Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json)
Hash identifier: KprGVF42oeWGasQi3Jxz2Lx3UCnuZTq3AG4cXcTswq4=
Subject key identifier: A3:DE:3D:B5:C8:59:46:38:F1:8A:64:8B:CB:72:81:6E:04:FB:6A:FA
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial: 019FA1F2B692450F6BADEFC2FE102EEF2E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
Manifest number: 08AD
Signing time: Mon 27 Jul 2026 05:01:05 +0000
Manifest this update: Mon 27 Jul 2026 05:01:05 +0000
Manifest next update: Tue 28 Jul 2026 05:01:05 +0000
Files and hashes: 1: TYmQbCMoT4fS2qLD8XTST39V7ao.roa (hash: AGtO8iqNaCFj7ECH8S64l5TD2JUqi3IXF+NQdgnWnfk=)
2: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: pdE+k0BSvTxJnLoYiNcvGy5wo76xzFTDxfoLW6ZQvkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:b6:92:45:0f:6b:ad:ef:c2:fe:10:2e:ef:2e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Validity
Not Before: Jul 27 05:01:05 2026 GMT
Not After : Jul 28 05:01:05 2026 GMT
Subject: CN=a3de3db5c8594638f18a648bcb72816e04fb6afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:38:54:e8:9c:22:91:87:ad:cb:5a:02:cf:
3e:54:6b:57:2b:da:59:76:9f:17:c5:ff:9d:3b:9b:
52:b4:e3:54:a6:3c:dc:63:00:ba:c3:92:d7:b4:d0:
1f:5b:6f:8e:a0:6a:26:59:57:a4:21:c9:6f:68:43:
cf:c3:b3:e0:70:2a:05:e5:1c:55:f7:76:23:cd:d5:
fc:84:68:59:da:be:20:be:fa:e2:e4:9e:eb:dd:1c:
92:45:95:11:4c:29:bf:f4:f3:05:37:ae:0d:d2:c0:
e8:6c:c4:db:12:16:0c:10:57:d2:9e:ec:9c:8c:73:
73:61:18:6e:b9:af:ff:64:1b:a5:5c:2a:e1:75:cc:
e1:6d:45:f8:ab:2e:ad:51:1f:cf:bc:16:ac:86:85:
35:db:5b:a0:7c:6e:1d:6f:1c:8e:ce:27:a5:80:cf:
d5:a7:84:13:c3:bd:02:99:4f:fb:22:a0:9d:51:f3:
d2:3c:8e:90:6c:f6:ec:f4:f0:7d:60:2b:be:55:65:
48:d9:0a:90:3c:ae:e3:d0:4d:80:92:92:cc:ae:8f:
72:76:9c:bc:70:7b:75:5a:75:72:12:cc:a2:8c:af:
3d:37:b0:2f:6e:fd:02:be:4e:dc:48:f6:14:5a:8c:
48:f8:db:9b:51:22:16:d7:9b:ba:6c:66:1b:1a:b0:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DE:3D:B5:C8:59:46:38:F1:8A:64:8B:CB:72:81:6E:04:FB:6A:FA
X509v3 Authority Key Identifier:
keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:de:77:03:46:89:de:6d:44:e9:99:10:9e:51:3e:49:d6:37:
fc:4b:33:60:a1:69:29:5f:b3:9a:e1:30:47:db:bc:a1:1c:5f:
37:fa:24:42:da:5d:78:7f:e2:57:cf:3b:35:14:48:de:0b:d4:
58:ee:c2:03:5c:b2:e8:a9:2e:17:7c:60:f3:ed:b6:f1:b3:1c:
16:ca:ba:ce:3c:b6:19:a8:34:8e:6f:3c:4b:2e:dc:76:e9:39:
c4:ab:9c:25:cc:55:d1:ea:87:bc:40:f2:8a:06:67:f0:4d:ff:
4e:b2:6d:f9:97:ea:40:67:ac:8f:98:1d:69:b6:62:42:fd:b5:
9a:06:36:6b:f7:e7:64:e6:5d:41:1c:e1:29:3a:e7:1b:9c:26:
9b:32:6b:56:e5:2a:67:e3:8f:0e:67:85:eb:b6:ef:8b:32:60:
0a:9e:de:88:68:ed:27:a9:e6:9b:fc:4d:79:c5:b1:1f:06:6b:
99:46:f2:a3:62:0f:38:8d:11:c0:75:3d:f4:63:33:4a:83:91:
e4:0c:ba:ea:ff:2f:cf:5c:b4:a3:6f:bb:bc:2d:2c:00:b1:42:
34:94:f3:b0:7d:a7:7e:93:b4:6f:87:37:ab:45:ab:61:f1:1b:
6b:29:a9:c3:54:f2:54:a5:58:45:23:7b:fe:05:1f:5d:0d:be:
30:9e:1c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:40:43 2026 by rpki-client