Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
File: _X5IAbAS8bGZsv0RqqxS13VjRzk.mft (raw, json)
Hash identifier: OpI7BHiJNnyi4MTiDeX4lInX1pgfvr4JoTrA146Vehw=
Subject key identifier: CD:16:4A:1D:26:4C:2F:BD:8D:B9:B2:A1:48:1F:4C:32:A1:87:E8:79
Authority key identifier: FD:7E:48:01:B0:12:F1:B1:99:B2:FD:11:AA:AC:52:D7:75:63:47:39
Certificate issuer: /CN=fd7e4801b012f1b199b2fd11aaac52d775634739
Certificate serial: 019F85D69EB6E3E969C4D2F909911B290715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:02 +0000
Manifest this update: Tue 21 Jul 2026 18:01:02 +0000
Manifest next update: Wed 22 Jul 2026 18:01:02 +0000
Files and hashes: 1: YDVKQbfRYIpm7hR70cFm_r3Bozk.roa (hash: aF7PQA8hwmlUZMld6dK9hesrrO56Rkyyowsvq4iO504=)
2: _X5IAbAS8bGZsv0RqqxS13VjRzk.crl (hash: FE9OURgI/mFdMLhgdoAoRscUc8qyOQkY+ERso5iU6PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:9e:b6:e3:e9:69:c4:d2:f9:09:91:1b:29:07:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7e4801b012f1b199b2fd11aaac52d775634739
Validity
Not Before: Jul 21 18:01:02 2026 GMT
Not After : Jul 22 18:01:02 2026 GMT
Subject: CN=cd164a1d264c2fbd8db9b2a1481f4c32a187e879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:0e:cd:e9:3e:df:21:88:a4:5e:ad:76:a5:
62:c7:5e:ec:25:c1:91:1e:1d:34:29:f0:72:ee:a1:
86:5d:7b:82:56:47:9e:e5:62:76:fb:0a:76:1a:1d:
66:8d:f9:61:f5:7b:52:3b:57:47:12:c6:96:e7:ad:
47:1b:ad:54:e5:99:8b:8e:8f:74:8d:26:d8:22:d4:
c5:44:22:34:7c:a7:ba:18:fd:4f:7d:ae:56:9e:08:
66:fe:33:c5:e3:67:f6:fc:4b:90:b8:d6:03:c8:b8:
d3:cb:90:d0:ac:25:c2:5e:7c:46:42:ba:b4:10:0c:
ec:67:ed:44:df:b6:cf:2b:54:03:80:d1:82:9d:94:
89:2f:b7:91:84:22:06:1e:04:10:69:d3:02:ac:0d:
a2:10:61:60:f9:c4:56:b3:54:44:c3:79:42:df:59:
fa:37:4e:b5:30:80:7c:9e:c1:57:19:88:be:57:b1:
8e:19:45:62:46:32:ed:73:2b:93:b9:f6:38:d1:ee:
4d:36:ce:12:95:e7:7b:14:2f:2e:a0:ed:ed:ac:c6:
23:96:79:97:a7:de:99:10:47:89:a0:31:36:6a:4c:
2a:9c:53:3c:7a:90:c4:74:46:b7:8d:3a:44:90:b1:
7e:fa:65:b3:22:33:49:d6:2c:80:d0:c2:a3:64:22:
d4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:16:4A:1D:26:4C:2F:BD:8D:B9:B2:A1:48:1F:4C:32:A1:87:E8:79
X509v3 Authority Key Identifier:
keyid:FD:7E:48:01:B0:12:F1:B1:99:B2:FD:11:AA:AC:52:D7:75:63:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:73:c8:fd:08:41:2f:4e:e6:a7:c5:c7:83:25:06:9d:ca:c1:
f8:2c:e7:6e:52:b4:3b:ec:28:e0:be:18:0f:cb:50:f2:62:42:
73:4a:97:21:2c:96:fc:01:85:40:ae:21:5e:98:56:f0:56:63:
04:36:7f:34:62:ca:92:cf:79:2b:8f:9f:97:65:3b:47:94:9c:
6f:0d:70:4b:a8:ab:78:51:43:5a:b6:d2:cf:b9:b9:0c:df:2d:
d5:45:10:ec:29:da:9e:db:18:47:4e:0d:92:06:02:e5:17:d5:
59:ef:8b:d2:a5:a1:77:82:ba:90:1b:9f:09:a2:47:ce:43:e2:
ef:48:c9:5c:df:42:18:9a:6d:20:58:51:4a:66:5e:47:34:b5:
74:49:b2:95:b2:12:77:fc:4f:22:db:8f:33:6e:6e:f3:eb:eb:
3b:a4:a1:b9:1f:2e:91:1f:4e:a8:7a:37:86:2c:e0:7c:d6:bb:
0b:c9:23:bf:44:33:de:d6:5a:c4:00:51:87:87:0b:6d:af:5c:
69:48:41:40:3c:0f:00:a4:a2:53:d2:9a:05:d7:fa:0b:b4:b1:
2c:25:7b:1f:cc:25:c6:ec:6b:02:85:ab:cf:ae:64:f3:6f:a8:
fa:9a:7b:2d:1b:76:9b:25:e5:bd:9c:a8:fc:23:9e:36:a7:fe:
f9:f4:da:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:07:43 2026 by rpki-client