Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: McypB+pMfEaXPODITzLO5WwbojxQNdeYqpKvysx2gn0=
Subject key identifier: 41:1E:AE:3B:5E:B8:3C:7C:6D:3D:66:C7:B3:63:BB:6B:C6:0B:82:EA
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 019F189E0D27B1D1F5A7ED2D1A0DA82E58E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 07A8
Signing time: Tue 30 Jun 2026 13:00:38 +0000
Manifest this update: Tue 30 Jun 2026 13:00:38 +0000
Manifest next update: Wed 01 Jul 2026 13:00:38 +0000
Files and hashes: 1: 1yTxuvJTgzp3vueVNPtMM4HSlnE.roa (hash: C3mQ9ASRyTlSwgnHvOngoGQirohvWMvEni68YFNubqo=)
2: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: 9qUqxEGNECG1p3qu0U6RopB3zN73WrrGgpgL9UU+1Js=)
3: xweu5qCO47VIbmMKNVD40EQTVOU.roa (hash: 2Ggr+oJ9NSlt1DGrtrpkA0zHBUc5XOHY+zg99GvfTiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:0d:27:b1:d1:f5:a7:ed:2d:1a:0d:a8:2e:58:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Jun 30 13:00:38 2026 GMT
Not After : Jul 1 13:00:38 2026 GMT
Subject: CN=411eae3b5eb83c7c6d3d66c7b363bb6bc60b82ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:d7:8b:fc:39:52:1e:0b:be:8f:d4:b0:8f:
09:5c:80:16:25:06:15:b9:8d:54:83:3b:e8:76:63:
2e:de:32:93:24:2e:02:94:34:99:f9:7b:d6:b0:5d:
30:53:a1:a6:af:f8:75:ee:12:54:d4:1b:ee:7c:18:
3b:03:62:96:38:25:84:5b:45:e2:98:5f:88:79:93:
d6:55:1d:4b:8f:58:8e:f6:65:38:d4:35:58:24:ba:
44:7e:da:98:ce:cd:3f:b5:34:55:3e:b3:29:8d:e0:
70:38:03:60:f2:89:c8:19:f8:c8:38:6a:9f:ad:20:
2e:41:d7:80:81:51:51:ca:57:cc:1a:88:bc:30:4b:
73:08:ef:0a:17:a3:bd:98:3b:c0:a1:c7:12:7f:62:
a6:70:87:ab:e5:e8:85:bd:ac:3a:1f:24:fe:ff:c1:
d0:98:5c:f0:c7:c3:03:b6:36:0f:8d:bc:01:71:98:
d6:cc:15:7b:d9:4a:9c:7f:57:62:f2:65:2e:1e:e8:
12:5a:eb:32:ce:7f:9a:70:fd:d6:5e:34:d4:f1:08:
be:87:58:98:94:7d:86:5a:b6:3d:ff:80:6a:96:b7:
5f:bc:d5:af:6e:68:63:2e:84:43:61:c7:60:89:0a:
34:81:b2:bb:fc:87:3f:18:05:6c:a0:79:cf:ba:29:
73:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1E:AE:3B:5E:B8:3C:7C:6D:3D:66:C7:B3:63:BB:6B:C6:0B:82:EA
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4b:3a:a8:50:16:43:fe:9b:43:94:4e:18:04:63:b1:ae:63:
c4:21:98:28:32:80:ce:8b:d8:57:c5:d6:db:50:46:d5:94:0b:
1e:a5:7e:1a:59:2d:47:dd:92:56:1e:19:50:b4:41:83:d5:8a:
8e:68:aa:56:f8:dc:9a:c6:ab:d6:8c:04:9b:8d:54:d6:ce:c8:
b5:f3:95:ff:fb:37:c3:39:d7:50:76:75:07:a5:22:d4:ad:12:
c7:9f:3b:e0:66:25:4c:4f:8e:60:45:bf:08:00:13:e5:b2:12:
d9:40:76:f8:0c:2a:30:c9:7b:3c:4c:80:f6:1a:6d:75:19:83:
36:39:08:0d:9e:8c:29:45:21:b4:a8:80:be:a8:d1:c8:aa:48:
d2:63:26:a1:6b:41:22:61:c0:ef:7e:e7:b9:04:b6:ff:49:7f:
84:9d:92:7a:44:25:1a:ce:2a:e6:0f:c3:f1:ae:10:c2:8c:74:
50:8d:3f:1a:31:a5:8f:2d:0b:2f:cd:e8:e6:88:33:b1:a3:3c:
29:41:8f:09:ce:fb:f9:a4:f2:7d:7d:e6:ee:38:08:81:f5:81:
4f:2f:ba:6b:56:ca:d0:06:01:c5:53:f8:e7:ba:37:54:e9:be:
7e:06:76:50:d6:94:a9:56:4f:0b:97:2b:3d:9b:b2:47:07:ad:
23:f4:51:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:23:55 2026 by rpki-client