Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
File: XpNr6hsMOiCKuifYsQsnXkdN3iw.mft (raw, json)
Hash identifier: we/2IRfEnXxNprW0fjFlEUC54d/AD0rZiO91Bn+x4ic=
Subject key identifier: B3:AB:12:93:D1:E8:28:F8:79:8F:11:8F:1C:C3:C2:43:43:A2:A0:65
Authority key identifier: 5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
Certificate issuer: /CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Certificate serial: 01A00439A45DA84B03F8D8A423BAD8DDE33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
Manifest number: 1A04
Signing time: Sat 15 Aug 2026 07:01:21 +0000
Manifest this update: Sat 15 Aug 2026 07:01:21 +0000
Manifest next update: Sun 16 Aug 2026 07:01:21 +0000
Files and hashes: 1: I4H-h-0IvTFBhVPDqjS4bNj_Ebs.roa (hash: sH+OJNMuVDP+q4KSVOmVWCp6qFy7xvvRbWmFSeE0ZQA=)
2: XpNr6hsMOiCKuifYsQsnXkdN3iw.crl (hash: TyI0O1DZ11O3IzpNnU0H2iH8gz+amUi/Qh4iB/HVOoM=)
3: tAwZU3BOPbTvz3ImjlM559IcNTA.roa (hash: y+WYOBqvK0tCP5OHjWQ0ygtKGjnCPslAmq7bpnA8QLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:39:a4:5d:a8:4b:03:f8:d8:a4:23:ba:d8:dd:e3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Validity
Not Before: Aug 15 07:01:21 2026 GMT
Not After : Aug 16 07:01:21 2026 GMT
Subject: CN=b3ab1293d1e828f8798f118f1cc3c24343a2a065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5a:22:6c:6c:e0:8f:73:a9:93:7f:81:27:1b:
5a:d4:20:59:9d:e8:b5:85:4b:ca:74:16:2b:17:1a:
1e:79:99:8c:a0:89:69:e8:40:f6:eb:6d:6c:5d:e2:
0b:a1:b1:27:39:11:58:86:10:a3:bb:31:ec:e1:32:
2c:43:3f:cf:9a:a8:c6:45:17:a7:43:e0:5c:f1:16:
78:25:5f:20:0d:cb:b6:75:c2:18:cb:64:3c:93:c6:
6d:c5:43:26:7e:13:e2:f3:03:36:6e:b0:f8:8e:32:
04:58:ec:60:45:bd:c3:8b:ce:7a:e0:12:51:72:2e:
d6:28:c4:98:03:93:1d:28:e6:cd:0d:72:e1:64:02:
60:24:95:80:17:e5:ef:35:c2:bd:2e:b1:8b:94:e7:
c3:40:19:e6:e1:2f:9f:69:ad:7d:10:0b:bf:36:38:
2b:e6:6d:48:53:37:38:d5:ba:ca:de:46:a7:8b:be:
90:91:8b:59:18:01:5e:0d:f0:1b:22:9e:7f:e7:b2:
f8:2b:a3:bd:09:aa:6f:9a:87:8a:27:b4:2a:09:d0:
e4:a2:11:86:db:1a:2b:3d:ce:92:2e:5c:40:50:ca:
ba:e5:4e:69:9f:93:a3:6c:ad:74:82:7b:b5:5e:18:
f5:32:c3:47:5f:6d:4d:a2:5d:f2:a0:ee:b4:e3:2b:
0a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AB:12:93:D1:E8:28:F8:79:8F:11:8F:1C:C3:C2:43:43:A2:A0:65
X509v3 Authority Key Identifier:
keyid:5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e3:ec:cf:58:42:69:2e:5d:d3:54:8f:47:3f:50:59:5c:ab:
38:8c:37:72:4e:c5:88:7f:68:1c:99:e2:91:b9:e5:f9:de:b4:
fe:4b:c0:31:eb:78:ec:aa:1c:61:21:18:ac:29:bb:54:76:7a:
dd:13:f9:a6:4c:2e:fc:24:fd:70:3b:3e:2c:86:f6:f6:45:4f:
52:ec:69:ec:e6:a0:11:7e:37:bb:bc:99:30:be:76:45:39:98:
f8:26:ab:e1:7f:29:22:bf:62:6d:cd:41:13:11:06:16:83:61:
46:9e:ea:76:b3:05:7b:87:52:87:a0:f1:79:29:1f:41:b4:00:
04:94:47:20:18:8b:30:c3:a1:25:d0:39:74:7e:7e:86:03:b5:
e5:28:99:33:10:0b:03:c3:0c:e8:3d:e3:40:5b:62:a3:f3:37:
08:b4:82:47:90:f2:73:3e:b6:03:63:f6:89:7a:cf:5c:21:7e:
6f:10:19:8e:5a:6f:77:29:21:5c:d0:4e:dd:74:06:60:bc:8c:
a6:48:db:71:fb:70:2d:d1:81:4e:c8:a7:72:4a:27:e7:a5:92:
a8:cc:e5:79:0f:01:cb:9a:f5:b0:9c:c3:fb:a1:13:f5:43:9a:
6b:d7:eb:e5:50:61:11:3c:7e:57:54:50:32:37:b6:ae:bb:e7:
1b:00:4e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 14:56:46 2026 by rpki-client