Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: 0zZAgWUssCpTY+pbdHoZVOyYXXRVJGVVoCJs0OapUwc=
Subject key identifier: 1F:24:E6:D6:90:65:02:FD:BA:06:34:CD:80:61:1A:4A:2A:21:3D:33
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 019F939248A136E80135F9C5B871E929D06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 10A9
Signing time: Fri 24 Jul 2026 10:01:05 +0000
Manifest this update: Fri 24 Jul 2026 10:01:05 +0000
Manifest next update: Sat 25 Jul 2026 10:01:05 +0000
Files and hashes: 1: 1-nsaGOYJDQs8nE83JBsjbwYRoPA.roa (hash: ZorqeuTKQ8BzMES+IbO5PhiAMx62C25+2z4OV8xpzBs=)
2: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: 9lGahTi6J7ilUhHzEbmp8YF5PcD2hRk0A772gBgt4ok=)
3: fYv6u6ZqsaaVuf2RxvvaolhNBjk.roa (hash: jVk92j+q/o1dRJaAKw+eFCSe6j9s2E6quPaItwZl0/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:48:a1:36:e8:01:35:f9:c5:b8:71:e9:29:d0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Jul 24 10:01:05 2026 GMT
Not After : Jul 25 10:01:05 2026 GMT
Subject: CN=1f24e6d6906502fdba0634cd80611a4a2a213d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:6b:d1:02:99:e4:ee:f3:9d:e6:06:cc:19:
11:4b:b0:c4:f6:94:13:01:5f:f8:39:e5:71:fa:ab:
04:97:33:d6:8d:fe:47:5c:48:17:a4:ed:59:ef:1d:
1e:c9:bf:3a:88:21:cd:8a:19:8a:2b:28:91:ba:86:
7c:51:81:1d:2d:60:37:12:fb:56:16:e3:27:be:34:
0c:70:99:df:7e:0d:6b:8f:bd:dc:ea:5e:fc:dc:ff:
fe:a3:7e:90:5f:96:2a:b0:fc:23:04:cd:04:ee:42:
77:2b:0d:96:e3:0d:00:51:c9:4d:9a:d4:3c:8f:6d:
d6:4b:98:0e:0b:1a:66:55:44:8a:b7:95:9b:48:0c:
8e:f4:f6:c0:ec:14:f6:2e:4b:10:52:24:e1:c3:51:
40:f7:ba:bc:af:b2:48:6c:b2:21:1a:2e:a9:7c:54:
08:e5:0b:a3:93:1b:89:04:47:7e:8f:23:a8:3f:9a:
68:17:69:73:d3:8b:78:f1:ba:ad:37:60:79:9e:88:
f2:d0:88:8c:fd:a9:11:ad:87:bd:32:82:1c:ab:b1:
db:5f:03:f6:ba:6c:cf:23:cc:e7:2c:9b:d4:98:6a:
f8:cc:34:b1:c7:37:43:f5:89:f0:da:8e:64:03:e3:
36:58:39:05:ee:27:d1:b3:28:be:7f:6f:19:34:0e:
4d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:24:E6:D6:90:65:02:FD:BA:06:34:CD:80:61:1A:4A:2A:21:3D:33
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2a:ea:18:f6:87:5c:45:f7:b4:9b:7d:14:d8:9e:e2:24:59:
e2:2a:20:ed:a3:cc:13:b7:43:24:57:70:bb:a6:ba:c5:a9:51:
7f:96:a9:88:dd:39:0c:71:ec:03:6e:03:39:e8:9d:40:06:97:
99:b7:a9:2e:ef:4d:5a:ef:e4:84:9c:e0:59:d4:34:18:f1:16:
96:81:33:b5:52:8b:9c:cf:a8:ba:09:48:0c:db:88:5c:c9:f7:
fa:f2:54:c8:04:bc:2c:0b:bb:7b:43:c9:8b:83:5b:70:ad:ea:
b1:a1:57:79:17:61:7d:a8:78:97:f0:f8:c5:74:3a:24:55:af:
1a:fd:c7:cc:e9:4d:67:c3:7f:c3:be:db:f9:7b:09:33:30:5e:
a9:f7:9c:56:82:d8:a8:c1:b1:8e:cc:e3:d0:de:35:79:20:0d:
d2:19:7e:64:d4:c8:1c:25:33:03:46:7c:03:a4:0e:5a:70:86:
da:89:94:bf:59:55:b2:71:f1:83:05:45:f8:70:eb:2d:95:45:
8f:a7:6c:6a:92:aa:f0:5a:19:ee:d8:9e:78:a7:f8:3e:f0:11:
2b:97:73:36:1b:5f:33:ef:8f:a0:91:22:e8:e4:0a:a2:33:f8:
ce:69:64:7e:b5:38:4c:ae:40:a9:1b:ad:0e:f9:60:76:97:eb:
be:a7:55:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:02 2026 by rpki-client