Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: U2yqD/RVEGe49/8WBNzH9JN09pmoVxktJVnfxQMCIfk=
Subject key identifier: 56:0E:1C:53:B2:5B:8D:0A:7D:32:BB:DA:E8:26:BA:7D:A8:B3:4B:BC
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 019F11F7F260B34435F3BE4D1DD6EA64F165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 06:01:29 +0000
Manifest this update: Mon 29 Jun 2026 06:01:29 +0000
Manifest next update: Tue 30 Jun 2026 06:01:29 +0000
Files and hashes: 1: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: pPDB2WecEFpctnT9huIP+3sPesHgc8F56ut1T056/TY=)
2: awXRcerSAP4jrgOUBQ68Ss0j_JE.asa (hash: 7H/s8bfQHFW6k1q0+FHWfKFzwz0TBvvLD09+Qjh3Rf8=)
3: mde2iraZFBwTbp97_tvjs2IMwjU.roa (hash: Q0iRTXsb5myu//hBM4zbKFOJNKJsTWjqhNvukcS55wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:f2:60:b3:44:35:f3:be:4d:1d:d6:ea:64:f1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Jun 29 06:01:29 2026 GMT
Not After : Jun 30 06:01:29 2026 GMT
Subject: CN=560e1c53b25b8d0a7d32bbdae826ba7da8b34bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:97:69:ba:51:bf:a6:28:6f:da:8a:d5:55:72:
44:ee:cd:11:94:d8:31:1b:05:f6:e1:49:53:58:2b:
d7:5f:51:c1:d8:13:62:d1:a4:05:c4:42:ff:8a:1e:
50:c2:ea:72:2f:01:16:51:45:ea:2c:e2:33:ee:14:
fe:11:fd:e1:8d:38:27:c3:46:a8:3b:c9:f7:12:64:
42:c5:8e:96:52:68:f3:d2:27:1c:6f:24:28:e5:87:
ca:ff:e4:2a:0e:2b:de:36:89:76:cc:7b:0c:ef:31:
cb:29:00:2b:14:6c:90:4c:9d:25:75:88:7d:1e:b7:
0b:73:95:a9:40:44:ab:4f:04:b5:6d:61:16:f9:be:
82:e7:2b:93:ae:42:15:b8:84:67:03:a1:3f:02:b0:
3c:b3:51:23:02:a9:90:e2:d3:bc:82:7f:b9:8e:2b:
cf:6f:ef:33:c6:d1:df:d1:18:05:c5:dc:96:08:a5:
2f:b2:82:2a:9e:96:8f:68:28:b4:5c:60:3d:a8:1a:
ba:f8:49:9a:29:09:4e:aa:ca:95:84:1e:95:83:91:
02:80:ff:e8:31:4d:2a:18:d0:b2:cd:f7:19:39:9c:
5c:ae:10:0f:58:e8:55:43:5d:9d:57:b7:f5:9c:46:
30:ce:09:50:80:71:3a:5c:09:39:08:bc:f5:69:a2:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0E:1C:53:B2:5B:8D:0A:7D:32:BB:DA:E8:26:BA:7D:A8:B3:4B:BC
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:78:41:c6:22:b3:bf:09:90:da:0e:92:60:a9:9a:18:5c:1a:
2b:67:7c:b8:b9:e1:ba:7f:0d:de:95:fe:e2:7e:6e:f9:76:e1:
3a:d1:fa:94:16:b3:9f:0a:ff:44:5d:62:8e:09:f3:9e:e2:bb:
1e:28:42:24:7b:df:8f:4e:84:35:a8:94:8d:12:02:2c:75:ec:
68:f4:ad:76:ae:3e:b4:c6:e3:f1:16:08:a4:50:31:ee:ef:b3:
eb:9b:38:1b:0b:55:c7:d5:e9:86:f0:70:b7:6d:6d:15:b2:49:
42:54:10:df:f1:50:a2:e0:62:47:46:c0:8a:aa:2f:ee:15:85:
ef:42:25:36:67:c6:25:5d:7f:12:79:45:0f:99:a4:b6:36:33:
77:3f:80:72:57:e1:d3:f4:5c:5d:ad:5d:c6:ed:0e:bb:c1:fd:
9d:b4:ad:d2:d0:6d:c2:25:a6:91:57:cd:26:84:44:d4:24:4e:
e1:be:ad:ba:78:0e:ff:88:20:7c:84:e7:23:56:04:38:31:c5:
55:82:ce:0c:51:d6:dc:1c:7c:d1:f2:89:f8:0e:6c:1a:63:12:
da:97:38:7f:28:3a:6c:b4:13:ca:6b:2c:87:53:c0:cf:e9:78:
3d:2d:33:94:dd:48:d0:1a:2b:8b:48:e2:9a:b1:08:7e:fd:af:
36:7a:aa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:34:40 2026 by rpki-client