48:ff:ba:2b:30:
f5:59:83:46:e2:cb:e8:3d:92:3f:ff:6e:33:b8:91:
52:fa:8e:8e:1f:93:cb:2b:30:d8:30:22:fa:1f:75:
5d:87:35:4f:8a:69:85:99:31:a2:68:86:38:db:79:
6b:52:31:b9:e1:43:34:6a:e0:85:69:99:ff:7f:51:
74:39:c2:db:92:3a:e5:e4:83:c0:b1:a6:e3:76:87:
e2:15:a0:ed:97:7b:fa:c3:b7:2d:22:e3:16:88:57:
8a:d8:d1:28:60:86:a5:3d:3c:75:6f:e1:d6:67:3c:
3f:92:ff:69:b3:75:98:a0:f2:a2:1e:38:97:34:e6:
8f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:42:D8:90:5B:20:EC:BD:F0:B7:CB:F8:F4:04:D2:18:36:7B:B9:D0
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a1:27:26:5c:b7:54:58:fd:61:b1:c1:2e:6e:2c:fb:7f:e4:
77:01:4b:f8:c3:14:34:07:9d:54:ab:a5:ff:44:58:81:4b:a1:
eb:59:cf:aa:61:eb:28:6c:f7:23:6e:13:30:8a:f0:40:53:0b:
ef:3d:48:6c:f2:d0:6b:6a:f1:c0:f6:19:57:50:4e:00:9c:94:
6d:91:10:bf:94:67:25:4a:86:72:c6:92:7c:7b:19:e3:2e:1a:
ba:f8:ec:4c:e9:d5:be:0c:8d:0e:f0:1a:b2:36:72:10:d2:60:
4d:b0:6a:ca:b4:d6:bf:c1:4c:ee:63:af:bd:d3:3e:66:f3:74:
29:b5:1c:c9:64:58:3c:02:72:e3:71:8f:8a:9c:b9:ff:b7:cb:
2c:3e:e7:e5:21:ee:f5:51:ac:e8:74:54:7b:1f:9f:79:24:cb:
02:31:98:6e:37:05:b7:cf:8b:b9:8e:3d:64:5c:82:be:77:15:
7f:77:3f:88:22:ad:61:0e:b4:1b:6d:15:b8:a9:bb:02:e6:b4:
dc:9d:43:a6:98:a2:ed:c0:02:ff:ba:9f:72:96:5c:67:fa:9a:
f9:fe:64:e7:1f:5a:70:8b:be:13:68:21:30:39:96:0f:94:e2:
44:38:ba:04:8c:18:15:6b:6e:62:bd:33:e3:0f:c3:d4:9b:12:
c6:d6:e9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:11:37 2026 by rpki-client