Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: KXWuLQiwvbAT3P/4DqsHwY5ypxW05YcyqaHM1LXE8QA=
Subject key identifier: 2B:B6:75:E3:B4:EE:89:A2:C4:6E:14:6F:D7:A5:C4:94:C7:6C:A2:71
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 01A001DD6796A9CBC7D0F87176EB1DC620D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0FE6
Signing time: Fri 14 Aug 2026 20:01:22 +0000
Manifest this update: Fri 14 Aug 2026 20:01:22 +0000
Manifest next update: Sat 15 Aug 2026 20:01:22 +0000
Files and hashes: 1: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: cGixtA6Wx1g8ciQVOROHEj3IjIODocMSMYwSGKNbu0c=)
2: qvDZMPgKFD7gi5Q44AZYhiZ--Ig.roa (hash: cmgO04c2D3BrRGS4WvX7cY6GozgnK7NT0TwhEs+74Kg=)
3: uKoRxEv3mOldDEo6fDHAk9yg0S8.roa (hash: 4hEUcG83yfbcyvkKT/jDeEV25ZBIHXMO6CdGZ2yW5wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:67:96:a9:cb:c7:d0:f8:71:76:eb:1d:c6:20:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Aug 14 20:01:22 2026 GMT
Not After : Aug 15 20:01:22 2026 GMT
Subject: CN=2bb675e3b4ee89a2c46e146fd7a5c494c76ca271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:44:95:f9:25:a7:4d:07:ee:18:17:bf:a0:
42:e4:5d:96:ea:ef:49:af:09:2e:4b:be:57:af:e2:
38:dc:2a:5a:f9:25:4a:0f:e2:a9:2e:ae:ef:01:71:
89:2a:96:74:c9:dc:a3:45:de:12:5f:6e:0b:0b:76:
7d:66:c6:84:e0:28:ed:6d:1f:ff:23:6b:39:bc:b8:
7f:0f:63:5a:11:6e:bf:e2:48:54:75:08:33:af:85:
57:00:f5:a5:a9:33:6b:63:63:7e:84:4a:1b:5d:69:
08:84:35:fa:6e:2a:81:51:e6:4e:94:61:5b:81:ba:
ac:f4:26:ab:a4:0f:42:ad:66:b1:09:90:b9:3b:8e:
94:a0:0f:43:66:ef:a7:c2:5a:ec:13:b0:72:70:7b:
cd:ce:5a:03:da:a0:60:34:41:e6:c9:be:77:16:a1:
70:2c:b1:12:2d:58:c9:60:e5:74:82:71:c9:13:02:
2d:ec:62:c5:f1:ec:39:26:00:79:f4:2d:63:31:31:
68:8c:0a:6e:f4:b1:7b:08:f8:8e:23:b6:dc:2a:d0:
12:fb:29:6b:9b:6e:d0:9b:57:35:48:0a:52:ff:68:
3c:fc:41:99:37:0a:cc:81:34:65:8b:34:dd:b4:a4:
4e:93:f1:a7:ec:48:a8:19:8b:79:8e:f2:7d:df:da:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B6:75:E3:B4:EE:89:A2:C4:6E:14:6F:D7:A5:C4:94:C7:6C:A2:71
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f3:01:56:ff:37:82:b1:13:ff:e1:56:76:df:40:ff:82:0c:
0d:59:e8:23:18:d9:45:cb:18:58:e2:d1:c7:10:11:58:1f:25:
0a:c5:45:fe:91:cf:2c:d0:be:4a:79:bb:b0:cf:49:02:cd:ad:
05:4b:d6:55:41:2e:10:f6:26:36:29:b3:62:d7:8c:01:71:e9:
e8:ba:53:a3:62:c7:1c:96:4d:bd:a8:ab:12:4a:bd:ca:72:20:
18:c0:ab:fc:07:b4:11:19:d5:bc:3b:4d:cc:24:6c:8b:18:aa:
38:d7:a9:eb:14:ec:3f:1c:ec:a7:1b:58:b1:d5:26:0e:6c:5b:
23:50:ac:41:d0:50:ec:65:d7:20:68:0a:e0:29:80:e0:69:48:
3e:61:e8:de:31:a8:c1:d8:55:e5:0f:47:77:3f:63:da:db:1c:
e2:a9:62:fa:ba:24:38:59:3a:26:59:81:12:ff:7f:8d:de:51:
12:9a:56:c9:33:05:50:29:5d:18:1b:6a:52:df:96:0f:d3:a5:
69:af:21:0a:1a:1e:4c:f6:b7:6c:4e:7a:cf:a8:2c:1a:cd:20:
1d:cc:ca:cd:db:74:24:89:1e:51:36:10:29:b6:e6:0c:6a:41:
f1:ed:56:be:28:7c:09:54:bd:0e:ba:0b:66:cd:4e:42:85:0f:
3d:58:4b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:48 2026 by rpki-client