Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
File: XaWsO7omBTjDM-bIYPI2ASyYZ10.mft (raw, json)
Hash identifier: f6K0tOM14Sw7T3AypVCcBvHxf36HQvj8yu38MnUuhN0=
Subject key identifier: 7B:F1:C8:A9:04:42:7C:EA:5B:C5:91:FD:A2:13:37:DC:D2:9F:51:EA
Authority key identifier: 5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
Certificate issuer: /CN=5da5ac3bba260538c333e6c860f236012c98675d
Certificate serial: 019FA0A8AF7D2B0B8ED08AC76CA348024753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
Manifest number: 1429
Signing time: Sun 26 Jul 2026 23:00:37 +0000
Manifest this update: Sun 26 Jul 2026 23:00:37 +0000
Manifest next update: Mon 27 Jul 2026 23:00:37 +0000
Files and hashes: 1: GqfcLrP9OkUTy-GX1d-k-vfcOX8.roa (hash: XFhkOuqDVaUrmegmAPvZHJBMmOe4H8O6VpNvMvQVK4k=)
2: XaWsO7omBTjDM-bIYPI2ASyYZ10.crl (hash: aRNT8Ls01BMad46/do6vjxLS5KJIJeDBKfYiwwWU72M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:af:7d:2b:0b:8e:d0:8a:c7:6c:a3:48:02:47:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da5ac3bba260538c333e6c860f236012c98675d
Validity
Not Before: Jul 26 23:00:37 2026 GMT
Not After : Jul 27 23:00:37 2026 GMT
Subject: CN=7bf1c8a904427cea5bc591fda21337dcd29f51ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:11:20:17:4f:62:91:d6:49:38:cf:93:a9:
ea:fc:82:c0:cc:e1:0e:64:ad:ef:80:8c:0b:e5:cd:
fc:af:ab:83:3e:c8:86:ea:27:5c:7f:a5:f5:89:48:
d7:db:a3:eb:7c:83:6b:09:bf:25:e6:de:8d:a7:b1:
dc:46:bd:93:71:1d:6a:77:c5:ce:57:fd:5f:ce:77:
01:ad:9b:9b:28:40:f0:85:3f:d8:86:e2:26:97:49:
5b:f6:d7:f4:48:be:e8:70:a3:06:d1:f2:d0:e9:03:
e5:1a:52:44:23:de:d8:2d:18:9b:92:5e:7b:b5:15:
36:6b:e9:6d:e2:b1:12:20:ea:72:db:70:94:a4:ef:
c0:83:db:c6:53:d4:8f:83:16:73:75:3d:79:a7:a1:
04:a2:a8:72:c7:10:d2:7a:83:a9:ec:ac:29:f1:1b:
6c:87:fa:37:72:94:01:9c:0d:a3:25:57:3e:1a:e5:
b6:a4:45:0c:c4:4f:59:43:c1:82:cc:de:2d:f7:99:
44:77:27:d9:3a:4c:33:3d:ea:29:34:02:80:9a:2f:
22:f1:44:50:d2:00:c2:51:39:f3:e1:e8:59:03:c1:
83:8f:10:3c:ce:67:4a:49:56:e7:a7:5a:a2:17:47:
91:be:6f:4c:08:52:a7:12:af:1c:98:34:57:11:ab:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F1:C8:A9:04:42:7C:EA:5B:C5:91:FD:A2:13:37:DC:D2:9F:51:EA
X509v3 Authority Key Identifier:
keyid:5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fc:89:23:1d:7f:b5:da:f2:21:2a:c0:3a:ca:c1:b5:fc:8a:
ee:d2:01:3b:f9:2d:94:bb:23:ac:63:d8:39:c3:70:c7:8d:fb:
13:5e:a0:ca:38:f7:7b:0d:d5:a5:ba:d6:62:ae:a7:e4:00:95:
e7:b1:b6:01:c4:d4:22:e7:9a:3c:6f:a9:47:60:04:56:0b:79:
af:31:1c:cb:b3:a2:3e:f5:1e:59:22:88:32:79:f7:d9:50:15:
f2:16:4d:da:bc:db:44:6a:ea:a2:81:b5:c5:3b:f2:6a:85:3c:
a2:7f:3d:b7:f2:26:46:ec:0a:41:f6:63:e3:0b:f0:37:92:2d:
ce:5e:93:bf:33:43:c8:47:4f:ff:9c:3c:a0:8d:87:9e:53:cd:
87:f4:8f:d1:83:ca:9a:70:05:08:d3:47:9b:c1:02:45:42:33:
2c:32:31:aa:2f:47:d0:62:e5:69:de:ff:82:e5:16:49:70:0c:
32:48:50:3c:03:44:f1:33:c0:f4:41:3a:6f:66:ed:8b:1f:24:
07:34:14:cd:16:ae:01:fe:b3:4f:97:46:54:ea:9d:d3:72:79:
81:5f:86:20:24:1b:67:40:9f:eb:68:a4:28:63:06:18:e9:97:
68:d4:47:79:e1:65:7f:1b:78:79:25:92:e7:6a:72:f7:76:f1:
9a:cd:f7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:10:24 2026 by rpki-client