Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
File: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft (raw, json)
Hash identifier: JNDSMPoGNy1FT9cJQcC7CJRr6x0rtT7qfK8XPvm9ih4=
Subject key identifier: 67:C6:09:DE:8A:5E:20:81:69:72:23:BD:D7:56:07:55:CC:F2:87:A0
Authority key identifier: 5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
Certificate issuer: /CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Certificate serial: 019FA0A8A0E0FBEFACD4319E87EE4078945B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
Manifest number: 01E6
Signing time: Sun 26 Jul 2026 23:00:33 +0000
Manifest this update: Sun 26 Jul 2026 23:00:33 +0000
Manifest next update: Mon 27 Jul 2026 23:00:33 +0000
Files and hashes: 1: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl (hash: vaS/aSz5P+71l9PtEg9ZsHWfLrbyVq3IOmUwkGzV4MI=)
2: sILmqECvPUOwIkOHOOhRTao7v74.roa (hash: llFUAC/mu2lwxUsJ40bzdjW3ddWww0AROSXO714SrqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:a0:e0:fb:ef:ac:d4:31:9e:87:ee:40:78:94:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Validity
Not Before: Jul 26 23:00:33 2026 GMT
Not After : Jul 27 23:00:33 2026 GMT
Subject: CN=67c609de8a5e2081697223bdd7560755ccf287a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:ea:46:dd:81:22:d0:83:f3:16:15:44:d0:
d0:39:86:42:6d:b6:d5:4a:ff:50:e9:d2:bb:a6:8a:
f1:72:fa:2e:12:39:8c:21:11:e8:43:33:73:db:55:
01:79:a8:20:44:fc:e6:af:a0:23:fc:47:5b:4d:47:
ca:bd:c1:cf:10:82:a0:72:9c:ea:47:5a:e9:1e:d2:
20:35:78:29:a3:01:c8:26:ae:c8:e6:fd:14:ca:3a:
6d:0c:b4:c1:c4:cd:d0:7c:65:ed:55:25:12:a6:fa:
b9:b2:17:cd:5d:6f:8c:94:d7:d3:e6:08:fd:1c:95:
2e:6f:24:2e:ea:98:1c:88:0f:99:8f:80:60:4f:25:
d8:f7:98:01:99:a6:5f:ce:97:52:af:7a:aa:b7:39:
13:25:e1:92:70:fc:7e:22:e7:28:86:20:20:a4:a9:
be:01:a9:c6:06:79:61:ce:56:3e:93:05:b8:88:a6:
2f:bd:96:80:81:af:dc:c0:97:cd:e9:ff:c4:81:28:
38:7e:d7:1b:44:76:f5:43:ef:05:9e:72:81:12:ad:
b9:cb:d3:e4:81:ac:ab:cb:10:5b:95:29:45:e8:23:
33:82:98:54:dc:d9:53:34:7b:55:44:7b:6f:a5:c8:
93:bc:87:aa:9f:6d:43:79:fa:70:df:0e:ef:65:b3:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C6:09:DE:8A:5E:20:81:69:72:23:BD:D7:56:07:55:CC:F2:87:A0
X509v3 Authority Key Identifier:
keyid:5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:f9:09:4b:79:d4:51:2e:e1:3b:70:c7:5d:df:c7:ed:d5:7f:
6e:b6:25:eb:4d:d8:18:ab:d1:08:29:41:4c:a8:32:81:54:08:
19:2d:3d:b1:ac:06:74:6e:01:c2:98:18:0a:b4:77:2d:36:f5:
fb:a3:f8:e9:11:f0:11:1c:66:b4:13:40:40:9d:84:a9:20:a7:
df:0a:48:df:5b:bf:fa:85:f1:2f:1a:0c:6a:f0:b4:77:f4:08:
55:53:50:c7:7a:03:df:5d:e3:92:6f:8f:3b:af:17:a1:ee:6b:
7e:a7:44:49:59:91:ed:59:a3:5e:c3:70:b0:4f:c7:81:e6:c4:
ed:ff:e0:b5:da:b1:82:39:c3:b4:83:5e:50:52:6b:73:1c:46:
31:23:6e:d5:bb:e0:cb:99:a9:dd:f5:09:d5:05:6f:b0:23:37:
8c:f3:1d:19:b7:0f:dd:62:01:90:71:f5:26:ef:14:c9:50:51:
41:d3:92:82:ab:f3:8b:3c:cd:d1:69:46:2b:3e:16:38:20:51:
cb:13:a6:73:d2:24:26:63:c8:0a:ec:b2:d0:88:67:74:73:a9:
95:36:86:ca:20:5c:29:d0:1c:8a:a7:55:85:b8:f3:23:7f:07:
97:74:77:fa:7d:a1:47:54:9a:7a:48:81:6a:90:9d:5f:f6:4f:
2f:d6:76:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:31 2026 by rpki-client