Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier: eYwgEkZQntpeZ+WxyjLKhARHLwWuJK8kGnfWcXN2xIo=
Subject key identifier: C5:D8:FC:56:15:E6:7A:2A:45:B8:97:66:EC:F5:74:8B:57:9A:E0:64
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 019F84C3EBBC95CE2F3C26024E80B6791294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number: 1931
Signing time: Tue 21 Jul 2026 13:01:00 +0000
Manifest this update: Tue 21 Jul 2026 13:01:00 +0000
Manifest next update: Wed 22 Jul 2026 13:01:00 +0000
Files and hashes: 1: 4GacYlC1xTXBA2gZGI4h12SFY-0.roa (hash: NjXRgF24DIZuh863duD3ZThupdmVygwzxLiXyqu402Q=)
2: E0wwloupObPs9_O7vd7bSguVl6w.roa (hash: db081CMNM92GGYGAY4P5+DovYW2JE0c6H2IK3KWF7l0=)
3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: WsqcnIfGFo2vmbJNWqjtr51jOIDDF32ObYtgbCuCqgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:eb:bc:95:ce:2f:3c:26:02:4e:80:b6:79:12:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Jul 21 13:01:00 2026 GMT
Not After : Jul 22 13:01:00 2026 GMT
Subject: CN=c5d8fc5615e67a2a45b89766ecf5748b579ae064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:a8:22:b3:1a:7b:b9:86:f7:02:51:76:1b:
70:ce:15:25:c4:6d:a7:e0:e4:f3:d6:7c:48:dc:ed:
88:7b:cb:0e:aa:e5:4d:13:e2:6c:e6:ea:a2:0f:e2:
f5:33:6d:21:d2:5a:3d:18:86:19:87:74:ba:27:7a:
09:87:70:74:56:38:ee:cd:1c:b5:e1:bf:b7:94:1a:
7b:10:5a:85:5d:ee:0f:c6:6d:31:76:e1:45:a8:32:
f9:2b:d5:db:7c:61:73:6b:b1:45:ad:57:1d:c5:6f:
53:f9:4b:18:70:d7:cb:35:f6:2d:80:d9:1e:de:e0:
19:73:2d:05:2e:b3:b2:e6:c5:e8:41:3b:4b:cf:66:
62:82:cc:fd:96:f8:1c:d2:6a:c6:59:b5:dd:00:4f:
02:e9:d0:55:94:a1:03:80:40:7a:97:5d:a8:ca:2d:
b7:a5:2f:1b:57:e0:0e:84:39:bf:1d:e4:b3:46:20:
f0:43:49:0a:a1:04:eb:cf:27:a4:8e:3c:dc:31:f1:
b0:4e:f2:0b:52:bc:a1:2a:ff:f8:a2:4e:f7:88:cc:
99:90:f8:85:7f:30:de:80:d2:1a:02:c8:5c:fe:d7:
e5:a4:84:1e:f6:52:a7:b9:18:03:bd:ca:c8:2c:8a:
80:37:a8:9a:8c:e5:d9:43:8c:c2:80:d5:cb:22:cb:
d0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D8:FC:56:15:E6:7A:2A:45:B8:97:66:EC:F5:74:8B:57:9A:E0:64
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:fd:79:3b:3f:11:e9:7f:6a:3d:84:57:9f:1c:02:54:8b:9e:
7f:37:3d:62:d4:ce:74:dd:08:7b:b8:a1:ae:eb:f2:ef:28:ee:
a8:09:07:48:3e:8b:bf:f2:5c:19:d2:c0:b2:25:ff:a9:68:7c:
36:26:80:4e:1b:58:0b:91:b4:b0:c1:87:ae:3a:63:fc:fa:9a:
9c:12:a7:d2:86:5a:7e:7f:4b:ee:65:3e:db:74:26:9b:01:3d:
6f:be:3a:e1:28:6f:bf:78:7b:1c:d9:c7:49:8f:9d:ba:bf:f8:
c5:6a:43:e6:66:17:b0:79:64:40:77:38:d1:0d:a5:94:8c:a2:
a3:49:8f:be:85:11:49:4b:52:06:a4:f3:3c:82:73:dd:67:0b:
ba:28:20:c5:df:c0:04:1c:d2:1c:77:c2:87:1b:6d:b5:9a:ca:
0e:38:97:a1:34:68:2c:1d:98:8c:fc:74:aa:91:e7:22:f3:da:
e9:e6:e1:d0:77:32:0f:66:ae:f1:e2:28:a5:91:5d:c5:c0:0d:
75:b9:45:19:0a:83:1d:87:b2:96:1f:ad:3b:3c:60:4a:80:8b:
c3:c7:4e:fa:9c:c8:0f:d1:6b:81:5d:a0:3e:f6:0e:b3:01:9a:
f6:5a:5f:04:e1:c4:98:5c:88:dd:e3:dd:78:c5:32:79:3f:ca:
c8:7a:46:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:46:06 2026 by rpki-client