Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: G7ue7T31HtyipL+cYOuoJZ9P8DTWwK3IND5wVaCbDi0=
Subject key identifier: C8:BE:0B:42:22:24:60:D2:7C:AE:4A:94:2F:C4:57:11:F8:A8:6C:F0
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 019F11F7EC761DDB62530BD93DECEB9477B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 06:01:28 +0000
Manifest this update: Mon 29 Jun 2026 06:01:28 +0000
Manifest next update: Tue 30 Jun 2026 06:01:28 +0000
Files and hashes: 1: 0m0w4NNU4NOo-8_y3zxSZs-Hcdw.roa (hash: d/QLJQ6M0z3RViK7W5MP6w1Y/VAa68ow0nmGzD8+98w=)
2: HKYjGRXbhcsbgj-zO-lhhp8iHf4.roa (hash: r0qRRb9G05Y3zjQIakuz14pzZ5PruwE51RJizxy5NMg=)
3: OXzsf9355x_Po1YlBAMmXxH7YfM.roa (hash: HyUx0AM/t82HDbhNTlK93mKwtwtfVGbEby4qtiM7vwI=)
4: SD-pJr4ttUBaZ1S20Tz4AuB6P1I.asa (hash: +ZZUrq34lcu1uY7HrOMrXNxK/Du8JITTl9RrFi410RY=)
5: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: wY0KKT3dsl0VjTF+T1iIEaOwzM9H2NxhunbCDrJg6To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:ec:76:1d:db:62:53:0b:d9:3d:ec:eb:94:77:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Jun 29 06:01:28 2026 GMT
Not After : Jun 30 06:01:28 2026 GMT
Subject: CN=c8be0b42222460d27cae4a942fc45711f8a86cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:91:1b:79:d4:e7:6f:11:8e:7c:5b:3c:da:d6:
df:37:f8:af:e7:1b:2d:78:b5:d5:23:fb:f0:2a:b3:
2c:51:9d:eb:59:a8:f5:5b:61:d8:7e:2d:f9:04:d9:
2a:31:03:65:fe:9a:fa:f9:11:e2:b9:20:08:18:2a:
20:1c:f9:48:02:77:dc:15:3b:73:3d:d3:38:82:45:
85:23:8b:0f:8f:0c:ae:9f:f0:97:f4:10:fc:b7:d5:
47:e9:05:3e:e8:76:3e:91:6d:d5:9c:e9:1d:2c:d0:
1d:ee:f5:4b:43:ce:78:0c:f5:6f:e0:91:23:a7:58:
da:8c:2e:9f:94:04:2c:74:7d:e2:bf:43:6d:1f:66:
1d:d1:b8:1c:b6:66:ac:c7:2c:c8:15:fa:2f:6c:ca:
8f:6c:2c:17:f6:f8:5b:bc:d7:2d:68:89:b0:93:01:
0a:4c:0e:20:6e:93:4e:0f:b4:a3:96:f9:07:03:90:
5c:72:77:d4:0a:05:8a:a9:3d:77:64:28:72:5b:b9:
4e:01:af:04:24:d0:af:ca:54:da:1f:96:d4:23:6f:
96:15:39:7a:5e:c2:6e:3a:8e:a8:9b:d4:e8:7d:e5:
74:70:26:48:d1:47:7c:a3:37:c0:da:65:67:7b:73:
04:53:26:48:24:91:10:1a:24:55:da:05:b6:a2:25:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BE:0B:42:22:24:60:D2:7C:AE:4A:94:2F:C4:57:11:F8:A8:6C:F0
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3f:01:81:a6:15:8f:bf:0b:4b:0e:7f:d6:ea:4f:48:6c:c2:
64:02:bc:e8:73:73:99:c3:af:59:e9:15:df:51:48:70:ff:11:
5b:0e:f6:ce:2c:73:36:a8:c5:5b:ee:19:3a:0f:d8:37:49:7d:
8c:15:2a:e9:a1:45:bb:10:df:58:cf:e0:ec:95:28:68:38:d9:
eb:05:e3:5d:5c:72:a0:26:9b:57:bd:1e:52:d7:ba:2e:49:75:
dd:65:75:d6:3b:cd:e0:e6:c9:18:55:d7:39:cb:19:4b:7d:bf:
77:96:7a:43:af:ff:6b:77:9d:96:95:ce:29:46:99:c3:3f:0f:
28:9b:4b:15:72:c3:5f:ae:d7:c2:2a:a9:65:35:33:83:d6:77:
52:07:0a:5d:4e:8c:7d:22:bc:b9:c8:18:25:91:d2:c4:35:26:
53:51:3b:61:2c:f3:c6:6b:75:bf:54:52:c6:d1:f3:da:95:40:
30:28:26:9e:dc:b3:4e:2e:6e:58:cb:68:70:59:53:a8:fc:1d:
9e:55:57:c1:2a:81:0f:be:4c:79:85:dc:0b:04:4d:c2:6e:60:
9e:5a:71:d9:d4:af:69:10:e7:f5:69:ab:e0:e0:62:e3:0b:9d:
ef:be:d1:78:ae:8a:a5:cd:08:a6:8c:80:11:bf:70:97:2f:f0:
46:08:11:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:34:32 2026 by rpki-client