Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: Vhlj6iGD3UenQpVqw86Noz6X0aWk1SpaGcOkf2qqnnU=
Subject key identifier: F6:83:35:F0:0B:00:C4:69:FF:52:E0:8B:B0:51:1A:90:47:48:B1:B0
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 019F958039B5453A85D40548E6B9F8CF0F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 10AA
Signing time: Fri 24 Jul 2026 19:00:36 +0000
Manifest this update: Fri 24 Jul 2026 19:00:36 +0000
Manifest next update: Sat 25 Jul 2026 19:00:36 +0000
Files and hashes: 1: 1-nsaGOYJDQs8nE83JBsjbwYRoPA.roa (hash: ZorqeuTKQ8BzMES+IbO5PhiAMx62C25+2z4OV8xpzBs=)
2: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: i+kG32/fIsN9KjeVS8ZO40Oyl4o5FwJYNle891+xLQM=)
3: fYv6u6ZqsaaVuf2RxvvaolhNBjk.roa (hash: jVk92j+q/o1dRJaAKw+eFCSe6j9s2E6quPaItwZl0/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:39:b5:45:3a:85:d4:05:48:e6:b9:f8:cf:0f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Jul 24 19:00:36 2026 GMT
Not After : Jul 25 19:00:36 2026 GMT
Subject: CN=f68335f00b00c469ff52e08bb0511a904748b1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:23:bf:11:a7:c2:05:56:04:f6:89:69:26:
be:21:ea:b2:7e:bf:44:4a:71:b4:4a:80:ce:f8:f2:
e7:ac:f7:3a:ad:cf:95:54:75:7c:c6:03:23:03:50:
96:14:9a:cd:b2:2f:36:b0:fd:11:2e:41:d2:0b:4a:
fe:8f:68:2f:41:91:c4:18:44:50:cb:29:27:3f:7d:
df:72:9e:d4:0e:60:ad:fb:e6:af:41:db:37:ef:42:
b1:6b:7f:6b:bd:73:78:f9:51:94:a6:8a:d7:75:c2:
54:12:f9:e2:1b:a9:74:f3:7c:37:ab:9b:27:89:b6:
0b:d8:e0:83:f9:a0:80:6c:4a:df:b6:8b:ea:d5:70:
a0:74:95:ba:54:a4:ac:60:cd:6e:07:9d:b3:49:33:
7f:e0:2f:19:23:d4:26:b9:34:8f:b1:d5:e3:31:ad:
8c:e4:32:14:82:23:bd:5b:76:e1:00:c3:55:65:ee:
50:0d:13:53:65:f7:57:1e:17:55:05:90:8a:1d:02:
f1:a2:ae:4c:60:34:9f:4b:de:20:98:00:95:36:00:
c1:9e:0c:e9:d3:30:75:9d:83:77:43:84:77:23:51:
25:f0:74:89:a0:d4:77:cf:f8:b5:1e:e7:73:bd:13:
c4:2b:19:f0:b7:8b:91:0c:d6:22:f3:53:46:42:b1:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:83:35:F0:0B:00:C4:69:FF:52:E0:8B:B0:51:1A:90:47:48:B1:B0
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:49:a3:73:0e:bd:a4:e7:98:2b:1f:16:e3:27:85:44:55:1a:
7e:69:19:74:59:75:35:96:52:d3:aa:0b:50:9f:74:48:8e:9d:
a7:23:93:75:14:87:09:63:15:09:bc:89:7a:e3:37:e4:04:d2:
ca:88:40:c2:e8:be:04:74:5b:b6:3b:fe:6a:47:fe:a2:e5:d9:
f8:a6:75:49:db:0b:63:76:69:a6:0d:ae:db:64:42:45:df:3b:
e6:f3:59:0f:46:79:86:64:b3:42:71:08:54:3a:61:39:13:a1:
cc:69:fa:85:07:48:86:f0:a2:37:49:14:ae:0a:df:56:fe:89:
2b:c2:d4:54:91:ee:c3:b8:02:e4:a0:3f:06:ad:f4:37:e3:84:
2e:0e:08:23:3e:dd:4c:73:d2:8d:c8:98:a9:64:c7:3d:41:cb:
52:26:de:ea:56:83:15:39:7d:c0:d4:36:6c:40:68:4f:05:be:
f9:b6:bd:09:ab:88:a5:33:5e:55:46:45:54:df:89:f6:04:02:
79:e9:e8:15:b8:97:33:4b:0f:3a:f0:00:0a:4b:eb:e6:60:42:
fa:c8:4a:7e:fd:1c:f8:8b:71:27:68:9a:2c:c5:45:5b:34:20:
8d:72:ed:be:22:5d:da:49:05:fa:b9:97:35:c5:cc:67:b2:c6:
f3:2b:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:29 2026 by rpki-client