Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
File: XWsFtN3mw5OZctoT9iIH8ibeeSo.mft (raw, json)
Hash identifier: 6FGsYWh0CI6K5lm2tPF3uGApz2nLspRSsU9nJNk8kGI=
Subject key identifier: F0:6C:7B:9B:F3:82:AD:51:7C:96:77:D7:D9:11:95:6D:07:11:E6:B7
Authority key identifier: 5D:6B:05:B4:DD:E6:C3:93:99:72:DA:13:F6:22:07:F2:26:DE:79:2A
Certificate issuer: /CN=5d6b05b4dde6c3939972da13f62207f226de792a
Certificate serial: 019F95493F650803346BE80F84937946EA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:33 +0000
Manifest this update: Fri 24 Jul 2026 18:00:33 +0000
Manifest next update: Sat 25 Jul 2026 18:00:33 +0000
Files and hashes: 1: O9IV0RKhFtt8K6HCeqLoJ_BtvRs.roa (hash: Ws/iiURmVab3uVGnOVSnKwKNuJfPQAcJDFZkcNjz5Ks=)
2: XWsFtN3mw5OZctoT9iIH8ibeeSo.crl (hash: ZsZhw1gDgAVA+58SCAaMpDXyWn2KqQ6DyL27Di6PbvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:3f:65:08:03:34:6b:e8:0f:84:93:79:46:ea:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6b05b4dde6c3939972da13f62207f226de792a
Validity
Not Before: Jul 24 18:00:33 2026 GMT
Not After : Jul 25 18:00:33 2026 GMT
Subject: CN=f06c7b9bf382ad517c9677d7d911956d0711e6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:c2:0a:a6:d8:1d:2f:93:43:8c:5c:9f:65:
bc:8f:88:d2:71:e6:10:39:1d:70:bc:c8:de:5d:12:
43:21:6b:a9:ab:67:a5:72:11:9b:72:0c:a6:d4:13:
07:2a:e9:13:36:c0:21:22:f7:58:d4:97:89:63:f9:
dd:c6:42:e5:69:a6:c7:49:ef:ce:ef:7a:48:cf:85:
5f:4e:30:cc:48:6a:8d:58:98:bb:7b:25:a9:68:8b:
26:d0:58:f8:0f:ec:36:94:50:aa:ef:4b:e3:da:60:
06:8d:03:f5:8e:73:6f:ee:2b:bb:4a:34:e9:5d:cc:
c3:bf:d3:00:ec:62:70:61:5b:ff:e6:9c:e7:f8:2a:
ff:03:a6:ec:b5:a7:f0:7d:fb:01:29:ca:83:00:f8:
17:86:0d:90:68:8b:8a:e7:d1:24:bf:68:e2:e0:b6:
40:80:14:d4:47:a0:ae:92:8c:de:48:54:3e:e5:d6:
d9:3e:1d:c3:99:4a:40:03:5f:6a:1f:91:83:38:31:
a1:47:15:9d:ac:8f:a6:5b:c8:6f:67:75:05:6b:56:
52:07:54:c7:ff:41:0c:5b:bd:ef:eb:45:69:08:95:
d2:1d:4f:25:44:b9:a3:e2:16:0f:22:b0:e4:92:ee:
ff:52:3d:40:af:d3:34:54:72:5a:02:0f:b6:43:c8:
36:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6C:7B:9B:F3:82:AD:51:7C:96:77:D7:D9:11:95:6D:07:11:E6:B7
X509v3 Authority Key Identifier:
keyid:5D:6B:05:B4:DD:E6:C3:93:99:72:DA:13:F6:22:07:F2:26:DE:79:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:48:75:1d:ff:40:d0:09:2d:0a:d3:29:b5:d5:1f:24:c8:3b:
90:76:38:07:9f:da:05:bc:e7:3a:4e:4d:59:7e:04:92:90:98:
52:56:af:9d:63:7f:a7:f0:11:a7:90:5d:24:7a:94:62:e2:ad:
e3:81:96:99:57:ce:5c:fb:4b:fe:f2:a5:14:10:9e:fc:e7:4a:
e5:4d:51:15:4c:de:03:d1:e6:bf:24:59:26:05:ce:ff:31:b5:
87:6c:91:24:79:dd:b0:9e:09:a7:86:5f:5e:80:7c:6b:50:55:
a5:a0:37:1d:7a:0f:75:90:0a:87:5d:88:d0:92:45:c3:0e:6f:
31:97:78:b1:c6:04:d0:11:dd:dc:a4:3f:47:18:77:4a:65:a1:
e9:07:3c:68:ed:a8:38:37:05:33:9d:b3:2c:fc:cd:3a:48:47:
b0:26:14:e1:4f:7f:9e:c5:20:4c:4a:ef:e1:ef:ab:83:6c:3c:
ed:d0:21:9e:bd:be:2f:0a:ee:e0:18:e4:88:89:2d:29:53:4f:
e0:15:de:09:e4:1e:fc:0c:d4:d0:ef:18:0f:b2:85:78:23:3d:
44:87:63:cd:3b:69:b0:be:bd:cb:94:39:db:ff:aa:52:d5:0e:
05:24:30:40:60:39:62:5b:07:a0:13:a1:68:1b:e3:a3:af:9a:
6d:be:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:15 2026 by rpki-client