Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: lMt95CYOnPuuRKmLrKwk0SuJZEJ+FWEd5mUdbtygnFk=
Subject key identifier: 34:67:F3:B6:95:6A:FF:2F:55:5C:FA:55:68:74:CF:B3:90:EB:68:B8
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 019FA116A71983C11B31A2871E0EECC956B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 10B0
Signing time: Mon 27 Jul 2026 01:00:44 +0000
Manifest this update: Mon 27 Jul 2026 01:00:44 +0000
Manifest next update: Tue 28 Jul 2026 01:00:44 +0000
Files and hashes: 1: 1-nsaGOYJDQs8nE83JBsjbwYRoPA.roa (hash: ZorqeuTKQ8BzMES+IbO5PhiAMx62C25+2z4OV8xpzBs=)
2: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: llHhPcZxjCMsxoFIhOR5/38+2itI9rTRxrziFwp73mA=)
3: fYv6u6ZqsaaVuf2RxvvaolhNBjk.roa (hash: jVk92j+q/o1dRJaAKw+eFCSe6j9s2E6quPaItwZl0/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:a7:19:83:c1:1b:31:a2:87:1e:0e:ec:c9:56:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Jul 27 01:00:44 2026 GMT
Not After : Jul 28 01:00:44 2026 GMT
Subject: CN=3467f3b6956aff2f555cfa556874cfb390eb68b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:c7:f9:5a:36:b1:8f:b4:ec:92:9b:d5:d6:
4f:90:07:23:72:e1:f0:9a:1a:61:c2:55:7a:6c:9f:
30:9d:36:59:2b:37:44:f3:b2:1e:62:29:7c:02:8a:
d9:16:2c:30:df:6b:f0:e2:63:0c:3f:0a:70:ab:74:
4d:05:aa:68:57:57:21:76:42:e1:47:7d:d5:02:7e:
df:78:43:4d:f1:7e:7e:95:c3:73:66:57:7e:dd:c4:
1e:8c:3e:ee:dd:db:e1:e2:9f:f0:ea:80:4f:91:8f:
99:db:6a:a2:c8:f9:3a:0b:d8:71:83:1a:a0:ca:20:
78:16:4d:a3:d8:72:a8:2a:2b:d4:d6:f5:4b:15:68:
8d:ee:91:0b:40:49:f1:18:54:ca:06:99:02:31:be:
56:b2:2c:da:c7:64:ff:8e:e4:58:90:35:c8:56:3e:
a7:b9:73:c2:08:c2:df:f2:b3:77:2c:61:a7:26:57:
b8:e7:25:74:07:e4:82:a5:52:cf:b8:14:eb:0f:3f:
66:28:3e:6d:2a:bd:bd:75:cf:21:b6:71:35:ec:f9:
e4:ee:da:24:6f:82:08:7b:70:5b:93:29:32:a6:6c:
97:fa:05:81:b4:68:f4:5f:49:f7:21:c6:15:f6:df:
3b:2b:d6:96:52:ea:fb:d7:cd:d8:de:9c:ad:3f:3a:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:67:F3:B6:95:6A:FF:2F:55:5C:FA:55:68:74:CF:B3:90:EB:68:B8
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:79:09:56:b2:ec:b3:f2:6f:2e:aa:62:5c:09:29:52:80:24:
ab:ce:30:0c:cb:2c:f6:2d:89:c4:b9:3c:c2:c2:5b:93:3a:4b:
2d:8f:f5:db:2b:14:08:ef:c0:ed:51:6e:ac:82:e9:20:c7:76:
c4:3f:cc:94:69:53:a1:81:35:79:4b:90:0c:f8:af:50:e8:99:
31:00:2d:b1:86:be:74:53:bf:ee:a6:b7:a9:8e:bc:ef:ec:09:
09:bd:84:ae:4a:e6:df:2f:4f:08:55:5a:26:3a:6e:ee:6d:c4:
fe:ef:45:8a:33:72:2a:7d:6a:a3:ca:0f:c9:1a:fc:01:b2:e9:
c6:20:77:53:48:d0:ad:e1:a1:e6:a8:4d:f4:46:38:21:ad:19:
95:92:77:9b:29:c6:33:a0:0c:a1:f6:7f:39:c7:c5:c0:24:c8:
ab:d0:4b:f4:81:74:fa:d7:88:43:0e:33:ce:6a:3c:8e:69:02:
0b:04:21:7c:82:3b:fa:f1:31:ec:21:d0:69:81:22:d5:83:01:
39:d9:4a:f8:d4:79:23:62:50:6f:1a:ca:ea:11:f1:4e:2f:76:
ba:27:57:a4:23:55:22:27:51:26:ce:13:68:88:fd:42:3e:e1:
5f:0d:f5:42:20:47:f4:99:b6:03:f4:f3:81:1e:bb:c2:0c:f2:
70:e4:e9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:49:02 2026 by rpki-client