
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
File: xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json)
Hash identifier: Txb5XIEmxp1G1xSuWg2EInR/8zi3egwzqMkfNHuY+UQ=
Subject key identifier: 9D:8D:57:60:B3:F4:88:0E:4B:75:D1:92:72:B5:F3:F5:85:09:07:81
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial: 019F8E347D8D1A273BC81C3D8714BB5C77B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
Manifest number: 05E3
Signing time: Thu 23 Jul 2026 09:00:32 +0000
Manifest this update: Thu 23 Jul 2026 09:00:32 +0000
Manifest next update: Fri 24 Jul 2026 09:00:32 +0000
Files and hashes: 1: MWnPy89PH_1TfAr-2f04R8v5sE4.roa (hash: lLx6SLjmp2bg19wDs+FyMt7/MMn+v1mjyT18ZnGU1Mk=)
2: gchew8N-s3QGJhaPeq9th0RAwrA.roa (hash: 8LHWubfz5C/zrE3nYoyb2vELJgFr9oL05PR7fmzV9hw=)
3: m2sCh5HkLxEE1VASi8B7f5_IGDo.asa (hash: 4Epl+7kUup5rqY+UK4i3mas67nTsku/KVZ8PPtRd/NQ=)
4: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: PqwPHzYpVbC1iPdwC+7M/LSG1XcHeMFqazfjn5Ni8oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:7d:8d:1a:27:3b:c8:1c:3d:87:14:bb:5c:77:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
Validity
Not Before: Jul 23 09:00:32 2026 GMT
Not After : Jul 24 09:00:32 2026 GMT
Subject: CN=9d8d5760b3f4880e4b75d19272b5f3f585090781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:f4:57:11:d7:08:fc:8c:2b:8f:90:51:81:
a9:e3:5c:2f:af:c6:fc:4a:64:91:6f:5e:82:53:90:
35:cc:3f:8e:bb:c0:8e:76:a3:23:96:78:29:87:e6:
c1:dd:55:ed:e3:2b:4b:3e:86:ed:14:ac:b2:ef:ad:
18:1f:cd:e3:02:a3:c1:80:5b:28:2c:87:b9:78:31:
c3:8e:d1:24:83:62:a9:fc:89:d4:28:da:3a:12:0f:
8b:b0:8c:d6:15:a2:12:bc:ef:ba:3e:03:f3:8b:e2:
33:76:93:d4:84:a6:1e:3a:2a:82:c8:d7:5f:55:09:
fb:25:5c:41:87:a3:9a:f8:d0:b7:3f:8d:78:a1:37:
ef:22:2b:e8:57:0e:03:ca:8a:e9:7e:f4:d7:8d:08:
7b:af:e5:c3:1b:46:4b:31:b2:10:c3:1b:46:3c:70:
d8:8a:5a:91:5d:53:43:25:bb:90:d5:1a:b8:76:5d:
2d:f5:b4:a5:4d:c8:53:c4:16:90:b0:f2:a7:85:52:
4f:c9:68:35:e0:d7:e8:e5:ec:ef:57:08:26:3f:cf:
c0:14:d3:ce:e1:23:d0:dd:b1:19:51:4b:a2:ff:9b:
2f:1c:db:b4:41:14:4b:c0:88:9a:34:fa:26:20:20:
24:80:3f:95:5e:5e:d6:69:ff:b1:fd:7b:35:0c:5f:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8D:57:60:B3:F4:88:0E:4B:75:D1:92:72:B5:F3:F5:85:09:07:81
X509v3 Authority Key Identifier:
keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:64:4f:37:f5:d5:63:b0:b1:74:d5:eb:0b:94:4c:af:96:0f:
20:7d:6b:f0:7b:cb:ee:68:c0:94:c7:fb:72:a6:65:a3:c4:f9:
85:b0:af:89:2e:47:1d:7d:8d:9d:f4:f2:1b:31:26:22:52:1b:
9e:50:92:60:36:5d:36:9b:0b:d7:71:50:7f:69:e8:a3:19:d2:
97:17:91:15:bb:ed:54:0e:e6:1f:87:f5:2b:0f:ff:38:1d:59:
9e:15:fd:a7:da:19:4e:33:20:17:54:eb:a0:25:18:b2:e8:06:
4f:2f:29:d7:60:ab:8c:ec:c9:09:19:6f:78:fc:c1:18:a0:91:
bb:7e:3e:2e:c9:51:fe:e2:f2:2b:c9:4c:de:12:b8:e9:08:9f:
34:c7:76:67:58:d4:03:f9:27:6a:fe:da:09:3e:85:07:16:b8:
a1:7e:45:34:fb:34:29:d4:68:61:cb:df:b6:b7:f8:04:c8:fb:
17:ec:2a:c9:bc:a7:56:2c:af:7b:99:e2:99:1c:a2:8d:c7:b7:
33:56:cd:30:2f:25:a9:38:1b:4c:40:c4:c0:a8:24:9f:7d:82:
e1:88:a6:31:4f:82:aa:f4:50:e1:11:fa:27:41:be:19:a6:95:
8e:27:5c:16:27:b2:83:60:8c:2a:12:97:32:4a:c0:55:ca:b2:
b4:ea:4d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:13:20 2026 by rpki-client