Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier: 9UBPZya8GudtE58BaLmeS5ZcUKKS+acz6F2E7nKGONQ=
Subject key identifier: B3:C3:64:3E:35:6A:9D:F3:85:69:CE:44:FB:87:3B:8E:EF:1F:A7:42
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 019F94DBDBEB0604D72389AE8B9085CD578A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number: 1568
Signing time: Fri 24 Jul 2026 16:01:04 +0000
Manifest this update: Fri 24 Jul 2026 16:01:04 +0000
Manifest next update: Sat 25 Jul 2026 16:01:04 +0000
Files and hashes: 1: 2Pl1WOLsPcEe3IssGI6GqTdAUd8.roa (hash: xEvziGYE9gFL6LzKGBIz1s8KI0YFj5pJymQRSZymNEM=)
2: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: ZSC0mhr3s3yrEhSQtM9XqD017WNXdlg8fkIjTSeB0o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:db:eb:06:04:d7:23:89:ae:8b:90:85:cd:57:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: Jul 24 16:01:04 2026 GMT
Not After : Jul 25 16:01:04 2026 GMT
Subject: CN=b3c3643e356a9df38569ce44fb873b8eef1fa742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:b1:07:8d:fe:94:68:06:1c:4d:35:c2:01:
b7:cc:ef:fb:9b:f0:0b:36:e0:0c:3b:f2:32:e8:63:
d7:58:3c:b0:65:4b:b8:2e:ed:9b:48:58:cb:67:d1:
9a:b2:8f:2f:86:69:5e:d1:98:72:fb:48:db:66:0d:
61:c7:b3:8f:3a:d3:58:8b:78:5b:70:a0:d1:b5:e8:
ea:9d:97:ea:ca:ce:b6:97:44:64:43:bc:42:11:56:
a1:58:52:ce:33:58:21:b6:d0:96:a3:ca:b5:f8:b1:
c4:8b:2c:06:38:d5:b1:f1:48:dd:9e:fc:34:f6:c3:
6d:c4:e9:22:d0:9f:f1:9b:ad:8c:13:14:62:85:3c:
64:db:0b:de:9c:cb:70:a9:9b:0d:b8:b6:9b:eb:0d:
47:05:52:a3:7a:4d:53:a4:65:9f:6d:17:a0:5e:40:
6c:b9:67:22:92:d4:23:6b:5e:b0:0e:6e:ae:13:d3:
27:27:39:4e:52:0c:3a:a3:30:88:86:e0:2c:e6:67:
ed:73:c4:a4:7e:10:cc:e7:a8:f9:6e:cf:ad:d6:ec:
dc:8d:e8:f4:f4:08:cf:df:9d:05:4f:8d:20:14:b1:
45:37:7d:40:34:c9:bf:ae:6d:75:09:3f:c5:34:9b:
4e:c2:d4:58:28:3a:46:3e:1a:09:e0:e6:6e:0c:ac:
25:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C3:64:3E:35:6A:9D:F3:85:69:CE:44:FB:87:3B:8E:EF:1F:A7:42
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:07:a4:49:2b:dd:35:d7:05:38:61:b9:5d:85:78:ea:28:31:
4b:8d:d0:70:47:9d:df:4e:28:af:dd:c5:c9:cd:bb:a4:52:c9:
59:2e:6b:4d:41:25:e7:b0:5a:40:b4:3e:7b:d7:10:35:35:74:
4a:d1:22:cf:76:9c:a8:1d:23:c0:fb:0a:6b:b0:28:0f:e9:cc:
c3:f2:e3:fc:2a:d4:ad:e2:f9:bd:70:ef:89:ec:a9:18:14:58:
51:87:b3:2e:64:23:1d:73:92:e7:5a:7c:47:e1:82:62:1f:d6:
9b:36:95:d2:e5:0e:71:75:43:01:52:45:85:58:7b:46:c2:15:
d7:24:68:d0:cd:13:bd:0d:5d:5b:28:fa:cb:41:de:15:f4:09:
b3:04:e1:cf:d2:49:ec:5f:79:2e:62:60:2c:46:c6:b6:57:21:
4e:d3:d8:a6:f5:85:42:8d:61:5f:96:85:4f:a6:66:a8:21:fc:
97:a5:ff:bb:66:a2:f9:ef:ae:e7:8c:60:74:54:e3:f5:7f:6d:
8c:ee:11:73:b3:9f:31:5a:7c:ad:6f:4e:b8:14:cf:a0:f8:b7:
80:5e:d6:c8:e4:fd:79:79:6d:b5:84:15:64:f4:14:d4:81:b3:
06:16:85:87:a6:ce:8f:c6:6c:c9:89:dd:1b:e0:f8:b8:86:b1:
95:f1:e5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:11 2026 by rpki-client