Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
File: XaWsO7omBTjDM-bIYPI2ASyYZ10.mft (raw, json)
Hash identifier: kZMYU80b80i1QDIibclB29Vhq+AtjCrxc3cVUIB6DcQ=
Subject key identifier: F6:29:36:96:CD:2E:98:30:6E:B8:36:D4:CC:D3:E0:66:4E:7B:D7:25
Authority key identifier: 5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
Certificate issuer: /CN=5da5ac3bba260538c333e6c860f236012c98675d
Certificate serial: 019F91354A6F2253DFF0D1C0AFBE615BECBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
Manifest number: 1421
Signing time: Thu 23 Jul 2026 23:00:16 +0000
Manifest this update: Thu 23 Jul 2026 23:00:16 +0000
Manifest next update: Fri 24 Jul 2026 23:00:16 +0000
Files and hashes: 1: GqfcLrP9OkUTy-GX1d-k-vfcOX8.roa (hash: XFhkOuqDVaUrmegmAPvZHJBMmOe4H8O6VpNvMvQVK4k=)
2: XaWsO7omBTjDM-bIYPI2ASyYZ10.crl (hash: RBGzDr0zrIX84BNgJF2rd9IlVOWWJX26C2HnAVbPpa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:4a:6f:22:53:df:f0:d1:c0:af:be:61:5b:ec:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da5ac3bba260538c333e6c860f236012c98675d
Validity
Not Before: Jul 23 23:00:16 2026 GMT
Not After : Jul 24 23:00:16 2026 GMT
Subject: CN=f6293696cd2e98306eb836d4ccd3e0664e7bd725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:7a:59:d3:3e:1a:eb:bd:04:44:e3:a6:4e:
f1:7e:de:18:36:bd:92:c1:20:62:28:8d:34:64:8b:
fe:43:3a:62:29:76:08:0b:b8:76:e8:7a:7e:f9:13:
a9:ec:f5:b7:94:b2:ef:92:47:78:fb:db:08:ee:e7:
60:4c:df:5b:48:73:da:5c:0a:c6:d2:00:6e:60:89:
dc:2d:38:44:ac:53:ee:f2:31:28:64:fa:a3:8f:05:
d1:02:ec:db:53:b4:d2:00:b2:9e:ab:79:97:2d:3d:
89:09:38:0c:aa:db:cb:89:fc:69:42:42:50:a9:bd:
25:f0:f6:d2:eb:0c:d6:00:71:9a:ac:db:bf:f3:1b:
75:e1:3c:4f:80:d5:a9:44:39:39:b9:f2:12:39:24:
e4:59:79:cf:35:b6:46:9a:f0:eb:c7:a8:7a:58:50:
7e:69:91:4d:fc:4e:a0:ee:57:dc:5e:1d:b2:7e:b5:
75:07:36:a6:42:52:01:b4:c7:9b:1c:48:9a:4e:c5:
b6:8e:bb:0a:8a:63:a6:75:ef:c4:d9:59:58:bb:80:
b8:de:0d:5e:ca:7f:0b:d1:2a:29:c5:27:16:be:69:
21:5c:67:f0:6a:d6:9e:3a:09:d4:50:5a:40:20:26:
eb:eb:e6:2e:c7:e4:c3:4f:ad:4c:5a:69:3a:8e:68:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:29:36:96:CD:2E:98:30:6E:B8:36:D4:CC:D3:E0:66:4E:7B:D7:25
X509v3 Authority Key Identifier:
keyid:5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d9:59:ce:e9:9f:63:23:e5:36:a0:59:78:a7:23:2b:1b:0f:
a7:97:31:b3:0b:fc:3f:59:8e:43:3b:e3:21:2e:a4:ca:d6:16:
93:6b:86:dc:14:60:1d:1b:81:0d:07:8a:27:f2:92:9f:0f:b2:
27:0e:df:0f:e2:d2:36:60:17:e9:51:63:f9:f9:56:aa:c1:f3:
6d:b2:f3:71:03:4c:04:6f:93:d3:00:df:e6:ea:16:9e:fb:69:
2d:c4:71:3f:85:8c:6f:74:3b:43:9d:94:bc:85:6c:3e:30:cc:
30:23:d4:c9:0c:dd:48:f9:37:d6:e9:86:4c:3a:4f:7d:97:c9:
b0:07:46:e5:f6:68:2c:68:bf:07:2a:36:de:d0:0c:58:90:2d:
1c:1b:51:27:9a:c3:72:27:17:92:bc:b8:bc:29:e6:4e:17:83:
de:8a:11:ac:c6:17:b4:d2:b3:64:21:2c:5a:37:ea:80:a9:b5:
45:37:ee:b9:79:d4:b1:01:a0:65:c0:27:f9:05:94:ca:7f:e2:
bb:d0:1e:75:77:c3:83:57:1c:d0:0b:39:b3:c8:aa:f8:05:63:
85:21:de:c2:ac:69:c8:9e:b5:79:8b:f9:d4:9d:90:32:06:e5:
ab:80:01:06:d6:51:15:ab:33:6b:2d:70:3f:8c:90:cf:fa:3a:
68:a7:a1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:18 2026 by rpki-client