Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: LXP1ep74Jh+ZgDf0V0azS/2rHRPa1kRYSihZIkZVdnU=
Subject key identifier: 07:08:26:27:F5:9C:FE:5A:85:B5:1A:7D:15:32:CF:F3:D4:E9:6A:6D
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 019FA228FCFCA1409705C4DE5523884652C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 17A9
Signing time: Mon 27 Jul 2026 06:00:22 +0000
Manifest this update: Mon 27 Jul 2026 06:00:22 +0000
Manifest next update: Tue 28 Jul 2026 06:00:22 +0000
Files and hashes: 1: PzMpMCVPdUDUUH8GTuka9keIPNQ.roa (hash: IKEP0LVD3JdV2nQIZoc3FzX3XZlJgMd0mFQnJDaVjxI=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: awxBxgMnX+ajA9YqwNiVPJfPy/LLlgNAwv9IUc/QSNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:28:fc:fc:a1:40:97:05:c4:de:55:23:88:46:52:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Jul 27 06:00:22 2026 GMT
Not After : Jul 28 06:00:22 2026 GMT
Subject: CN=07082627f59cfe5a85b51a7d1532cff3d4e96a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:86:29:43:4d:45:35:ad:18:6c:d5:48:de:11:
6b:46:6a:a6:36:b8:61:01:fb:e9:3d:7d:d8:35:92:
d7:08:fa:5e:54:5d:4a:8c:93:44:86:79:0b:46:48:
29:b5:f6:79:c5:9b:28:8e:a6:dc:a4:11:9f:d8:f9:
3e:a8:d9:b3:10:8f:bd:88:40:2d:c8:25:a3:03:8f:
db:c0:cd:28:fc:e8:30:24:dc:5f:95:45:45:9d:0a:
c1:b1:cc:ca:55:8b:d5:c6:c6:2e:7a:09:61:af:45:
07:1a:9d:7e:de:9d:5c:b7:e8:0e:ce:de:ad:09:4b:
e5:2f:98:da:21:92:e0:38:78:01:67:ed:36:e3:05:
8c:4e:a0:ba:8f:ea:2e:c9:a9:4b:2d:b0:d7:9e:a6:
15:5c:e6:f7:39:17:24:c2:2e:99:55:5e:5e:29:23:
c8:6c:37:9a:18:bc:6b:50:29:ee:3d:40:83:58:5d:
42:df:77:0e:f5:25:1f:b6:a6:a3:ab:31:56:52:71:
b0:93:1f:82:73:54:3a:15:0d:dd:3d:d1:96:dc:77:
64:55:c1:d3:2d:23:71:bc:67:2e:19:5a:d8:e5:93:
f6:8c:1e:fe:fa:39:55:7c:62:b0:98:96:8c:1a:0b:
73:8a:35:de:cd:5b:a5:c8:20:c2:8c:71:32:58:76:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:08:26:27:F5:9C:FE:5A:85:B5:1A:7D:15:32:CF:F3:D4:E9:6A:6D
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7d:fa:ed:60:d3:4b:27:aa:e9:ea:f6:16:37:d5:e4:f7:de:
b6:f8:53:63:f6:8e:da:d3:9a:d6:cb:eb:2a:65:ca:25:73:28:
3f:44:d5:e3:1c:ad:d4:99:34:0c:c1:64:78:e9:c7:29:15:0c:
99:dd:2e:50:f0:b7:57:de:b8:1e:5f:59:70:56:06:a0:07:c9:
64:f7:1c:41:ae:eb:b6:59:88:8e:27:ad:2a:9e:93:08:66:9a:
02:0a:98:92:ae:45:f7:ba:7c:c0:0e:ea:66:ac:af:bd:53:38:
84:7c:c1:32:55:01:46:1f:6a:95:cf:72:21:7e:92:19:1c:9c:
67:93:87:a2:42:fe:d4:0a:2a:6b:ff:51:bb:56:73:6d:ff:a1:
4b:69:e3:ce:24:a4:45:c2:74:f6:c1:c6:40:0f:86:c7:fe:cf:
56:51:9a:c7:37:ea:a7:7c:8d:da:c0:75:8e:a0:ff:9c:ad:b6:
b8:ea:a3:86:a6:b6:e7:c5:55:96:62:d3:7f:4c:02:6b:d5:1b:
90:eb:f9:a0:00:dc:80:d5:53:a5:fd:19:a0:04:da:0a:c3:96:
af:9e:f4:3d:2a:e1:86:c2:ca:85:e7:9a:c2:08:0c:d4:af:3d:
95:90:3f:7c:62:96:88:b4:4c:3f:f1:2a:40:dd:c0:6b:88:66:
4d:0a:45:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:37:11 2026 by rpki-client