Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json)
Hash identifier: qw7u6KbMprAqI7tBXce1B0hXuLQ0upiEVwW44YYHX6A=
Subject key identifier: 04:AB:77:44:2D:B2:56:43:8A:B5:23:17:F7:F4:0F:21:CE:50:AB:36
Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03
Certificate serial: 019F921122C76BAD1F650DA1C8634FB2E2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
Manifest number: 0595
Signing time: Fri 24 Jul 2026 03:00:24 +0000
Manifest this update: Fri 24 Jul 2026 03:00:24 +0000
Manifest next update: Sat 25 Jul 2026 03:00:24 +0000
Files and hashes: 1: RKz3IJpK3tLGmxT3W9hM3i7PGMs.roa (hash: RoVqVK5DIJNCCPA2hRYkxQFyuiyebRh/F8G7DU407FU=)
2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: k9dBOBmPjKBIQpIQr+YrhuOiaYOkULvHXLbmzPcAw3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:22:c7:6b:ad:1f:65:0d:a1:c8:63:4f:b2:e2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03
Validity
Not Before: Jul 24 03:00:24 2026 GMT
Not After : Jul 25 03:00:24 2026 GMT
Subject: CN=04ab77442db256438ab52317f7f40f21ce50ab36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:ab:af:de:52:92:49:e7:40:97:13:cc:c7:
99:c3:59:f5:34:67:82:99:b4:d8:2f:ca:17:68:41:
4f:4b:88:6a:11:ed:57:f3:95:9c:8f:94:b5:33:85:
e4:9d:a7:c8:21:d3:4a:cd:fe:62:3a:8a:ee:58:67:
10:e3:ad:43:d1:d2:d7:aa:98:cc:b9:2e:df:dd:e0:
e6:11:bb:5e:cf:e1:83:a5:19:b6:a0:4f:e4:91:8e:
db:03:6f:d1:63:ac:9c:db:ef:96:44:35:e1:b0:33:
a4:57:3b:93:d0:b9:ba:97:68:45:ce:1a:b3:39:cb:
f7:55:14:93:cb:b8:eb:df:91:6f:b5:02:bb:cf:ec:
5d:17:af:97:8a:7b:45:aa:94:30:a4:5f:c9:fe:eb:
0a:b8:48:0c:5a:32:3b:ad:d2:6c:aa:c2:a3:eb:7d:
31:9f:ef:f3:c4:a0:82:25:70:88:84:96:f9:d4:cd:
b0:dd:ad:7e:6f:e1:ae:d5:c8:52:6f:8b:98:85:a7:
92:bc:cb:bc:e5:1f:df:50:2c:4d:48:39:75:f3:82:
48:0c:a8:4f:c5:dd:ac:6e:1b:3c:89:cc:4f:12:e2:
72:f9:c3:74:c9:71:06:54:ff:29:dd:9a:2d:d9:1f:
74:36:ac:ae:25:73:b9:a0:e8:07:ed:a4:35:20:39:
84:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AB:77:44:2D:B2:56:43:8A:B5:23:17:F7:F4:0F:21:CE:50:AB:36
X509v3 Authority Key Identifier:
keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:57:1b:48:4b:cf:a8:3c:6d:dd:08:2a:03:9e:15:16:56:ff:
1b:1e:05:2b:e9:95:d7:23:62:d1:7f:53:d6:57:c3:32:b0:d0:
67:de:58:18:c5:c1:b6:34:a2:a3:dc:e8:98:87:4e:04:77:fe:
da:6a:84:f7:1e:76:04:f9:29:96:1e:e2:1c:36:f3:ea:ee:81:
c5:10:54:34:6e:56:57:0a:e6:4c:46:9f:21:55:bf:05:93:8d:
78:5b:73:73:ba:3d:61:17:b7:31:d3:50:48:53:78:9c:5d:6e:
36:6f:be:9e:c1:9d:ee:09:79:48:c9:e2:73:fa:51:b5:35:b2:
c6:ce:76:bf:5d:a3:80:14:4b:8e:48:7e:21:0e:33:c9:00:e1:
e5:44:f2:7b:7b:3e:ef:14:8b:a0:26:41:18:36:ee:0d:58:31:
77:3c:40:df:4f:97:0f:fa:5f:a6:1c:b0:be:83:ee:93:0b:d4:
09:66:e1:5a:74:d3:6c:bc:99:46:cd:08:47:02:f4:00:4b:89:
05:7e:26:83:7b:33:7b:20:55:82:2c:3b:35:95:74:0f:ea:24:
c3:d3:92:58:8f:92:66:39:8e:28:a0:0c:5a:43:f1:2b:9f:3c:
76:39:42:48:e3:b9:be:b9:2f:08:dc:a3:4a:8e:c4:f7:65:52:
00:5b:bc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:21 2026 by rpki-client