Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File: XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier: 6torHznifvx2NouVMtXJsmnOOLxx8ZPqEHzLzKuX+P4=
Subject key identifier: 07:8A:18:23:57:ED:31:3B:37:B1:35:B3:08:10:2D:D5:A6:A2:E0:B0
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer: /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial: 019F91359C8C5F2F246FCD8D5E1DCDFA475B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 23:00:37 +0000
Manifest this update: Thu 23 Jul 2026 23:00:37 +0000
Manifest next update: Fri 24 Jul 2026 23:00:37 +0000
Files and hashes: 1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: SguGG1ct5LuuG5Kngtda56NpyD7tvz0s8Cqbm2HnPXo=)
2: nESdHSYfa1deK4cuMEoqKlkUBhA.roa (hash: Ne5xi2gxYVVWXxqP7e6edUaF5lMzo3AlLl0nnSwGj20=)
3: rZYX5fKPq_iTsTklZo3tUzGErD8.roa (hash: Bkadagr0tzraTAYCN3j7TcAW/fLW29DF6wAopom2qpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:9c:8c:5f:2f:24:6f:cd:8d:5e:1d:cd:fa:47:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Validity
Not Before: Jul 23 23:00:37 2026 GMT
Not After : Jul 24 23:00:37 2026 GMT
Subject: CN=078a182357ed313b37b135b308102dd5a6a2e0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:03:88:25:a8:e8:de:63:8b:7b:7f:bc:c8:
89:f7:26:f7:ef:7b:30:c3:13:bc:8c:08:a4:f1:5c:
0f:35:75:2c:da:8b:f5:73:e5:f3:6c:43:9e:53:19:
cf:fd:10:c3:3c:62:06:de:10:81:f3:2f:73:d8:bd:
ee:a5:e3:37:2a:c1:99:b0:d9:20:14:55:b4:4b:1c:
b8:cc:1d:dc:64:ee:83:9c:73:9c:47:69:bc:c4:cb:
af:81:b9:ce:3e:c3:ad:ea:ab:71:47:b5:c4:1a:74:
9e:f9:75:94:3c:8e:c6:d1:60:cd:bf:92:a7:56:09:
15:d2:71:91:7b:d6:10:a1:4e:fc:e0:29:71:cf:f7:
93:ce:72:73:5b:08:a9:ad:c4:88:50:a5:e5:36:75:
29:51:b5:25:c6:53:3b:b3:32:4b:fe:7b:0c:40:0f:
23:64:9c:11:49:87:f1:da:3a:63:29:94:c1:1a:5d:
83:4f:3d:27:15:6b:66:7a:02:a7:2b:32:0e:83:3c:
2e:79:4b:34:f0:97:c9:af:31:94:c1:01:d5:4f:1d:
d2:e3:d0:5c:54:8b:64:c5:d3:4f:51:b1:b3:6f:3b:
4d:da:f8:16:a8:4b:2c:3f:6a:60:5e:44:74:04:89:
18:29:98:9c:a0:f4:00:a2:be:ac:9e:c2:7f:35:f3:
8c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8A:18:23:57:ED:31:3B:37:B1:35:B3:08:10:2D:D5:A6:A2:E0:B0
X509v3 Authority Key Identifier:
keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:27:2e:b9:59:64:64:9f:ce:1f:4f:dd:85:35:05:6f:46:eb:
b7:09:ef:7c:81:2f:10:bf:dc:a8:1e:ba:ee:9b:22:01:3b:d8:
24:5d:c5:4c:e0:b4:ec:5c:2d:bd:4a:08:9a:61:f8:d7:64:fa:
3c:21:fc:40:40:c2:12:83:e0:21:0c:c2:af:46:ac:d5:8e:be:
15:6b:f4:20:99:f3:47:ae:44:db:16:6d:c8:f5:ef:3c:28:eb:
91:b1:27:c1:e4:b9:af:d3:8b:90:cb:59:90:2c:25:81:a0:fe:
61:90:44:9b:82:c2:20:eb:92:15:c6:e4:4f:2f:61:55:24:d4:
88:34:d8:e4:b4:5b:81:55:63:eb:04:50:6a:b8:5a:8f:22:85:
a3:12:0e:b5:74:58:a2:c3:10:24:8f:57:4d:96:9f:13:71:61:
ba:c7:4c:45:0d:ec:68:3a:e4:5e:5c:e8:4d:cc:25:05:57:99:
6a:11:8b:af:df:48:66:a1:27:95:aa:11:c0:2c:e4:c0:a6:65:
0c:bf:ec:33:21:d1:54:6b:1f:10:d8:aa:5f:9e:d0:b7:17:56:
27:48:77:8e:1d:de:ec:a0:db:81:74:7c:f7:97:da:98:90:a1:
d2:2d:d7:57:f3:d1:6e:62:c9:6f:e1:ba:8f:e0:62:61:dc:45:
40:30:07:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:50 2026 by rpki-client