Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
File: Xw_ZDZhyl8td1OB76EDSgNHizEo.mft (raw, json)
Hash identifier: vjNS6cFwiN0PaMFPgT/v4c44yyZrSiga2ETI3xqItxU=
Subject key identifier: 2D:AE:CF:C3:D1:F9:44:B8:4A:C9:19:0D:05:2A:56:CF:84:43:1F:02
Authority key identifier: 5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
Certificate issuer: /CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Certificate serial: 019F90C82011B6A0C875870E63B4C9E1146B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
Manifest number: 0D20
Signing time: Thu 23 Jul 2026 21:01:02 +0000
Manifest this update: Thu 23 Jul 2026 21:01:02 +0000
Manifest next update: Fri 24 Jul 2026 21:01:02 +0000
Files and hashes: 1: IGvyNAGkUwt5swY3ZPAsKMi4Y9A.roa (hash: 9R/m5HiUPddcgvtc69T2bzqCBkVGTvcPZN9UWeURM0E=)
2: XSXw8zz6wHnklahOljGNkkMK48Q.roa (hash: p4JyRpCAuLEOOG8JHAgwOmpcnmRpxW2S31rpM+z8Q1Y=)
3: Xw_ZDZhyl8td1OB76EDSgNHizEo.crl (hash: R/LABBAnRXCDCvpYVn8zH4tJMkptl0lilmDLejvh+To=)
4: jfJDf-L9uOm-plysAb0D7Pwv-XM.roa (hash: /1wlo6BoLw4GajX9St+IqQx9/1PVrea3LjLhasyV+pk=)
5: jusKsFR2myH5y_SxmZdhc547TOU.roa (hash: FjWKJu5eJdLGQtzzBBkYvevz1z9xR9jrxtDvXtKd9FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:20:11:b6:a0:c8:75:87:0e:63:b4:c9:e1:14:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Validity
Not Before: Jul 23 21:01:02 2026 GMT
Not After : Jul 24 21:01:02 2026 GMT
Subject: CN=2daecfc3d1f944b84ac9190d052a56cf84431f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:3a:62:4f:ec:bf:6f:60:a3:c3:fd:41:4d:
ba:6e:aa:05:1f:53:02:8e:52:19:c6:f3:02:8d:f8:
0f:0f:98:35:28:8e:ce:f2:2f:c8:3e:85:77:f6:8c:
22:cc:59:4c:b3:f9:00:dd:c6:bd:ca:f7:56:49:19:
e0:c2:0b:af:b7:97:09:3d:52:5e:a9:6a:e6:e9:85:
f6:d0:18:94:db:17:f8:31:70:cc:05:72:85:c0:d4:
73:8a:f1:5e:4a:38:96:73:a6:e2:62:ec:52:9c:17:
57:f2:f3:e0:68:28:1e:fc:fd:8a:71:cb:de:6d:a6:
01:f9:8f:7b:89:d2:5f:6b:e1:e5:51:ff:c4:19:b8:
74:78:98:60:72:d9:32:c4:70:61:dd:58:57:53:f6:
71:90:b1:e2:84:f2:f0:f9:e2:30:c6:9e:23:73:2a:
b8:56:0e:1d:72:f4:6e:2d:74:7e:a6:59:e9:ac:e8:
76:87:8c:9c:bc:58:85:b6:44:e7:00:81:59:d8:f5:
d7:a1:30:09:3e:20:34:a2:bb:10:9a:48:4e:84:3d:
a4:86:55:8a:f8:27:4c:35:5d:d1:6b:b6:8f:77:da:
10:b4:ca:0c:9c:25:c3:2d:d3:0e:38:aa:d0:f1:13:
56:05:2e:68:75:00:7c:de:af:31:9a:8f:33:7d:fe:
a3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AE:CF:C3:D1:F9:44:B8:4A:C9:19:0D:05:2A:56:CF:84:43:1F:02
X509v3 Authority Key Identifier:
keyid:5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b0:71:79:ce:fa:0e:f3:2b:6f:51:72:6f:28:41:8a:72:e6:
19:8a:6b:4f:1d:6a:e0:e1:6d:c9:9d:bb:e8:a3:fd:d2:53:b3:
5c:fd:92:61:ff:4a:49:7e:e0:67:65:45:45:64:2e:e6:02:fd:
2b:47:a5:9b:49:b9:15:0c:2e:80:02:c4:df:c7:76:58:38:be:
c2:16:8b:91:b9:72:9d:b6:0b:57:b9:e1:8e:1d:42:b2:d9:57:
f5:d5:6a:43:a8:dd:b6:0d:a2:88:dd:f6:1b:2c:22:20:3b:a5:
5a:5c:e5:bf:a0:b9:de:6b:b9:46:18:e8:78:00:b4:bb:d4:8c:
68:52:e2:f7:93:81:76:aa:5b:3d:d6:e5:0b:c5:71:fd:c5:c9:
4b:3a:e1:35:7b:c8:4a:a4:2a:92:f8:70:43:a8:cf:ae:3e:ea:
24:72:3a:59:0c:83:9d:0a:9c:52:6d:0d:c9:b3:88:b2:f7:ff:
af:52:c9:dd:4a:12:01:2b:8b:76:21:cb:2c:d3:26:ef:04:b9:
2e:78:01:dd:c1:4b:64:c3:2e:e5:71:e5:28:23:49:3c:ad:0a:
c1:42:99:e8:c6:5a:b7:61:e5:5e:57:d3:be:9b:0b:92:9f:52:
ed:48:e4:82:26:4e:34:87:2c:e3:9e:1c:81:c1:36:3f:c1:94:
32:8c:69:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:40:07 2026 by rpki-client