Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
File: XYqf18UZJuIuqKozs7iDjpPovt0.mft (raw, json)
Hash identifier: +YPiGehBmaQxE2F96vQrUSbpF4qVXHqKrwqnnDUGfM8=
Subject key identifier: AC:CE:A8:D7:E6:BD:BF:6F:73:9A:81:85:0B:68:59:60:29:F8:3E:5F
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Certificate issuer: /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial: 01A03BCD1A44B19DDD4338E889A0A6E759DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
Manifest number: 1A22
Signing time: Wed 26 Aug 2026 02:01:32 +0000
Manifest this update: Wed 26 Aug 2026 02:01:32 +0000
Manifest next update: Thu 27 Aug 2026 02:01:32 +0000
Files and hashes: 1: OS8EDWL74n3CtFxmTxNOolYhsvA.roa (hash: yF17P4v/AdaI5VNNKOl9FtUJuOAbQSvTKgj5Ha/kk7s=)
2: RrlPj_5PMLmauOZbV-XxFE0jClU.roa (hash: +JGjuqCo+HgEGZGs0mkuqnIL4NPJWqKMaUK/A5KXgqw=)
3: XYqf18UZJuIuqKozs7iDjpPovt0.crl (hash: fVN8sEnucLEewr274d1vjGgLidEMTEhyUh7IwOHR/zY=)
4: dL_9twvmgLzMs895oA64iiDmIEY.roa (hash: LgJcVms5Pq7JFZ8+OO+s5X+XVI8uKF8XIm98bwsR7Lk=)
5: dqfLmPoWYDgnN63zfumMSmq4Qs4.asa (hash: VP2elBPNAsWST4m//JgRDzv1id8AdOzpooWBKdSTZ3M=)
6: m_016GliLd1us5Dyp3gWd_9XmZU.roa (hash: NGfX/rkS6vQZZNfEtGY8uwL12Vk9X/AaXVk/NGit2hQ=)
7: wEd_ihwz_Sc9Z7253Egu-wb4rYs.roa (hash: JaUYZqefug6H01TWJts1HEcFIA5lKpx4F7+av5F+33Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:cd:1a:44:b1:9d:dd:43:38:e8:89:a0:a6:e7:59:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Validity
Not Before: Aug 26 02:01:32 2026 GMT
Not After : Aug 27 02:01:32 2026 GMT
Subject: CN=accea8d7e6bdbf6f739a81850b68596029f83e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:2d:3a:67:55:4b:a4:a5:c0:7c:8e:78:de:
5a:c3:9d:ab:19:d1:1e:b1:0f:d7:d9:b8:28:b6:2c:
49:b5:37:7e:ac:48:e1:09:71:be:fa:23:9e:ce:e2:
f5:52:d6:d2:ba:99:b6:58:94:8d:f3:96:85:1d:7b:
49:c7:a8:39:dc:b3:e2:24:0c:db:1a:c1:44:28:c7:
46:f0:e1:5a:ea:e6:66:4b:dc:7c:28:64:2d:a8:74:
28:c7:69:8b:06:93:37:27:71:21:26:f8:1b:4c:33:
e1:1f:d0:89:43:58:1d:36:49:7e:8c:71:c0:83:df:
24:14:ac:bb:40:fe:b3:5e:4a:08:7c:5d:bd:b2:e8:
04:52:65:ca:25:fc:78:8c:7f:1e:be:c3:1f:91:93:
62:b3:37:cd:45:f3:c1:c7:3b:ef:1b:99:5f:30:7d:
6b:46:96:df:d1:11:9d:52:05:93:31:0e:76:c8:7f:
8d:bc:83:3d:6f:a3:d5:33:88:a0:f9:64:73:7f:da:
cf:09:3b:da:c1:fe:df:21:33:a2:bd:e6:79:6d:11:
4d:10:23:6d:71:1c:db:c6:84:b7:88:32:3f:c2:6b:
f7:a4:4d:76:ff:51:59:57:d7:cb:ce:a9:68:73:2e:
3c:e6:bc:a9:bb:b6:9e:0a:08:9a:a6:06:de:34:a8:
6b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CE:A8:D7:E6:BD:BF:6F:73:9A:81:85:0B:68:59:60:29:F8:3E:5F
X509v3 Authority Key Identifier:
keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:bb:b9:49:47:de:fa:28:57:fd:7c:ee:18:e0:39:f2:ea:d7:
b9:e1:c9:48:49:0d:77:3d:dc:7e:f7:f9:79:23:6f:5b:99:cc:
25:58:b8:e7:72:0f:78:44:e9:a2:18:58:e2:5b:b9:ff:44:02:
06:a9:e0:19:86:d2:cd:49:b7:de:5e:1b:e5:10:4d:ff:ae:41:
66:86:06:ba:76:ba:7b:90:bf:b5:c0:8d:fa:79:f9:4c:6d:2b:
9d:8e:4f:a9:d6:23:2d:46:f1:2b:ce:ad:f7:ea:fd:b1:87:ed:
64:76:fd:4e:45:b7:1c:2c:73:65:eb:fd:48:a7:6a:b9:75:e2:
5f:48:13:25:ee:c4:19:7b:06:d4:c5:3c:c1:54:53:08:c3:57:
95:6d:38:9b:c0:db:76:3b:95:30:af:5c:b8:5b:1d:82:e0:41:
26:79:1e:b8:81:35:4d:10:48:c0:cd:fc:49:91:82:2b:f6:71:
01:63:7a:dc:64:f0:1f:23:b4:a5:89:65:42:48:61:2c:6c:dd:
fe:6c:3a:48:8d:9f:74:5e:db:1d:4d:eb:e3:b7:4f:ea:a7:aa:
e2:0b:61:01:00:3b:a7:9b:b3:63:04:ce:c2:65:e0:5b:f3:dd:
2f:9a:08:c6:a6:4b:5d:db:a9:c6:95:77:e1:42:85:d3:75:f4:
6c:f3:a8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:38:03 2026 by rpki-client