Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: 9LjsQPvf4kmmpLhjgYpy9NRlete7CrgAGnf8ptAt8Yw=
Subject key identifier: B3:8C:95:2E:ED:5D:E3:56:40:50:9B:C2:DB:FC:57:70:A9:59:BD:2A
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 019F84FACF6798B49397761C5C846F517A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 07B5
Signing time: Tue 21 Jul 2026 14:00:57 +0000
Manifest this update: Tue 21 Jul 2026 14:00:57 +0000
Manifest next update: Wed 22 Jul 2026 14:00:57 +0000
Files and hashes: 1: Gkzr8cmq5l-SJW535VAbg6PLMB0.roa (hash: Y4hmK6YPKNo9n40cQMscOcZSxtVZskzUJfJT11sn8vQ=)
2: OpYOp0A5IPKJ7jbcXskpSxQGlaQ.roa (hash: rADmm3meTWoAJpb+yfOPFFjI2xZfTZaGcVmBPuOR9B8=)
3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: wM3MdcPtzt3wvctO3xDg5RvdGLAmiOFzYFxFUBGEa2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:cf:67:98:b4:93:97:76:1c:5c:84:6f:51:7a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Jul 21 14:00:57 2026 GMT
Not After : Jul 22 14:00:57 2026 GMT
Subject: CN=b38c952eed5de35640509bc2dbfc5770a959bd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:5e:06:d9:38:33:4b:33:48:3c:25:40:a0:
d4:23:4b:6e:ae:fe:d3:18:cd:40:68:48:e1:57:13:
a1:9f:ea:c2:e9:33:87:4a:e7:a2:46:7f:ae:eb:3e:
19:73:36:0f:ff:f5:ed:84:ab:f3:c1:0f:e1:e5:aa:
27:d1:ad:e7:d0:f9:64:21:cc:be:ea:0d:a6:6a:23:
b5:aa:1b:8f:2d:76:e3:10:44:1b:89:26:73:a2:ca:
61:75:37:8c:6b:36:55:d4:d2:bb:ac:dc:00:92:ce:
86:fc:66:ef:c6:b3:db:7b:52:f9:0e:20:e5:22:c1:
cb:31:41:a7:d4:cb:f2:36:5e:e0:02:d1:39:a5:61:
1d:d3:07:fa:33:d3:b9:ac:ce:e9:f4:a8:83:6c:81:
94:09:67:4e:25:d1:80:21:57:ed:ab:d3:cc:60:a2:
0a:27:13:79:4b:04:2c:64:05:92:75:b5:67:47:16:
41:e0:7c:37:f0:ee:ef:de:75:34:17:36:1f:3f:e9:
c0:66:79:6f:cf:ac:3e:a4:d3:c3:d7:58:78:db:7e:
de:4a:45:42:f8:7c:5a:32:36:74:64:ea:49:72:22:
31:ce:d6:cb:9f:2d:b9:62:6c:5d:33:59:e0:0c:90:
6b:82:1c:72:c6:f2:19:fc:bf:84:73:e9:4c:68:1d:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8C:95:2E:ED:5D:E3:56:40:50:9B:C2:DB:FC:57:70:A9:59:BD:2A
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:16:37:60:c1:df:39:6e:05:25:27:bb:7f:74:77:31:f2:63:
26:da:2a:9e:70:19:f0:39:47:b6:b0:8c:f3:81:2d:cd:5c:1d:
62:a5:74:2d:c8:58:5e:9a:90:b3:3c:9b:0c:58:6d:4b:31:06:
df:02:64:cf:d5:c4:ea:4d:19:2a:d5:d8:bf:cb:58:db:c4:1e:
44:e8:7e:5b:bc:40:fd:c7:70:b7:48:26:65:2d:ef:1c:e6:fe:
94:24:04:fa:07:0f:1e:3d:d2:60:65:38:1d:87:31:9e:1a:7e:
e9:01:88:27:31:02:2b:0b:48:6d:93:b3:a4:75:fd:f1:28:1d:
93:d9:df:9c:4d:fe:e9:74:6b:74:b2:fd:e6:ee:5b:1c:19:1d:
ba:69:ef:52:bc:1c:90:e8:c0:2a:07:27:c9:11:c9:9d:08:f0:
24:e5:44:69:e0:d3:e3:b2:e4:8e:2d:59:49:d2:b8:e7:97:64:
9e:d6:42:fe:2b:7c:1c:f4:93:3b:e8:27:c0:af:71:4a:29:2f:
33:bc:31:6d:73:3f:d1:14:c8:30:ce:c2:e9:b9:55:b2:1d:b8:
51:96:2b:4f:e8:bb:3e:3e:c2:c5:f8:dc:19:a4:dd:65:d1:24:
dd:b2:ac:f8:65:a4:86:d9:2e:e4:d9:0e:c6:5b:4a:1b:a8:3e:
f6:ce:2e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:58 2026 by rpki-client