Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File: XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier: 8OAbsNnCcJa7qgM6R4FftWa3pCUHbnANTBhX9X1gnrc=
Subject key identifier: E6:1B:10:75:06:EE:6A:F4:CA:5B:FA:40:14:34:7D:66:C5:FB:10:63
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer: /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial: 019F3A4F0EAF78C6D4F1F9C5392A7B8F7931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number: 199D
Signing time: Tue 07 Jul 2026 02:01:27 +0000
Manifest this update: Tue 07 Jul 2026 02:01:27 +0000
Manifest next update: Wed 08 Jul 2026 02:01:27 +0000
Files and hashes: 1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: 0gfA9XOY5kSHBfQh27aYX9sJPnAIdbwiKV2XiXnfFjU=)
2: nESdHSYfa1deK4cuMEoqKlkUBhA.roa (hash: Ne5xi2gxYVVWXxqP7e6edUaF5lMzo3AlLl0nnSwGj20=)
3: rZYX5fKPq_iTsTklZo3tUzGErD8.roa (hash: Bkadagr0tzraTAYCN3j7TcAW/fLW29DF6wAopom2qpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:4f:0e:af:78:c6:d4:f1:f9:c5:39:2a:7b:8f:79:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Validity
Not Before: Jul 7 02:01:27 2026 GMT
Not After : Jul 8 02:01:27 2026 GMT
Subject: CN=e61b107506ee6af4ca5bfa4014347d66c5fb1063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:1a:d3:24:40:02:09:e9:a5:4b:ba:f7:ba:
d1:b8:bd:cf:8c:b8:6a:48:e1:86:ea:ea:92:c6:a1:
79:6d:c2:b4:63:96:1f:8f:ae:df:6a:eb:28:eb:c7:
ec:0c:a6:03:24:1f:0e:ed:f0:de:e9:2b:ca:21:db:
fd:61:63:61:07:81:20:2a:17:27:ec:1c:db:4a:6c:
6b:8a:b4:7f:5b:30:a0:20:96:cd:28:e7:2d:50:a3:
e6:73:85:ec:f5:41:19:c4:dd:7c:41:87:64:9a:25:
e4:1e:2d:7e:be:b0:66:3d:86:e0:1d:1c:2e:10:bb:
33:85:a1:01:8c:c9:7e:e3:c2:f0:80:54:78:f2:0c:
93:96:a0:2e:2e:d9:4e:ee:08:86:c3:98:e0:c0:da:
b9:91:d7:60:cf:3b:06:06:e5:2d:9d:ed:58:fe:4c:
8e:d4:07:13:97:e4:b6:b0:56:c5:04:ca:5f:1a:b4:
02:53:d0:00:c0:e7:e6:80:e3:6e:9e:ec:8c:22:d5:
cd:ff:12:c7:f4:72:b8:96:ce:46:39:50:81:80:21:
d7:68:53:ef:4d:cd:c4:92:47:e3:60:b9:f2:9e:e6:
fa:8c:9e:1a:9f:b2:4a:43:6c:62:0b:17:e8:74:2d:
0f:d1:8a:35:21:84:f3:cc:22:41:48:5a:dc:4a:d3:
0e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1B:10:75:06:EE:6A:F4:CA:5B:FA:40:14:34:7D:66:C5:FB:10:63
X509v3 Authority Key Identifier:
keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8c:8a:c3:c5:55:9f:f1:66:80:06:ef:21:c1:b1:14:25:06:
75:65:69:94:00:cd:d9:f7:7d:0e:c1:23:cf:83:2e:11:60:02:
99:96:31:9d:0d:bd:51:e6:75:51:df:5d:e1:cd:1e:6c:90:32:
cd:ff:97:e3:be:1f:48:98:50:7b:ae:03:65:e1:c4:00:f5:64:
36:2f:fd:f7:64:87:45:d9:e6:55:e5:a3:e7:da:0e:50:a4:0c:
17:bd:27:4a:f7:09:e7:f9:d0:6f:36:5b:29:3d:fb:f3:f4:64:
93:27:f6:a4:5d:26:ff:07:1c:d1:1e:2b:7c:2d:27:dd:73:5a:
fc:9c:e3:18:2a:4d:2d:3e:35:90:2e:9b:e9:70:b1:b7:9d:1a:
fc:e3:21:00:b6:bc:ab:86:72:4a:01:8f:c4:bd:8a:fa:b4:5e:
62:02:87:d3:e8:27:cb:08:fa:18:61:68:35:72:a0:6a:5f:0e:
00:32:92:8b:61:cc:c3:1a:6c:89:6f:c7:3e:df:8a:ea:73:cc:
bd:d8:5a:e8:f2:59:d3:8c:99:b5:50:b9:ea:38:2d:e1:21:0c:
c5:7b:9a:83:3a:39:15:66:e3:0c:33:1b:c4:57:dd:73:53:f8:
56:bc:38:46:ae:70:34:9c:56:1d:fb:b1:22:15:8c:c7:b1:83:
a0:71:68:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:44:30 2026 by rpki-client