Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
File: X7qw05-2l5_k09JIOgG908k77O8.mft (raw, json)
Hash identifier: MnXG3b6TITAHGKu9osUpm3V/niOZM6agyJaSlzYI1cU=
Subject key identifier: C7:A6:8F:58:57:B3:68:A2:33:89:6F:54:32:C0:4A:88:46:2B:1A:B9
Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
Certificate issuer: /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Certificate serial: 019FA228FF789D271D9C59CE2835B37121F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
Manifest number: 0EDF
Signing time: Mon 27 Jul 2026 06:00:23 +0000
Manifest this update: Mon 27 Jul 2026 06:00:23 +0000
Manifest next update: Tue 28 Jul 2026 06:00:23 +0000
Files and hashes: 1: Fnr8UBCRPeUQhRVFOAHVctCKPfo.roa (hash: PgOyYUmMG9zgljOcOgtP5byxd2cN3HfKRRt85MDBTwk=)
2: X7qw05-2l5_k09JIOgG908k77O8.crl (hash: 5t3HhBLzHPcLLNC4mp3ZPfrqwndVRPOH8zwOikNOqIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:28:ff:78:9d:27:1d:9c:59:ce:28:35:b3:71:21:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Validity
Not Before: Jul 27 06:00:23 2026 GMT
Not After : Jul 28 06:00:23 2026 GMT
Subject: CN=c7a68f5857b368a233896f5432c04a88462b1ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:d5:3f:c3:28:93:3b:90:db:d8:28:1c:16:
fc:cf:9d:6b:d8:06:24:37:1c:37:5d:17:bf:17:0d:
ba:1d:97:56:f2:bf:17:5b:9e:f6:d5:3e:a0:60:03:
da:26:b1:3d:49:0b:00:cd:b4:83:e8:e8:eb:25:69:
02:cc:e4:1e:a0:d4:8c:ef:9d:0d:12:4a:cf:88:46:
71:6b:92:bc:1b:5a:90:98:79:15:de:11:cb:c2:08:
82:3b:23:db:a2:d1:ba:2f:79:9a:3b:dd:b7:72:fc:
ca:23:7f:e2:fd:f8:73:71:e1:5c:76:49:23:6b:49:
cb:d2:58:d3:c0:e5:55:5a:9f:ce:fb:f8:5b:88:8e:
70:89:b4:52:7f:bc:02:10:9c:2e:b0:f3:8b:6d:56:
91:6d:df:5a:09:0f:e1:9f:ef:13:a0:fa:98:a9:b8:
44:1d:f4:51:9c:2f:24:64:70:05:66:62:5b:29:9f:
96:26:2f:14:23:6a:64:fd:4a:ce:05:54:f8:ec:5a:
66:39:ee:a0:f3:82:3d:68:2b:5b:37:b1:d3:ee:09:
cf:bf:1c:7a:93:94:bf:e4:43:a6:4d:c5:47:79:6b:
09:e4:86:ed:67:04:b8:96:6e:d7:e4:a9:9c:51:9b:
04:8c:d7:d7:87:f3:86:24:4b:7f:db:49:fe:e6:b6:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A6:8F:58:57:B3:68:A2:33:89:6F:54:32:C0:4A:88:46:2B:1A:B9
X509v3 Authority Key Identifier:
keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:da:38:9c:d4:e6:6d:4e:ab:c1:20:b8:a1:99:ab:d3:0b:cc:
72:1a:fa:1f:e4:74:43:db:7f:1a:e2:72:da:3c:18:03:dc:00:
54:e0:f7:92:91:ee:5c:42:e2:3b:7e:3b:15:56:80:51:a1:a4:
b9:27:71:ad:ff:f8:a2:d4:f1:66:33:52:a6:a2:4e:df:3f:47:
e8:d9:73:a9:06:0c:f8:be:e2:80:a3:9b:24:49:29:1c:6f:b4:
51:05:7d:38:ed:7b:9b:5c:8f:b3:69:dd:e5:11:b6:02:5b:8f:
ce:5e:fe:d6:11:e8:91:7b:10:e4:0e:7b:25:d0:0b:d4:84:1e:
dd:69:07:56:ec:b5:d4:4e:2a:fe:cc:09:e7:68:2f:03:95:96:
3a:11:6f:b3:9c:f3:21:50:0d:df:eb:35:af:4a:11:22:07:70:
a7:dd:03:07:ae:70:0f:f7:70:fa:ed:74:70:79:b1:9b:ae:ac:
6d:ee:3a:0f:51:eb:9c:2e:47:eb:47:79:df:bb:e0:b0:60:0c:
a6:db:2b:2d:cd:33:e8:ca:ce:a6:b4:aa:06:c0:46:59:e2:01:
95:18:aa:68:78:34:6a:a0:2c:38:41:1c:cc:ed:00:bc:37:52:
4a:44:b9:bf:0b:b3:3b:a1:00:88:40:0d:d5:ea:24:ae:7d:63:
af:f9:84:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iKP94nScdnFnOKDWzcSH1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmFiMGQzOWZiNjk3OWZlNGQzZDI0ODNhMDFiZGQzYzkz
YmVjZWYwHhcNMjYwNzI3MDYwMDIzWhcNMjYwNzI4MDYwMDIzWjAzMTEwLwYDVQQD
EyhjN2E2OGY1ODU3YjM2OGEyMzM4OTZmNTQzMmMwNGE4ODQ2MmIxYWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtjVP8MokzuQ29goHBb8z51r2AYk
Nxw3XRe/Fw26HZdW8r8XW5721T6gYAPaJrE9SQsAzbSD6OjrJWkCzOQeoNSM750N
EkrPiEZxa5K8G1qQmHkV3hHLwgiCOyPbotG6L3maO923cvzKI3/i/fhzceFcdkkj
a0nL0ljTwOVVWp/O+/hbiI5wibRSf7wCEJwusPOLbVaRbd9aCQ/hn+8ToPqYqbhE
HfRRnC8kZHAFZmJbKZ+WJi8UI2pk/UrOBVT47FpmOe6g84I9aCtbN7HT7gnPvxx6
k5S/5EOmTcVHeWsJ5IbtZwS4lm7X5KmcUZsEjNfXh/OGJEt/20n+5ragcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMemj1hXs2iiM4lvVDLASohGKxq5MB8GA1UdIwQY
MBaAFF+6sNOftpef5NPSSDoBvdPJO+zvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYzUyNGUtMTJiOC00ZGNjLThmMTAt
MzBkZjYyNDI5ZGYwLzEvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zYzUyNGUtMTJiOC00ZGNjLThmMTAtMzBkZjYyNDI5ZGYw
LzEvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOto4nNTm
bU6rwSC4oZmr0wvMchr6H+R0Q9t/GuJy2jwYA9wAVOD3kpHuXELiO347FVaAUaGk
uSdxrf/4otTxZjNSpqJO3z9H6NlzqQYM+L7igKObJEkpHG+0UQV9OO17m1yPs2nd
5RG2AluPzl7+1hHokXsQ5A57JdAL1IQe3WkHVuy11E4q/swJ52gvA5WWOhFvs5zz
IVAN3+s1r0oRIgdwp90DB65wD/dw+u10cHmxm66sbe46D1HrnC5H60d537vgsGAM
ptsrLc0z6MrOprSqBsBGWeIBlRiqaHg0aqAsOEEczO0AvDdSSkS5vwuzO6EAiEAN
1eokrn1jr/mEjw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:01:37 2026 by rpki-client