Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
File: Xhd799BDVEHRrbFIoizv4dbcwPs.mft (raw, json)
Hash identifier: CSiGQxLIaEQD0hfAovZMPM+ShwbaN8bxtqLZT2HlWcM=
Subject key identifier: 60:08:5D:E2:A5:CF:25:53:F9:71:DF:AC:71:DF:42:96:1C:C2:BA:00
Authority key identifier: 5E:17:7B:F7:D0:43:54:41:D1:AD:B1:48:A2:2C:EF:E1:D6:DC:C0:FB
Certificate issuer: /CN=5e177bf7d0435441d1adb148a22cefe1d6dcc0fb
Certificate serial: 019EFC165884B6C109C822D27F901E8F49BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
Manifest number: AB
Signing time: Thu 25 Jun 2026 00:03:03 +0000
Manifest this update: Thu 25 Jun 2026 00:03:03 +0000
Manifest next update: Fri 26 Jun 2026 00:03:03 +0000
Files and hashes: 1: TYV20I1tmXmrFyD5hD9FE4IPKWU.roa (hash: cuvSEP8hQjrQh4a+NJD6WQS8i4OZ31Rtmx8MtCDraCQ=)
2: Xhd799BDVEHRrbFIoizv4dbcwPs.crl (hash: RGrsyF7Hd+zbfSHOz+aEUn5VLO3It7gepte1+uMbIpE=)
3: s8rf2tML831KhZ_f-0fAXEJkgew.asa (hash: vKjVcHxuUGRJ3DxPFJJe7VWqTLEgv9kq3d3TeM8pLOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:16:58:84:b6:c1:09:c8:22:d2:7f:90:1e:8f:49:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e177bf7d0435441d1adb148a22cefe1d6dcc0fb
Validity
Not Before: Jun 25 00:03:03 2026 GMT
Not After : Jun 26 00:03:03 2026 GMT
Subject: CN=60085de2a5cf2553f971dfac71df42961cc2ba00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:dc:21:b6:b2:76:e9:d0:cc:68:3f:74:db:
91:0d:28:03:58:94:28:2e:d3:2f:73:47:ad:7b:78:
d6:e7:85:2b:82:93:9c:e5:fe:27:cb:18:72:95:ee:
9d:7a:4b:b8:a1:3c:09:6b:98:b3:08:8a:b9:3e:a0:
3d:16:23:de:ee:52:8f:3c:95:2a:a9:70:6e:af:92:
1f:b3:aa:ce:2c:cf:29:3f:ef:7d:b5:9f:d1:fe:06:
47:e4:6d:73:54:e8:54:47:21:bc:03:04:7c:ab:a1:
0f:a1:56:28:03:ec:92:5a:d8:24:57:b1:7d:ac:fd:
bb:08:11:16:f4:4b:c1:f0:ae:0f:c7:9e:83:78:83:
7f:e8:10:89:ec:e2:43:44:64:5e:87:f2:15:f7:0d:
8b:49:33:6d:16:aa:56:1b:d9:bf:5a:dd:e1:c2:96:
70:5f:e2:6e:92:58:48:6d:85:ac:1f:2e:c3:2e:22:
2a:46:40:4b:76:ab:84:48:e3:b1:bb:00:90:55:32:
75:1d:73:f6:4f:d8:1e:57:77:50:9a:52:53:8d:29:
f1:b4:91:00:6a:d1:a0:33:f9:5b:2e:81:75:73:21:
77:0a:c8:b4:8b:5a:99:3b:c6:32:94:76:8f:84:78:
b0:6b:d0:8b:76:fc:b9:c8:e8:fd:db:ec:fe:fe:df:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:08:5D:E2:A5:CF:25:53:F9:71:DF:AC:71:DF:42:96:1C:C2:BA:00
X509v3 Authority Key Identifier:
keyid:5E:17:7B:F7:D0:43:54:41:D1:AD:B1:48:A2:2C:EF:E1:D6:DC:C0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a4:e0:f8:cd:55:b4:cc:58:93:16:59:d7:ae:1e:33:30:96:
d8:d5:95:8c:18:d5:66:75:65:6e:c9:d7:cb:6f:5f:2c:c8:66:
3c:6c:13:5a:94:e7:68:1b:4a:31:6f:41:57:06:0d:8f:f7:dc:
cf:31:5d:56:07:8c:b0:c9:e7:08:5f:20:a2:e2:6e:0a:90:2d:
ac:bc:20:8e:5f:ed:fa:53:93:6f:30:8d:b3:76:ee:f6:6a:21:
5c:a1:f2:c2:48:41:9d:b5:41:1d:99:67:cd:5b:c3:e7:4b:ef:
4d:12:f3:34:3c:42:7f:3d:75:41:35:2c:22:d9:c0:c8:69:6c:
b8:66:0f:6a:cd:7a:d2:2a:3f:c3:7b:1e:85:51:e0:fe:bb:65:
ae:6c:f3:c2:98:ae:d3:5a:b4:04:90:0b:21:d3:6c:ad:94:b0:
b1:8d:9d:f8:b3:40:a3:c0:2a:fc:38:29:d1:7b:73:91:d4:b4:
8e:4b:90:e8:37:ed:69:4d:87:6c:ff:26:fe:a0:41:77:81:0c:
d1:3d:32:2b:fa:1e:a4:c2:12:e9:8b:97:e5:3d:2e:3b:d0:79:
21:0f:44:dc:27:00:4d:eb:91:f4:85:1f:64:05:4a:94:02:59:
51:41:86:99:70:a0:02:8a:9f:e1:72:6d:39:f3:e5:38:38:46:
d0:e9:69:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:35:42 2026 by rpki-client