Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
File: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json)
Hash identifier: CRrwSF+smpo1Ldq5peXTc71NUKIF9wUgtDceGwdJ11M=
Subject key identifier: DA:3D:78:DF:B9:2F:AB:3A:3D:70:91:84:04:9A:83:B2:F7:6D:A9:E1
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Certificate issuer: /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial: 019FA1F1FB1CA63AE11C290C10565B9866B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
Manifest number: 0694
Signing time: Mon 27 Jul 2026 05:00:17 +0000
Manifest this update: Mon 27 Jul 2026 05:00:17 +0000
Manifest next update: Tue 28 Jul 2026 05:00:17 +0000
Files and hashes: 1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: SOwoW0uZdFgmfF5fTODSWtYh4Gs89sldWOEzRVSsuhM=)
2: zrY1kiCbt_RCBDyoPeb6Gt-rfXI.roa (hash: 99km0sbg09Xs5uX9uuCKMjDG2dbDXHFkyqnyOKsmuE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f1:fb:1c:a6:3a:e1:1c:29:0c:10:56:5b:98:66:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Validity
Not Before: Jul 27 05:00:17 2026 GMT
Not After : Jul 28 05:00:17 2026 GMT
Subject: CN=da3d78dfb92fab3a3d709184049a83b2f76da9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:e9:68:31:c0:29:2e:78:35:2c:03:74:1d:
d2:ee:8e:46:d7:24:db:e4:f7:cc:5e:27:27:fe:b3:
ce:ea:ed:fc:8b:86:fb:69:af:b1:1d:43:8c:40:db:
53:ad:1f:ad:29:d5:ae:cf:d5:d1:c0:5e:05:4a:02:
63:c3:7e:f1:5c:62:1f:7e:39:ce:77:de:d7:66:a5:
0e:e8:ef:a6:50:70:cd:cf:91:da:19:ec:01:6b:be:
26:37:e6:9e:df:e5:a2:ab:1c:95:88:3b:dd:34:c1:
5c:a5:10:9a:74:23:c6:db:fc:37:3d:00:0c:c8:1e:
93:ad:76:a3:d6:b8:da:58:41:46:01:56:ed:62:eb:
e0:8f:53:f6:db:f0:27:d3:de:b5:d7:4a:88:bc:31:
83:1b:73:84:88:da:f4:d2:28:5b:87:e2:e4:7c:e2:
8d:a5:e0:0a:03:95:61:7a:37:44:46:07:d1:2c:86:
16:01:67:3b:b0:1e:e7:a2:92:a3:39:ab:e8:50:34:
7e:ac:a6:c7:14:be:42:36:14:ae:95:94:24:d3:1b:
d4:ee:a5:30:69:a5:92:57:82:e4:cb:56:f1:3b:9a:
41:08:9c:37:09:83:d6:74:b4:53:83:6c:01:36:af:
0e:54:cc:d3:99:a7:43:18:f5:38:46:2a:bd:8b:81:
54:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3D:78:DF:B9:2F:AB:3A:3D:70:91:84:04:9A:83:B2:F7:6D:A9:E1
X509v3 Authority Key Identifier:
keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:36:85:d9:ed:f2:31:e3:3a:d0:3c:a8:be:6a:0e:9f:4f:7b:
ca:09:41:f2:3c:af:54:00:c6:8d:14:73:ae:56:3e:01:50:d9:
92:49:af:ba:cd:57:9b:fc:5c:4b:e5:87:3a:ef:ee:72:ec:af:
a3:6b:93:c8:47:09:09:b0:ab:c5:aa:cd:38:79:0f:6c:2b:66:
90:f3:d8:78:18:39:bb:25:b2:c4:61:b5:57:06:a9:91:e8:a9:
3f:c1:9e:9b:19:46:07:cb:cb:a4:2b:28:5d:cd:ce:2d:96:1f:
f2:c0:6a:8d:58:b5:be:65:f8:66:fc:2b:be:35:54:74:65:da:
98:ef:7f:f9:ae:80:fc:4f:48:81:ae:a9:4c:50:bb:b0:db:03:
fc:20:78:f1:56:e8:93:19:b8:1a:be:71:21:b2:68:a9:f5:91:
81:f4:cc:6c:9e:41:87:0f:f7:c5:74:e8:4b:6a:bd:e5:53:81:
73:a4:eb:c9:51:4e:9a:65:33:e8:5b:d4:39:2c:aa:76:7c:fe:
90:68:fb:8e:26:12:89:a8:8f:2c:66:7a:7a:77:c4:f1:30:5f:
44:d4:b3:eb:f8:8c:de:f0:55:79:f4:71:64:d9:81:40:c6:5c:
c0:e9:fe:78:8d:31:dc:b5:c1:26:04:7e:ea:4d:6d:af:cf:84:
3e:c3:ee:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8fscpjrhHCkMEFZbmGazMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYTlmZmZhZjA5MjQ5YjIwY2Y3ZjU2N2MzY2NiOTk1OGI0
ZjMxMTAwHhcNMjYwNzI3MDUwMDE3WhcNMjYwNzI4MDUwMDE3WjAzMTEwLwYDVQQD
EyhkYTNkNzhkZmI5MmZhYjNhM2Q3MDkxODQwNDlhODNiMmY3NmRhOWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUnpaDHAKS54NSwDdB3S7o5G1yTb
5PfMXicn/rPO6u38i4b7aa+xHUOMQNtTrR+tKdWuz9XRwF4FSgJjw37xXGIffjnO
d97XZqUO6O+mUHDNz5HaGewBa74mN+ae3+WiqxyViDvdNMFcpRCadCPG2/w3PQAM
yB6TrXaj1rjaWEFGAVbtYuvgj1P22/An096110qIvDGDG3OEiNr00ihbh+LkfOKN
peAKA5VhejdERgfRLIYWAWc7sB7nopKjOavoUDR+rKbHFL5CNhSulZQk0xvU7qUw
aaWSV4Lky1bxO5pBCJw3CYPWdLRTg2wBNq8OVMzTmadDGPU4Riq9i4FUFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNo9eN+5L6s6PXCRhASag7L3banhMB8GA1UdIwQY
MBaAFF6p//rwkkmyDPf1Z8PMuZWLTzEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHFuXy12Q1NTYklNOV9Wbnc4eTVsWXRQTVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82MWVkNDItZjcyMi00YmEwLWJkODkt
YjU0OWZmYTA0MDQ2LzEvWHFuXy12Q1NTYklNOV9Wbnc4eTVsWXRQTVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82MWVkNDItZjcyMi00YmEwLWJkODktYjU0OWZmYTA0MDQ2
LzEvWHFuXy12Q1NTYklNOV9Wbnc4eTVsWXRQTVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzaF2e3y
MeM60DyovmoOn097yglB8jyvVADGjRRzrlY+AVDZkkmvus1Xm/xcS+WHOu/ucuyv
o2uTyEcJCbCrxarNOHkPbCtmkPPYeBg5uyWyxGG1VwapkeipP8GemxlGB8vLpCso
Xc3OLZYf8sBqjVi1vmX4ZvwrvjVUdGXamO9/+a6A/E9Iga6pTFC7sNsD/CB48Vbo
kxm4Gr5xIbJoqfWRgfTMbJ5Bhw/3xXToS2q95VOBc6TryVFOmmUz6FvUOSyqdnz+
kGj7jiYSiaiPLGZ6enfE8TBfRNSz6/iM3vBVefRxZNmBQMZcwOn+eI0x3LXBJgR+
6k1tr8+EPsPuMA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 12:47:00 2026 by rpki-client