
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
File: XwImpwTPYg6yAA8n56kZznMJkb4.mft (raw, json)
Hash identifier: +rLnUH6ISpshw4kahYU5LpyUHnlCQn9ucZmA8TSopUU=
Subject key identifier: BF:80:63:B6:EE:60:FF:2F:F1:BC:8D:13:3E:2D:37:49:30:A8:2A:FA
Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
Certificate issuer: /CN=5f0226a704cf620eb2000f27e7a919ce730991be
Certificate serial: 019F91DA2E88ADF09BCF1BC9F4D1ADDDD1E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
Manifest number: 1225
Signing time: Fri 24 Jul 2026 02:00:22 +0000
Manifest this update: Fri 24 Jul 2026 02:00:22 +0000
Manifest next update: Sat 25 Jul 2026 02:00:22 +0000
Files and hashes: 1: Huv8_F7CU0_Jslnzwh9x9lhwpc0.roa (hash: que/wANCXPBVboi+Ao6/Mhrzm4uO58lF/bE0KnuyKBc=)
2: TyZ-EN3ZikEP3O1aIGeCGjgK3LI.roa (hash: rGtYPfugPBoAr+vznSLu3abrcQ5ZUu7nfMCulcJMbYg=)
3: XwImpwTPYg6yAA8n56kZznMJkb4.crl (hash: JhytYpl5cfAqvwf9Ehwn2PwFYwgEDYilcB386saX1uA=)
4: YcTggkw1dIIwon9zpxmI36qcgzY.roa (hash: hJIPq4cJhvmtr5AA2Y+pzfZ+vAbq2fL2IZZMCvtTNqY=)
5: qGL8RTzpNc9QMzJ4mB1cjE85xJ4.roa (hash: ABpLHA3uxkTxF69tefDioKBR4SIb/ghL74K+XaKX/Ag=)
6: wDhMGJ9NzXfEad9sT6Le_xs3iaE.roa (hash: zPKoEOiN3uariB64Rf296KkD/lWfDnDeFg2GGweepII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:2e:88:ad:f0:9b:cf:1b:c9:f4:d1:ad:dd:d1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be
Validity
Not Before: Jul 24 02:00:22 2026 GMT
Not After : Jul 25 02:00:22 2026 GMT
Subject: CN=bf8063b6ee60ff2ff1bc8d133e2d374930a82afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:44:53:fb:43:0e:86:8a:5d:d9:8a:59:ee:
ba:65:49:75:46:37:de:6d:c2:d0:3e:12:78:74:f1:
0b:0c:20:6e:fa:e1:45:4b:ce:49:69:02:9a:69:b1:
a1:10:e4:08:2a:59:55:8d:50:41:c7:7a:1e:fe:4f:
35:c4:1d:9f:be:81:06:05:44:9e:d0:49:ac:ba:e2:
5c:a5:d8:e5:4a:dd:53:00:a2:ae:52:cd:f0:36:9f:
2d:38:a8:48:69:c4:3f:1a:39:f0:55:f6:7a:bd:c0:
cf:f8:14:c3:66:c2:5a:44:40:a7:46:c7:3f:78:e4:
fe:60:45:cb:b4:49:7b:87:ce:0d:f3:78:25:19:c3:
9e:fd:3d:8d:6e:6e:92:ae:52:b3:59:28:fc:c1:96:
e2:3d:05:59:04:45:13:5a:1b:ef:6f:11:08:ae:ae:
fc:00:3d:2c:78:89:41:a2:68:da:4a:f8:db:00:47:
a3:1b:35:89:1a:f8:43:68:ee:da:08:71:9a:f8:ba:
d5:e9:52:51:6a:9b:cd:7c:6c:e4:d0:d9:99:22:67:
5e:ad:ea:7d:7f:e5:9f:57:99:1e:54:ea:a3:cf:c5:
43:a6:72:3c:69:50:28:f0:d0:2f:02:24:6c:fd:7b:
e1:fb:9f:18:46:5a:25:15:b0:60:23:69:f6:96:99:
83:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:80:63:B6:EE:60:FF:2F:F1:BC:8D:13:3E:2D:37:49:30:A8:2A:FA
X509v3 Authority Key Identifier:
keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c0:6a:64:93:da:4c:01:e8:cf:54:8a:49:5e:78:c0:dd:91:
ec:dd:0f:68:85:02:00:08:31:f3:97:d1:6c:70:b2:54:2a:e4:
31:a1:b0:96:79:53:8b:38:4c:b0:c3:95:cc:1b:f1:f6:1f:4a:
e3:d3:dd:01:cc:15:1f:24:02:b6:07:55:6d:23:b3:82:66:db:
40:13:f3:ec:25:be:60:c3:fb:01:e1:1d:d8:d4:23:f9:3a:15:
9e:c8:69:b6:08:45:8f:1b:25:06:bf:2f:f6:09:63:86:d0:89:
75:29:1e:bc:77:22:1a:63:c1:4e:a5:e9:78:62:f9:3a:bb:c8:
f2:60:a5:4d:0b:cf:a5:49:a9:47:ec:14:6e:6f:9f:9a:05:11:
df:52:e3:ed:0b:5c:85:32:ab:02:36:e6:ee:6f:d2:7f:02:fe:
ae:e4:1e:8d:3c:a5:22:73:28:34:35:5e:d3:89:09:ba:f6:1f:
ae:a2:27:ce:91:d3:04:88:82:2c:d1:0b:e1:b4:b2:16:2e:8b:
20:93:61:43:5f:08:cc:b3:71:a0:27:b1:a8:f4:89:bf:24:0c:
24:f0:13:9d:9e:04:60:10:5a:ea:3f:68:d6:cb:30:8f:5a:39:
b6:3f:60:a3:58:95:e6:ff:25:09:74:ed:0d:a2:7b:04:c5:88:
f1:2c:0e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:26 2026 by rpki-client