Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json)
Hash identifier: q4FlfGiqcSHXhP/4kgSb9K9TX46TApUnVBULhGnG1XI=
Subject key identifier: 4B:85:6B:E8:CB:53:63:5E:28:7C:52:A2:81:50:D3:A9:90:A7:D5:72
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial: 019FA1F2C54DBBAC00B6372858F984233A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 05:01:09 +0000
Manifest this update: Mon 27 Jul 2026 05:01:09 +0000
Manifest next update: Tue 28 Jul 2026 05:01:09 +0000
Files and hashes: 1: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: hHMPTCv/W9jNGI5y/JavISJ3B6qgLwbC3fQiwIwTMAE=)
2: cF9T-jxoP9kV3otKbs6wprWqe14.roa (hash: By9z72uPVXpGvtlPCEnMJBu0BtKh3WPCweFaBQSyntA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:c5:4d:bb:ac:00:b6:37:28:58:f9:84:23:3a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Validity
Not Before: Jul 27 05:01:09 2026 GMT
Not After : Jul 28 05:01:09 2026 GMT
Subject: CN=4b856be8cb53635e287c52a28150d3a990a7d572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:25:81:17:88:e7:a6:72:c2:62:6b:0e:96:
96:14:22:06:7b:65:3f:1d:86:92:cc:64:92:63:53:
cc:47:85:fd:ee:75:54:b4:99:5c:04:19:31:6f:85:
6b:1f:9e:05:5f:0c:f2:28:69:df:52:af:bc:b8:e1:
d5:64:19:0c:b1:a6:a4:23:81:57:40:6e:1f:48:4a:
b2:ac:a2:70:6e:92:a6:5e:50:67:35:ba:b1:67:9b:
1b:e6:c7:cc:ef:c7:94:0c:0a:d5:1c:86:32:e6:3e:
3a:92:6f:9c:4e:ed:23:5a:25:02:8f:7e:3f:67:db:
86:72:97:3d:c7:54:77:fb:c5:c8:ea:cd:48:7c:6f:
92:b6:77:f4:c0:7c:fd:0e:64:20:ff:e5:40:93:50:
7a:62:dd:14:2b:02:8c:24:d6:c0:0d:f6:10:0f:ef:
f0:fb:fb:4d:97:12:e0:84:86:40:2a:dd:f0:81:5f:
09:35:32:02:0f:bc:f9:8d:1f:1d:ef:cc:88:9f:3e:
a9:27:e4:e5:7d:de:46:c0:cd:44:62:60:6f:ce:cd:
a5:1e:47:1d:f6:a9:c7:37:54:46:b3:b7:1f:57:f2:
45:cc:2d:36:02:a6:aa:da:4a:22:aa:3f:4d:a5:c4:
64:ae:61:3f:17:13:e8:2d:d2:71:bf:fb:da:c5:e6:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:85:6B:E8:CB:53:63:5E:28:7C:52:A2:81:50:D3:A9:90:A7:D5:72
X509v3 Authority Key Identifier:
keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6e:46:cd:6a:81:b9:d6:0f:8e:9b:14:c0:0c:40:71:c6:6b:
d6:3c:6c:ad:ee:97:7c:97:58:a7:d0:0c:a5:a4:4b:6d:50:59:
7d:eb:99:63:d4:cc:41:23:d1:95:fb:30:19:1f:c3:ca:1c:e8:
94:68:ce:79:6b:4a:9f:ac:06:ff:8b:15:da:b0:71:f3:23:9e:
7b:93:cb:16:96:57:06:56:d7:4b:70:4c:7b:4e:0a:5c:ee:f9:
52:64:28:ff:5d:59:5d:a9:c9:17:a3:6a:3d:81:f3:0a:61:9e:
42:5d:6f:70:25:ec:a6:63:89:81:83:cb:7c:88:94:58:2d:df:
2b:49:0e:71:bd:fc:cf:6c:31:c3:59:a6:f5:55:03:f0:0d:68:
d6:25:f4:8f:ee:0b:0a:bc:80:17:a8:05:a5:c5:e5:7e:35:18:
c4:e6:46:8c:9a:a7:7e:ed:32:44:e9:88:6c:94:2d:65:b9:25:
49:4b:c9:c7:77:9b:be:97:73:97:0a:a6:97:0f:40:11:2d:5e:
66:02:b9:30:2b:1c:53:22:5d:25:52:fe:05:48:d2:35:d4:b3:
3a:44:3f:0a:40:f9:06:d0:aa:6b:a6:c5:01:d3:5f:64:1f:bc:
d8:09:23:0b:b7:34:37:3d:d7:11:65:17:3e:94:b7:b6:1a:1f:
f3:33:f4:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8sVNu6wAtjcoWPmEIzqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZjlmNGVjYzVkMDUwNzYyYzU1Njk4NDQwZjg1ZWE5NmY3
MzMwZjIwHhcNMjYwNzI3MDUwMTA5WhcNMjYwNzI4MDUwMTA5WjAzMTEwLwYDVQQD
Eyg0Yjg1NmJlOGNiNTM2MzVlMjg3YzUyYTI4MTUwZDNhOTkwYTdkNTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwMlgReI56ZywmJrDpaWFCIGe2U/
HYaSzGSSY1PMR4X97nVUtJlcBBkxb4VrH54FXwzyKGnfUq+8uOHVZBkMsaakI4FX
QG4fSEqyrKJwbpKmXlBnNbqxZ5sb5sfM78eUDArVHIYy5j46km+cTu0jWiUCj34/
Z9uGcpc9x1R3+8XI6s1IfG+Stnf0wHz9DmQg/+VAk1B6Yt0UKwKMJNbADfYQD+/w
+/tNlxLghIZAKt3wgV8JNTICD7z5jR8d78yInz6pJ+Tlfd5GwM1EYmBvzs2lHkcd
9qnHN1RGs7cfV/JFzC02Aqaq2koiqj9NpcRkrmE/FxPoLdJxv/vaxeaUJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuFa+jLU2NeKHxSooFQ06mQp9VyMB8GA1UdIwQY
MBaAFF/59OzF0FB2LFVphED4XqlvczDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzkt
NGMxZTQ5ZWM4ZjE2LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzktNGMxZTQ5ZWM4ZjE2
LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiW5GzWqB
udYPjpsUwAxAccZr1jxsre6XfJdYp9AMpaRLbVBZfeuZY9TMQSPRlfswGR/Dyhzo
lGjOeWtKn6wG/4sV2rBx8yOee5PLFpZXBlbXS3BMe04KXO75UmQo/11ZXanJF6Nq
PYHzCmGeQl1vcCXspmOJgYPLfIiUWC3fK0kOcb38z2wxw1mm9VUD8A1o1iX0j+4L
CryAF6gFpcXlfjUYxOZGjJqnfu0yROmIbJQtZbklSUvJx3ebvpdzlwqmlw9AES1e
ZgK5MCscUyJdJVL+BUjSNdSzOkQ/CkD5BtCqa6bFAdNfZB+82AkjC7c0Nz3XEWUX
PpS3thof8zP0Qw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:23:37 2026 by rpki-client