Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File: XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier: N/QNqWyV1afgffTuyksZe1RF5maHKPEWzq99x0YVK5w=
Subject key identifier: BD:94:94:41:D5:54:CA:BA:66:C6:B2:03:EE:7D:03:7E:B9:78:89:60
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 019FD1CCBED963CB426EF2A17EE5037C62DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number: 11A7
Signing time: Wed 05 Aug 2026 12:01:24 +0000
Manifest this update: Wed 05 Aug 2026 12:01:24 +0000
Manifest next update: Thu 06 Aug 2026 12:01:24 +0000
Files and hashes: 1: 2LxanPXEt-Ah2tA9EYIfUY7a7ZY.roa (hash: Uywc9u8hm/WxjQy7SxAxxYIxsP7UM6R3hTnst6UR3yE=)
2: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: F0Mm24tlx8aYrIG2011Tn/tNCxa/odhQnEhrH33/wAI=)
3: XN_BGWEzxZjhg6iXlmQqSDhpeZU.roa (hash: nt1Dqzzch0xHlTVsHiqUIJZJJ7P5OL+fpAG1RALu8GE=)
4: cDTj5s606sVgmgpZ3n6Z3dU4zwA.roa (hash: Tz/Xa89Xe7rgKjUL5hIFqnaSfDilwgGaKsizO4oAEvI=)
5: fQWCmfLdQl9kgPQ8VBdW1T6y5WQ.roa (hash: c6z+qlka4njKh+KsSdKsKGpsRerVkXlOyNamnYTlXAw=)
6: hVXu442W8sHVh8F2wI339U-u6hw.roa (hash: tfQAfvgbfBIutk9LhU3LMYfREhO9WhUNbbEaKiJKIO4=)
7: pwg2Pcu7xQM-Nr6mzrIBgEt_XFI.roa (hash: lF7Ckm/bTHOWi8Xtom4+V7QF19TxeutNBXq6gqp0Yv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:cc:be:d9:63:cb:42:6e:f2:a1:7e:e5:03:7c:62:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Aug 5 12:01:24 2026 GMT
Not After : Aug 6 12:01:24 2026 GMT
Subject: CN=bd949441d554caba66c6b203ee7d037eb9788960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:2d:2a:df:6f:06:8a:98:08:b8:ff:7d:ee:
6f:6c:3e:60:23:51:91:ed:52:23:08:67:60:c6:7d:
b9:ff:34:65:19:d8:19:a1:15:59:25:62:95:1a:4e:
5a:99:1c:c8:0b:4c:59:c5:f5:63:b9:60:66:56:05:
3e:77:c2:df:a7:a2:08:36:8b:a3:68:e1:a0:82:7f:
5a:3a:9d:07:cb:58:36:81:be:00:f4:db:e8:23:a9:
34:c3:53:32:24:28:ea:45:2e:6c:55:2c:ba:34:a0:
41:a9:e6:93:ca:16:58:80:7c:70:77:03:46:75:0e:
56:b5:f8:27:00:75:4f:83:7f:d1:f9:22:7d:40:c7:
b4:0d:2a:e2:27:b5:68:57:ce:f9:8f:41:ed:86:e8:
9b:8a:03:ce:b0:d0:ed:bb:e9:0f:e4:34:2e:ea:65:
06:7d:66:83:23:35:4f:2f:9d:38:e1:80:fa:10:b7:
e2:e6:7c:79:7b:a9:a7:8b:9c:4a:49:0e:e6:f1:72:
8c:12:da:d1:50:56:ae:46:f0:06:60:2b:f0:62:ab:
2e:85:b0:c3:eb:ce:6c:7f:23:93:c2:10:e3:2e:29:
e4:fe:8e:d5:b1:84:34:8f:90:4a:79:80:4e:bb:9a:
73:39:b2:d1:fc:66:46:85:da:8b:ca:55:a1:c5:08:
ad:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:94:94:41:D5:54:CA:BA:66:C6:B2:03:EE:7D:03:7E:B9:78:89:60
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:62:9e:2d:5b:af:71:63:0e:69:4c:73:31:a8:be:40:93:82:
59:c7:d7:cb:8e:fa:b7:e6:a5:d0:5a:b6:18:27:75:b7:75:6d:
25:eb:8b:1a:fb:a1:fb:9e:32:d9:3b:02:b3:62:29:99:c7:dd:
30:cd:1a:49:4b:9a:e1:cb:83:0a:d7:c8:8f:42:aa:4a:23:d2:
94:f4:db:f6:2b:ac:fc:bf:3b:57:e4:38:d5:2a:ba:35:21:04:
48:a4:5b:aa:4a:aa:17:51:09:50:fd:f9:84:bd:da:a3:06:04:
98:60:d3:b3:3b:43:ae:b2:9d:d8:d9:c6:86:d0:cb:55:0e:46:
4d:e0:81:ef:95:a0:ca:dd:ae:74:cb:80:2b:ca:90:ea:bc:1b:
66:0e:ac:96:44:f2:c8:05:17:fa:2b:70:ed:13:b0:fb:59:7b:
33:db:ba:8d:a7:81:58:0f:18:2d:e8:f6:6d:77:8b:14:b1:96:
01:55:29:96:50:4c:0c:00:6b:e7:8d:8b:95:13:29:66:d2:dc:
9f:be:2a:00:3d:1e:17:5b:7a:17:4c:a6:26:84:52:9c:88:45:
04:b8:74:56:d8:4a:18:5a:d6:ad:93:e9:76:0e:52:64:41:18:
b8:6a:1a:46:94:20:33:7a:6a:f0:e8:84:9c:d8:2b:15:9a:bc:
78:e7:35:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 15:08:44 2026 by rpki-client