Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
File: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft (raw, json)
Hash identifier: W7jqn+FhqFxRLFq2p2kLr642Ska7BXnUtHt49uMfqes=
Subject key identifier: F8:46:EE:13:90:5F:F2:B1:8E:DC:1C:6E:03:81:7F:37:4E:E4:04:AB
Authority key identifier: 5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
Certificate issuer: /CN=5e8e581537e7aa66783c3403822a1181a3168d08
Certificate serial: 019F932457E293A2D1BCA5EBB024025E02D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
Manifest number: 0DF2
Signing time: Fri 24 Jul 2026 08:01:00 +0000
Manifest this update: Fri 24 Jul 2026 08:01:00 +0000
Manifest next update: Sat 25 Jul 2026 08:01:00 +0000
Files and hashes: 1: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl (hash: ox1LVG6vz3W65AYWw6U1l3uUwnN+0XuyUyybXYJG7ds=)
2: zUPOhxihYzhbcX4tok2wWWwFbw4.roa (hash: MhLBWRoR0j43G7PjNgF2nCiYDlCAe2m1lXi02+T0zpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:57:e2:93:a2:d1:bc:a5:eb:b0:24:02:5e:02:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8e581537e7aa66783c3403822a1181a3168d08
Validity
Not Before: Jul 24 08:01:00 2026 GMT
Not After : Jul 25 08:01:00 2026 GMT
Subject: CN=f846ee13905ff2b18edc1c6e03817f374ee404ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:85:ad:87:e6:15:e1:50:6c:fd:22:01:5d:09:
fa:7d:d8:b3:12:d4:3b:e1:d2:65:d6:a6:7c:78:40:
72:0d:b5:49:eb:b7:4d:e3:c2:b1:db:f0:c9:fc:0c:
3f:07:22:0f:30:c4:6e:a1:5f:2b:16:2b:f2:23:06:
16:6e:72:58:0a:7c:cd:d6:ea:69:77:86:44:b3:1c:
1f:db:a8:53:cd:c4:f8:44:b7:a7:a4:de:b6:7c:ee:
fb:d5:73:3e:9d:25:d4:95:12:42:16:19:3e:7f:bf:
99:30:32:7c:d2:2a:dd:c1:57:da:7d:11:b3:d4:23:
9a:f7:b4:48:41:f7:73:23:fe:35:67:bb:17:ef:3a:
a5:01:ad:cf:1d:25:61:9d:4e:24:3d:19:39:41:7b:
5e:ff:16:44:07:cf:97:75:ce:28:dc:a9:1e:f2:8a:
8f:06:2e:c5:ec:ac:53:eb:cb:8c:3b:35:93:2b:77:
ed:14:c2:f6:14:1a:c4:8e:df:0a:ed:ae:69:46:99:
80:b3:65:8a:5e:9c:8f:3c:f7:96:db:d6:8a:e6:ca:
da:e0:66:31:19:ff:cb:4b:1e:67:ed:ef:c5:4d:2c:
4d:18:bd:db:51:86:0f:ac:57:06:96:f4:84:fc:03:
60:0b:a4:e1:61:c5:39:0d:75:6a:83:d3:12:11:9a:
bd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:46:EE:13:90:5F:F2:B1:8E:DC:1C:6E:03:81:7F:37:4E:E4:04:AB
X509v3 Authority Key Identifier:
keyid:5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:85:c3:8c:f2:2c:40:a4:3e:9c:e9:08:d4:3f:c7:26:8d:ae:
ae:ed:5a:0a:78:ab:24:1a:06:b8:41:f3:85:69:8a:0e:67:67:
46:cb:b6:42:35:23:37:09:ec:fa:89:87:42:38:9d:be:ac:30:
1d:c0:25:5d:83:8e:ea:54:61:30:5b:a6:9e:62:04:dd:d5:72:
20:73:7b:5f:19:e6:31:43:ce:98:34:25:e2:45:6d:b1:d7:53:
ce:13:17:07:a8:74:ed:95:d6:03:ca:73:a9:c0:80:e0:42:5d:
24:bd:77:82:80:6f:e7:6c:78:b8:c3:af:08:bb:e8:95:b4:c3:
ed:d3:67:70:e8:71:5d:76:d7:8e:9e:7c:78:40:8e:83:8d:43:
23:47:d1:93:18:96:81:c3:f0:a4:7b:13:81:f0:2f:36:96:43:
70:55:88:d2:3e:51:d0:e3:8d:4d:80:5c:2b:8f:d7:cb:37:c8:
5d:88:8f:21:4c:3d:03:dc:26:95:eb:6d:15:7c:98:07:a9:42:
ba:6b:8d:f6:56:09:3d:12:f8:d0:fb:c5:a5:05:5c:80:cc:88:
75:e3:0e:09:2d:20:40:10:99:60:59:fc:0d:83:95:93:81:62:
31:42:21:f0:e0:79:4a:2b:31:82:7e:84:26:97:e0:00:be:18:
21:21:98:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:42:16 2026 by rpki-client