Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier: gHsG2LgY6M7dcJVVmRf2JPk4I8luNQqSmB8wcZ08iTY=
Subject key identifier: B3:CA:08:0B:20:56:D0:A1:17:83:3A:BA:72:55:3F:C2:58:EF:80:DC
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 019F9135E47942E46A1134394D178792E31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number: 10E5
Signing time: Thu 23 Jul 2026 23:00:55 +0000
Manifest this update: Thu 23 Jul 2026 23:00:55 +0000
Manifest next update: Fri 24 Jul 2026 23:00:55 +0000
Files and hashes: 1: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: auXfKuWGw85nBGG582aGj/iTbI52xFvDz74hM+c73X8=)
2: nbiO0Qsuka11ZNMxAFy9dEINXys.roa (hash: NaboMvIQcJu7trkWGRw22aXFbkdnEJpMvSjIpYA2/ik=)
3: qTb1hfW2cZsJLmGnL2cnlmiyFfY.roa (hash: hklYadmGWp1kEGK+jtsPBwTIyJolTP2I0OScsQI8ZQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:e4:79:42:e4:6a:11:34:39:4d:17:87:92:e3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Jul 23 23:00:55 2026 GMT
Not After : Jul 24 23:00:55 2026 GMT
Subject: CN=b3ca080b2056d0a117833aba72553fc258ef80dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:e8:d5:86:f4:68:1a:f1:45:b8:ae:ab:85:
c9:0a:f5:5f:4f:af:88:b2:28:fc:3e:fd:62:aa:f6:
8f:8b:8a:dd:6f:99:75:d5:fa:a4:b2:59:7a:d9:78:
4d:56:df:9a:f1:63:e3:0e:3f:44:ff:fb:cd:62:e6:
d8:e7:9e:11:a3:ce:41:d0:96:4f:30:b0:f4:03:54:
bd:5d:e3:64:b5:70:94:21:75:bf:71:ec:0c:b3:d9:
87:7a:81:2e:d2:a7:aa:fd:31:37:d3:cf:b6:78:59:
41:c9:c6:a2:d0:b5:43:8e:b8:98:c1:4f:cc:70:77:
80:78:36:57:6e:df:b9:ca:be:9f:e3:56:29:a8:61:
dc:08:a1:86:f7:03:a5:89:70:44:c2:49:b6:49:53:
83:0d:87:20:b3:6d:c3:09:aa:fc:e0:35:70:ba:25:
d1:bc:96:e2:27:5d:7a:f9:40:a3:63:d4:b3:34:83:
dc:85:7d:f3:93:d3:c7:9d:bc:ab:62:2e:b9:1c:bb:
fb:24:a0:db:5e:61:ad:ba:29:9a:b3:11:27:c8:3b:
af:38:23:f5:7f:da:50:cb:7f:9b:9e:e8:60:57:ef:
0c:05:be:91:ff:07:dd:79:b8:f4:fa:ef:f1:5a:6e:
71:24:b4:ac:81:d1:42:69:7a:9d:7c:64:da:0d:fc:
43:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CA:08:0B:20:56:D0:A1:17:83:3A:BA:72:55:3F:C2:58:EF:80:DC
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4b:a4:2f:51:53:87:e7:8c:52:90:9f:a0:bd:7c:72:72:89:
2d:d5:ab:51:80:6f:48:b4:45:a3:26:b1:6a:87:f6:27:17:0b:
85:87:a0:40:06:97:10:5d:d3:b6:9c:a8:40:25:61:42:2d:73:
2e:9a:aa:31:63:d8:e9:eb:b7:8d:c7:a7:2a:95:6f:72:21:15:
9d:9c:c9:2c:6e:b4:20:f6:c7:b8:b9:0d:f4:14:e5:6e:0d:28:
89:cf:ca:c2:a0:0c:3a:47:79:f8:13:e8:2f:c1:4f:0c:de:a9:
bc:14:54:cb:9a:10:21:8a:ea:b7:63:cb:23:d7:99:53:ac:d8:
d7:4f:7f:c6:2d:5a:44:bf:0d:64:68:e1:cd:9f:b6:c9:72:b2:
bf:d9:4f:c1:af:ed:20:ea:2c:48:36:99:7e:63:f7:49:70:eb:
44:6c:74:5f:0c:64:de:94:90:4c:69:14:6f:d6:f8:60:97:34:
b2:97:b8:94:1a:85:ea:02:2d:16:d8:c6:47:f5:b2:3b:6d:40:
e0:bf:64:d0:bd:5e:ea:1b:f8:29:c6:8c:f3:82:dd:35:89:1c:
6f:68:5a:ed:cd:77:fb:a2:5c:f4:99:87:2e:e3:7f:9b:c7:1b:
04:31:11:69:da:04:7a:55:60:54:91:d8:be:cc:e0:5c:10:32:
18:c7:ee:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:30 2026 by rpki-client