Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier: 4e5e0DQ32tUpwIBOSFYtMMpFDz9uQY/2G9jAV26sqTo=
Subject key identifier: 56:B6:92:34:B8:FE:87:9D:D9:C8:F3:05:FE:9F:EE:2C:89:D4:38:85
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 019F8E348FFA813FCC6D71C7481D8F5C595A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number: 04C7
Signing time: Thu 23 Jul 2026 09:00:37 +0000
Manifest this update: Thu 23 Jul 2026 09:00:37 +0000
Manifest next update: Fri 24 Jul 2026 09:00:37 +0000
Files and hashes: 1: 2Mi7xSwXWORT-cP1uI-5ipGqq4s.roa (hash: tSv3E+ZA/wZe9XbU1lskSKrjg17Dn+XBQfh3/xFVJUg=)
2: ByC-ZTHZLIp48xod5-DXAW5F3BI.asa (hash: 8ff1w8+edBnztEn324ScKN5DjpE1LW2R4BVBiNrCsOw=)
3: LlfdcTz9x7rrYLdHdKh9Na-Mfd0.roa (hash: RkCIWInpuo8o6AIXIjNXD1h+2dYnpr1vQR3Vie5EDns=)
4: Tp-h7fmGBqfKD0Ue-ghQOfIbzYE.asa (hash: WMYYd+/cdLigPmUzWhY4TymlCE9a6NI3QPAJVx0ExN8=)
5: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: 3vaKbZqNPy/e2R2K/67ohuPiMGlQuJrlQizBU75pqF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:8f:fa:81:3f:cc:6d:71:c7:48:1d:8f:5c:59:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: Jul 23 09:00:37 2026 GMT
Not After : Jul 24 09:00:37 2026 GMT
Subject: CN=56b69234b8fe879dd9c8f305fe9fee2c89d43885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:73:73:f6:e4:5d:1c:fd:32:e0:3d:10:76:16:
61:52:5d:42:b9:54:a5:b6:0c:95:49:7d:1b:a1:be:
9a:c3:7b:89:c9:f4:2a:e8:ef:1e:b6:89:e9:c7:24:
a3:13:30:9e:c7:6b:ed:06:e2:61:7b:ee:cc:c5:fc:
0f:11:91:49:68:4e:17:75:45:b5:68:84:17:ef:1f:
0b:e3:06:ed:bc:70:f8:3a:02:c4:ef:49:3b:8b:e6:
ba:46:93:bd:d5:31:83:3e:bb:b6:bc:d0:cb:7a:4c:
0e:7e:e4:91:a8:34:5d:01:b3:a9:4c:22:14:eb:05:
32:38:47:9a:1c:95:e0:43:d6:f3:5a:4e:23:aa:82:
f9:f1:dc:b7:ea:b4:4f:08:44:31:99:4c:9e:9f:20:
06:44:24:a2:a6:46:18:e4:cf:6b:6f:79:44:cd:3f:
cc:91:75:c3:6c:90:9e:dd:c1:ee:92:ee:91:53:c7:
82:03:20:40:5e:a3:32:ca:43:b5:c4:a8:6b:62:d4:
a1:ac:94:a5:e9:da:8c:6b:7c:a9:b7:b8:4e:8b:c1:
d2:4a:be:6c:d2:64:d4:03:d2:b3:cf:b2:06:50:37:
42:d8:f1:86:33:8c:35:3f:36:aa:21:c3:0e:c4:cb:
89:d9:f1:b4:11:ca:bf:f6:61:52:10:e6:ac:06:aa:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B6:92:34:B8:FE:87:9D:D9:C8:F3:05:FE:9F:EE:2C:89:D4:38:85
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a5:76:2e:6b:04:69:ad:f5:2d:f7:53:10:fb:69:79:78:ad:
2a:46:b5:4b:df:79:6e:d9:c3:97:37:ca:91:e8:f6:14:79:fb:
6e:93:32:13:13:21:e3:0d:0f:0e:2d:c8:c3:04:d2:3b:97:81:
68:91:44:eb:68:5c:79:26:74:00:a4:11:05:57:35:6d:9e:22:
4f:e5:3e:4e:fa:af:8d:7f:ae:db:8b:bc:1e:06:91:c6:c6:f7:
6a:36:58:a1:4d:be:6c:64:bf:87:4a:fa:ab:2f:83:43:05:90:
87:5c:b0:36:e4:4d:3c:16:1b:84:0e:68:c3:38:18:5f:66:18:
86:c7:a1:89:bc:53:b6:26:af:8e:29:e3:96:b9:78:4c:e2:65:
a9:6c:50:49:c6:18:72:0b:cc:f1:1c:41:da:5a:2a:d1:8a:3b:
47:eb:1d:7a:da:29:79:6d:63:09:42:ec:e9:64:a8:e3:a9:1b:
47:af:70:a9:92:97:82:43:0b:8f:54:08:5a:b9:87:76:52:1e:
b5:21:07:24:4f:be:13:5f:a9:52:77:6a:df:33:2c:ff:62:a3:
cf:8d:8b:f3:87:88:c6:d7:09:aa:fc:50:6b:ae:84:89:92:14:
c8:c2:ac:dd:b0:6c:a9:74:7f:c1:17:c5:25:cf:f2:31:bf:ab:
b9:fb:e9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:04 2026 by rpki-client