Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
File: Xhd799BDVEHRrbFIoizv4dbcwPs.mft (raw, json)
Hash identifier: jgrVvgsSj7o+lCBObYH9zBZt1Vly/ZaY5yKE9RNHlQ4=
Subject key identifier: B8:B9:55:DB:59:D4:8F:6E:D7:01:BE:06:93:BD:E7:97:F4:8F:1E:DB
Authority key identifier: 5E:17:7B:F7:D0:43:54:41:D1:AD:B1:48:A2:2C:EF:E1:D6:DC:C0:FB
Certificate issuer: /CN=5e177bf7d0435441d1adb148a22cefe1d6dcc0fb
Certificate serial: 019FF8DA2261A6A47E4279AC99AC364CEBDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
Manifest number: 012E
Signing time: Thu 13 Aug 2026 02:01:12 +0000
Manifest this update: Thu 13 Aug 2026 02:01:12 +0000
Manifest next update: Fri 14 Aug 2026 02:01:12 +0000
Files and hashes: 1: TYV20I1tmXmrFyD5hD9FE4IPKWU.roa (hash: cuvSEP8hQjrQh4a+NJD6WQS8i4OZ31Rtmx8MtCDraCQ=)
2: Xhd799BDVEHRrbFIoizv4dbcwPs.crl (hash: u2vomq+AmFR3X8a27QYAtMKsqlxncBfcLzqIWQ4RTdo=)
3: s8rf2tML831KhZ_f-0fAXEJkgew.asa (hash: vKjVcHxuUGRJ3DxPFJJe7VWqTLEgv9kq3d3TeM8pLOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:da:22:61:a6:a4:7e:42:79:ac:99:ac:36:4c:eb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e177bf7d0435441d1adb148a22cefe1d6dcc0fb
Validity
Not Before: Aug 13 02:01:12 2026 GMT
Not After : Aug 14 02:01:12 2026 GMT
Subject: CN=b8b955db59d48f6ed701be0693bde797f48f1edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:a9:19:cb:71:67:46:e0:4c:4c:66:c0:d6:
8c:eb:53:db:9e:c2:36:48:36:9a:0e:36:8a:88:35:
81:89:32:44:66:25:23:48:60:70:09:36:99:cf:7d:
5c:f1:e7:6b:e3:14:8b:ee:3d:f1:f9:58:22:a5:4f:
f4:85:7d:bc:62:a9:fb:6b:9f:ca:50:0f:2a:88:66:
09:4f:60:78:17:64:e3:a5:a7:35:18:1d:83:9d:c5:
f6:a0:b0:09:85:1c:cb:fa:84:c0:23:3a:cc:38:fd:
c3:d2:e7:5d:de:85:ae:30:29:4d:74:ab:a2:8a:c0:
6e:69:3c:6f:91:d6:c0:d7:08:d1:de:1a:b9:c6:16:
a0:bd:bb:5d:7d:8b:f6:26:6b:0c:42:42:2f:5e:4d:
e8:79:12:e6:0f:3f:c9:50:14:87:41:99:be:55:04:
26:07:99:31:dd:d4:21:63:ba:75:8a:d5:0a:01:14:
bb:bb:91:2f:20:20:a0:97:a3:f1:4a:4b:1c:a3:35:
47:e5:d2:51:da:f6:3f:66:38:74:9a:1a:c9:38:30:
4b:f6:18:6c:55:08:18:f9:0c:b9:0e:56:53:ca:31:
9d:15:c8:99:6c:61:ab:80:ee:ec:22:79:7b:aa:d7:
67:1a:de:37:7d:2c:0e:52:ba:88:b9:a0:34:91:94:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B9:55:DB:59:D4:8F:6E:D7:01:BE:06:93:BD:E7:97:F4:8F:1E:DB
X509v3 Authority Key Identifier:
keyid:5E:17:7B:F7:D0:43:54:41:D1:AD:B1:48:A2:2C:EF:E1:D6:DC:C0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:22:9a:de:cf:e6:6b:b5:0d:6f:9c:0f:fa:93:cb:9e:4d:7a:
8e:35:0a:a9:44:ff:b3:05:81:d3:1b:27:c6:e2:75:03:0b:ec:
14:a0:49:6c:e4:95:40:40:b3:f0:17:1f:f2:8a:d9:b9:df:10:
a4:f4:17:de:37:08:db:50:ab:c7:0b:b9:85:27:3a:1a:6b:64:
3e:43:b3:b9:d4:47:1e:80:00:2e:a8:21:88:81:c8:59:80:fe:
41:4c:10:6e:40:0e:1d:92:cd:d5:0e:c6:a2:61:69:72:73:11:
8f:28:64:1e:0a:ad:1b:e6:0c:37:fe:d3:cb:ae:0a:16:bd:73:
84:8b:26:7e:fe:f1:d6:d6:27:b7:2f:4e:68:f8:99:30:5d:75:
b4:26:ae:dd:b8:ab:98:e3:56:bb:52:4a:2f:bc:24:6f:80:b2:
81:cb:40:24:c3:d9:92:d7:fe:53:8b:a1:96:50:ed:49:1c:49:
c6:f3:08:b4:bd:90:8d:7e:89:a7:b0:f5:c3:6b:b5:ee:84:bc:
18:c9:cb:00:7b:f8:e6:df:74:f8:86:1f:3d:7c:42:05:c7:a7:
b4:e5:6b:5f:50:33:37:c4:57:7a:04:34:a6:1b:e8:a9:73:a0:
80:9f:d8:fe:61:52:71:75:3a:62:9f:2f:d5:fe:3e:54:e3:18:
4a:30:6e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:05:39 2026 by rpki-client