Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier: jT+j8seX0CSgiO26VkYp9E6Dub0OBz803qHxIthdTcE=
Subject key identifier: A9:55:1D:62:5A:B8:82:15:7B:E1:72:3B:C2:FD:11:A3:FA:71:E7:11
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 019F9437283D7555E19AB07977310A69BAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number: 1939
Signing time: Fri 24 Jul 2026 13:01:10 +0000
Manifest this update: Fri 24 Jul 2026 13:01:10 +0000
Manifest next update: Sat 25 Jul 2026 13:01:10 +0000
Files and hashes: 1: 4GacYlC1xTXBA2gZGI4h12SFY-0.roa (hash: NjXRgF24DIZuh863duD3ZThupdmVygwzxLiXyqu402Q=)
2: E0wwloupObPs9_O7vd7bSguVl6w.roa (hash: db081CMNM92GGYGAY4P5+DovYW2JE0c6H2IK3KWF7l0=)
3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: VyKtM1yvP8Why0vv7QrICyTuMRQeYdTHvvNmOyG/0kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:28:3d:75:55:e1:9a:b0:79:77:31:0a:69:ba:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Jul 24 13:01:10 2026 GMT
Not After : Jul 25 13:01:10 2026 GMT
Subject: CN=a9551d625ab882157be1723bc2fd11a3fa71e711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:8d:74:f6:9e:c3:cf:34:0a:77:fb:a0:b6:
40:7c:66:9d:f1:c7:0c:cf:b5:6b:59:1b:97:09:fd:
30:05:d8:24:b0:45:7e:5f:51:98:80:0d:fb:85:fb:
96:8e:de:ea:f8:06:b7:78:d9:61:b5:16:10:28:fa:
ad:ed:ba:59:ad:db:ef:f9:75:42:6e:e9:1f:c9:4c:
c1:a6:e6:02:7c:1d:cb:4e:9b:99:ab:53:d7:fd:65:
a1:00:6b:9e:10:c5:a2:b7:7c:26:ea:91:aa:30:14:
37:30:0e:83:e1:9c:f4:41:a0:83:0f:9f:0a:af:e0:
de:de:44:b9:a8:39:dd:87:2d:a8:f0:4a:ff:62:3e:
f7:c8:da:cc:8a:7e:a0:b9:dc:3c:29:7d:d9:c7:21:
d7:d0:11:c4:d9:f0:66:fa:02:1d:24:08:33:6d:aa:
84:a4:3b:0c:e9:af:11:6d:46:18:86:c6:a7:27:d4:
20:d2:4f:65:48:df:e9:c6:b2:47:36:8d:95:b5:3f:
2b:f8:f3:5a:98:c3:27:e9:9a:ec:10:8b:ad:8b:12:
ab:b3:fa:83:de:8a:ca:f3:c8:f6:ff:04:d1:f0:69:
03:7d:65:a0:7c:96:d6:b8:18:5c:63:f0:a2:82:fb:
9c:cd:9c:34:a4:f3:f6:58:25:bd:90:70:0e:b0:8b:
3a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:55:1D:62:5A:B8:82:15:7B:E1:72:3B:C2:FD:11:A3:FA:71:E7:11
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:95:2d:13:d2:d0:f8:ad:af:df:9c:5b:47:df:f1:38:4b:43:
f9:3e:0f:3d:37:29:4a:27:59:a9:e6:18:d4:39:1a:bc:66:06:
95:d4:f4:49:81:91:11:40:d1:fb:44:29:58:a2:53:d6:16:6d:
a2:96:32:c0:f5:76:67:e1:5d:be:af:1b:30:4d:7d:30:cf:7c:
63:e3:8d:39:ec:55:75:03:38:83:79:e0:76:dd:b8:eb:00:ad:
8c:92:3f:db:ad:9f:27:ac:79:73:bd:44:d5:1b:cd:6c:b9:eb:
b5:d6:f5:bf:b8:40:fa:2a:c3:8e:20:db:51:b4:b2:27:01:d6:
08:28:cb:e1:52:8e:57:4a:71:9b:21:3b:47:e3:fc:f8:61:77:
02:d0:dc:83:18:2d:5b:f6:e8:70:d8:f1:8b:ab:77:67:ee:26:
66:2e:bb:7a:7c:98:0f:0f:c4:0a:ed:c6:c9:e4:81:16:1c:a7:
62:72:11:87:b5:81:48:41:2f:b7:79:c6:19:1e:15:8f:d1:cf:
44:3e:a3:73:f8:0d:be:c6:74:ea:26:cc:50:f1:da:ea:fe:40:
e0:ca:fb:18:6a:b5:e1:4e:b8:17:15:61:0c:28:50:fa:ae:5d:
64:a5:34:01:a8:b1:d1:03:07:da:e5:78:66:62:12:1e:46:01:
32:9c:d5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:07:45 2026 by rpki-client