Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
File: X6e2rvC9JBEwTk88aVfILrJWfNM.mft (raw, json)
Hash identifier: jHf5JmTPSJPDId4zfdnjtChg3u7dkrJLiXCP8/07nfQ=
Subject key identifier: D1:67:01:9E:51:BC:5D:17:64:88:88:FA:61:4E:A7:C2:BC:34:11:8A
Authority key identifier: 5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3
Certificate issuer: /CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
Certificate serial: 019FA304AF22D283A1732064CC234C68C20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
Manifest number: 0DF6
Signing time: Mon 27 Jul 2026 10:00:20 +0000
Manifest this update: Mon 27 Jul 2026 10:00:20 +0000
Manifest next update: Tue 28 Jul 2026 10:00:20 +0000
Files and hashes: 1: X6e2rvC9JBEwTk88aVfILrJWfNM.crl (hash: 9WoRL9zQiudzhw4pmebEgjSqwIt5p6ssNG3OC2E50r0=)
2: zX6QTKu5bdfzDlEKlxRngpN7jFg.roa (hash: Es/vRwC7rF9QD60Cujq+vg2mRaTno8Hpf1rSpL/09/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:af:22:d2:83:a1:73:20:64:cc:23:4c:68:c2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
Validity
Not Before: Jul 27 10:00:20 2026 GMT
Not After : Jul 28 10:00:20 2026 GMT
Subject: CN=d167019e51bc5d17648888fa614ea7c2bc34118a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:5d:a3:06:64:90:f4:c2:86:bc:85:e0:f7:
2a:e7:ed:2a:00:22:1e:28:13:36:3e:0f:24:bf:d9:
e4:37:b1:dc:f7:fc:e1:ee:5e:97:2a:86:08:fc:db:
90:52:f1:93:17:e9:91:36:e2:ab:70:ab:06:ca:13:
8e:81:b6:76:74:51:26:3c:00:62:f3:56:4e:33:07:
28:82:2f:6d:2c:3a:e7:5e:2a:c8:ea:32:2f:4c:86:
52:45:06:ce:70:92:f8:7f:85:fb:45:70:54:a4:4c:
4e:21:dd:20:17:3e:82:15:fe:30:dc:c6:74:fe:f7:
6b:af:b2:33:00:d4:f7:7e:7d:23:3b:90:9d:2c:b9:
71:72:47:e7:70:7c:f7:66:4d:09:e1:d5:bf:66:73:
97:63:b9:b5:7b:7b:1f:ba:04:83:bb:2f:40:b2:85:
ad:d6:42:15:d8:aa:88:ed:21:10:79:63:8f:be:7f:
ec:fc:b4:bd:6a:25:42:e1:d5:04:99:e6:53:6a:32:
1d:5c:9d:0c:ae:e2:bb:79:c4:ef:29:31:98:d7:32:
22:3d:c8:d0:69:05:6c:6e:2e:cb:ba:03:d5:f9:da:
e9:84:d4:66:d4:25:12:a7:06:9e:e7:65:17:fa:63:
93:0d:e0:29:a7:7e:c4:f1:c8:f4:c1:9b:d2:63:2f:
26:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:67:01:9E:51:BC:5D:17:64:88:88:FA:61:4E:A7:C2:BC:34:11:8A
X509v3 Authority Key Identifier:
keyid:5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:31:4c:53:b3:f0:c8:91:7d:cf:44:85:c0:a3:f4:e2:3f:f1:
82:23:f0:05:70:a3:c7:d9:f1:62:1b:4b:59:bc:94:11:87:d3:
2f:cb:3a:f7:95:b1:47:70:a2:53:a2:45:b0:97:09:bb:be:aa:
2e:4e:c9:51:d9:28:b7:70:bc:68:3d:27:6e:ed:a3:45:65:65:
75:c4:d6:d0:26:94:f4:07:8c:fc:cc:3a:bf:2d:49:4a:11:ff:
c9:ac:78:97:e8:b4:57:aa:49:07:55:47:69:56:2c:40:ed:1e:
50:7f:87:83:d9:27:2c:1b:08:f2:1f:89:a4:56:5c:a8:63:fb:
41:dc:0d:2a:38:04:7d:eb:d9:b7:4e:1a:f0:b3:9d:83:88:c2:
80:df:65:d0:a8:00:db:e6:c6:03:23:84:49:6f:0d:ee:84:e8:
8e:09:25:8e:cc:7f:f4:22:12:cb:15:b7:79:0f:7f:55:50:46:
40:36:3f:a1:e9:7d:f8:78:a4:99:d8:46:74:89:7c:91:60:29:
e4:1b:c5:df:24:9d:1d:26:4c:bc:64:00:e3:94:20:9d:f3:5b:
69:5d:09:0d:12:e4:e4:74:ef:b1:9b:dd:ee:af:f6:41:79:47:
6c:4d:0f:3a:6d:56:77:5c:2f:8c:df:0c:3d:1a:89:58:84:eb:
d2:98:b7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:33:12 2026 by rpki-client