Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
File: XfSth7gyLMlJFI4NdmIc6oNYpoU.mft (raw, json)
Hash identifier: THKx16X7eLsVt3A9+oEATVYVLrp2rJQkRTAn5hsCA8M=
Subject key identifier: D6:57:C2:7C:7D:A1:30:C4:7B:13:3F:C0:B1:B6:C4:07:EF:13:BF:E5
Authority key identifier: 5D:F4:AD:87:B8:32:2C:C9:49:14:8E:0D:76:62:1C:EA:83:58:A6:85
Certificate issuer: /CN=5df4ad87b8322cc949148e0d76621cea8358a685
Certificate serial: 019F9E15F6D2E154E890BA58633A1A13279B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
Manifest number: 01BC
Signing time: Sun 26 Jul 2026 11:01:07 +0000
Manifest this update: Sun 26 Jul 2026 11:01:07 +0000
Manifest next update: Mon 27 Jul 2026 11:01:07 +0000
Files and hashes: 1: XfSth7gyLMlJFI4NdmIc6oNYpoU.crl (hash: 6LI9LouLW4JUKYTbbtjPPRLOiKySvxkIK3u6MbkCBPQ=)
2: hlSTINC_KpLJH_012cszF50XrrM.roa (hash: R9LXujjJX9A3v2Y9QXZNY393BmFuvvM/3QjbC/Pbq0E=)
3: wi4pwq_pbwyf-RifkawT_5o4jbY.roa (hash: QtIyVI0mDcZKu2N+GCjxkT9Lyx1XzVHsblRr7n1YzG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:15:f6:d2:e1:54:e8:90:ba:58:63:3a:1a:13:27:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df4ad87b8322cc949148e0d76621cea8358a685
Validity
Not Before: Jul 26 11:01:07 2026 GMT
Not After : Jul 27 11:01:07 2026 GMT
Subject: CN=d657c27c7da130c47b133fc0b1b6c407ef13bfe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:0f:14:ca:64:60:17:9f:67:da:f4:f6:a1:
40:ad:2d:13:b8:4e:c3:03:ae:28:1c:16:23:2c:2a:
99:4e:5c:a7:7e:78:da:7b:14:32:40:59:9b:00:b5:
21:89:35:d8:53:af:ed:56:db:17:96:1e:2d:cd:a7:
15:54:ad:82:e2:d0:55:cc:f3:02:6f:96:be:65:d7:
92:f2:b7:5a:99:93:65:53:05:1b:cd:7c:91:c7:af:
ac:bb:4b:58:8d:9f:30:92:8d:c0:fe:93:14:7c:09:
a3:dc:ed:3e:d8:f3:27:a0:b7:3e:d9:8e:b8:a6:8c:
e0:4c:89:45:4f:9b:64:ec:d3:85:7a:a5:d5:ee:d5:
a7:51:07:c2:52:e3:a9:14:4d:6c:f2:a3:01:83:df:
3d:d7:6d:0f:cb:80:fe:aa:ef:39:2b:ec:8a:64:c8:
f9:e8:12:68:a2:74:0b:56:55:cd:b4:a2:6b:ff:76:
eb:03:c9:2e:a2:1c:e0:3d:86:13:7d:00:2d:bc:45:
20:6b:ac:6e:6c:53:cc:46:26:e8:4c:6e:2a:8b:9d:
2b:80:8d:0f:27:14:1d:b6:d5:c8:bb:bd:16:d4:34:
11:0a:bf:58:1e:c4:6a:82:45:7f:52:70:22:64:11:
fa:4e:da:ea:7a:7e:c8:13:67:08:77:7e:c2:09:3c:
c8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:57:C2:7C:7D:A1:30:C4:7B:13:3F:C0:B1:B6:C4:07:EF:13:BF:E5
X509v3 Authority Key Identifier:
keyid:5D:F4:AD:87:B8:32:2C:C9:49:14:8E:0D:76:62:1C:EA:83:58:A6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:48:7a:72:33:cd:4a:63:12:66:dd:28:9b:5e:79:96:80:f0:
43:94:2c:26:e5:5e:40:25:33:5e:4f:73:3a:82:3a:0b:0d:58:
f8:c0:15:4e:ee:77:1e:a7:cd:51:85:9d:03:f8:80:95:8d:ef:
fc:bd:b2:00:64:d2:e9:d3:66:48:ae:db:9b:f1:fb:78:80:7f:
8e:2d:cf:ab:61:67:b5:d9:90:7f:28:2c:d9:94:a1:c3:3c:ff:
3a:62:ec:d6:3a:f7:69:cc:61:28:e2:cb:3b:97:13:42:07:8e:
0a:98:31:d3:b2:7a:d1:7c:60:07:8d:56:6e:e9:02:5e:a2:bf:
72:9b:c0:d9:17:2a:88:72:a7:70:b5:0f:50:b3:d5:9a:10:ff:
2b:ac:a6:10:3d:a4:43:34:9f:4e:ad:e5:8f:65:bb:9a:ce:83:
41:00:2b:6f:d0:80:e8:f9:5b:24:ab:be:1c:50:e4:92:90:f6:
47:af:b9:6b:49:36:27:a0:83:5c:2c:4b:54:cd:7c:4a:66:89:
d3:00:70:af:4c:0b:2c:5d:65:5c:bb:3a:06:ba:68:1a:37:27:
5e:0d:cb:d6:5c:fb:6b:e5:f2:a5:69:81:0d:f1:0b:40:5d:b0:
86:ef:14:f5:f9:9a:05:2b:27:84:b0:68:ad:20:e4:09:6a:6e:
3c:46:be:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 19:44:35 2026 by rpki-client