Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
File: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft (raw, json)
Hash identifier: 3TPGQ9opxXrrd18u/PrLC+UT5TpPOBCUzJ/BA3Yh4Nk=
Subject key identifier: 1F:DD:39:F0:79:EB:53:06:63:AC:49:7B:EF:EF:A5:43:EA:B5:59:24
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Certificate issuer: /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial: 019F189F15CABCF650EFB613772F05395348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 13:01:46 +0000
Manifest this update: Tue 30 Jun 2026 13:01:46 +0000
Manifest next update: Wed 01 Jul 2026 13:01:46 +0000
Files and hashes: 1: 1-KKEOWBhq-Xin1u07sp8fmHrvqc.roa (hash: PYl3rvHgnbdTXI4oGxGWGnIZl/efX3OeaWnZ83sqU1U=)
2: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl (hash: 4yeyGhWXpZaMlfBNq4nKGoOfs7omoaOJC1H8QniU5ws=)
3: hRCE6LdZkeQzF92rmCQdMQvaaL8.roa (hash: UB0DT/MFY2dNlWf8e/9nwn7NarMnjJ7fyxrd+zzOII8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9f:15:ca:bc:f6:50:ef:b6:13:77:2f:05:39:53:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Validity
Not Before: Jun 30 13:01:46 2026 GMT
Not After : Jul 1 13:01:46 2026 GMT
Subject: CN=1fdd39f079eb530663ac497befefa543eab55924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:60:3d:10:f1:87:2c:0c:ae:1d:58:90:78:
f4:66:ac:d8:1d:40:36:45:81:85:a2:3f:ea:fb:a5:
8e:d6:dd:0b:0c:32:98:6e:ee:38:d2:93:c4:f8:84:
b5:2a:59:a9:d7:ed:4b:c3:de:c4:ae:3a:3e:cc:6d:
7d:b9:e7:34:d4:03:94:64:ae:fd:63:5d:fa:53:27:
54:89:c3:ac:2f:01:0f:ee:08:e5:1a:20:33:21:b2:
f0:b9:24:95:eb:7e:75:04:9b:b7:23:34:2b:c0:19:
43:a6:92:69:8a:46:b0:3e:eb:2c:03:eb:d1:7e:5f:
1b:15:71:f2:1f:d5:b0:0b:a4:a3:a9:2a:b9:aa:5d:
e3:5c:39:f5:8d:7d:e0:8d:50:0d:a0:c1:3f:3a:2f:
e2:8c:9a:bb:63:61:05:47:bc:59:a9:a1:ca:a2:a1:
64:8e:11:6e:dd:b3:82:9d:f2:c1:e3:01:d9:6f:e4:
77:62:86:e8:b1:e1:c6:31:b9:9c:1f:e2:25:46:97:
f5:b7:be:65:77:0f:3b:f4:f8:4e:28:36:0a:bb:ce:
83:68:84:31:8f:08:77:a2:9a:b1:30:c8:d0:b0:e0:
2e:79:52:0c:a9:60:dc:87:0a:59:df:fc:ac:69:3d:
10:fb:90:a8:0a:32:5c:00:9c:39:68:aa:34:af:cd:
3a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DD:39:F0:79:EB:53:06:63:AC:49:7B:EF:EF:A5:43:EA:B5:59:24
X509v3 Authority Key Identifier:
keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b7:7c:81:b5:57:87:f3:4f:78:92:ac:00:bc:02:78:cf:27:
72:81:84:d7:4e:6b:33:36:56:a5:f1:e0:22:65:76:a7:0f:d0:
87:9f:d1:f3:dd:43:ab:58:e8:67:6a:af:66:b5:ff:3f:1b:14:
a1:d1:6a:e3:34:84:c7:9a:24:21:2b:1f:d4:33:72:36:31:82:
0a:0b:94:97:c0:0d:4d:e8:b4:8a:f1:15:7c:e7:08:b7:01:73:
19:43:60:7d:f0:88:1e:8d:b1:06:82:6b:f6:3b:18:ee:9d:b6:
0b:fe:6f:6a:fa:f3:d1:9d:45:b6:72:54:98:50:d8:81:bf:56:
98:11:90:3f:c4:bb:24:6f:40:35:03:67:9b:5d:f8:f8:d9:5d:
87:c2:f5:68:65:94:6a:6a:b8:67:1a:59:29:1e:c4:ad:33:c4:
2b:b0:3c:78:5f:78:ab:3e:1e:fa:a8:ee:67:8a:89:a7:74:42:
e2:ec:a5:4a:e8:a4:a8:48:28:a6:87:2a:04:63:ff:23:6a:c9:
76:8a:57:f7:1c:e7:d5:c1:ee:9b:3e:a2:f5:17:e1:e8:92:df:
d6:a1:44:9e:ef:03:6e:ef:cd:02:bb:73:45:16:36:6c:73:fc:
e6:4f:f2:da:3a:82:71:03:4e:5b:9d:bc:bf:14:0c:42:c4:61:
a1:69:de:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:14:55 2026 by rpki-client