Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier: KVB8FVdVWLrAkPgYaqSIF0FhG49PF5EhEk5nudt814E=
Subject key identifier: D9:A9:34:48:AC:7F:5F:26:9C:8B:5B:26:BC:FD:63:E4:17:77:17:E5
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial: 019FA03A9001B2AF94F83D82BC114B3927CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number: 0BF1
Signing time: Sun 26 Jul 2026 21:00:20 +0000
Manifest this update: Sun 26 Jul 2026 21:00:20 +0000
Manifest next update: Mon 27 Jul 2026 21:00:20 +0000
Files and hashes: 1: 7bGl1Xdi6Pm1X1Ab1Zfe3WxrCvQ.roa (hash: WitY0IfqjKazmEtgATl+1ViOVRltHmA3RLHFAZFUngo=)
2: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: sl9zVw+5/U4/M5JGmsp8w6MVQ/LwxOo6lo3SHYIw48Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:90:01:b2:af:94:f8:3d:82:bc:11:4b:39:27:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
Validity
Not Before: Jul 26 21:00:20 2026 GMT
Not After : Jul 27 21:00:20 2026 GMT
Subject: CN=d9a93448ac7f5f269c8b5b26bcfd63e4177717e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:49:fd:5f:b6:a9:76:79:7a:0b:fa:1c:95:
d0:35:a1:50:6f:f6:e1:dc:f4:95:83:99:66:2a:99:
01:12:36:4b:bd:56:06:d2:13:a7:db:cc:37:bf:4e:
7d:1f:bb:b4:8b:85:b6:c3:a9:d1:ba:0e:1a:b8:a5:
d7:f7:b0:74:2d:44:f3:b3:26:4f:61:90:74:df:3a:
79:26:e0:c4:8f:ea:96:d2:8c:a9:f3:9a:46:17:b2:
9b:66:e1:42:6c:37:1b:33:3d:ac:93:b5:5e:07:9a:
55:fd:79:a4:6c:26:72:be:23:d6:14:ec:6f:d4:f5:
91:51:d1:10:86:de:af:d5:29:ee:79:f9:d9:6b:1e:
15:ea:d5:7f:88:b0:9c:17:01:4c:a5:b7:5f:d8:04:
99:83:b4:82:5b:fa:70:97:08:cd:51:5a:87:3a:f8:
ee:ff:1f:b8:0c:64:53:d7:d3:8e:96:50:50:0d:63:
c3:90:74:d1:de:6e:b1:d5:5d:3e:b2:d2:f9:3a:92:
40:86:8a:bc:00:fa:4a:c2:69:88:f3:bd:ec:30:57:
93:3a:27:1b:34:b4:8e:5d:71:5b:98:8f:3e:81:52:
6d:f8:44:ff:90:73:ea:51:08:83:75:d5:d4:09:2b:
9c:8b:69:ea:70:bb:5e:3c:d9:d7:79:18:8d:f9:b7:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A9:34:48:AC:7F:5F:26:9C:8B:5B:26:BC:FD:63:E4:17:77:17:E5
X509v3 Authority Key Identifier:
keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ed:0b:74:3a:f6:74:21:9b:25:18:d7:24:d3:a8:8d:cf:a7:
84:e8:ed:19:28:06:ff:a1:75:69:8a:b4:d5:ec:91:16:60:2e:
61:36:6d:df:cb:a8:df:7a:b2:c9:cd:04:e1:27:5a:b2:54:0e:
b6:c7:ac:63:fd:85:cf:11:53:d1:01:21:21:56:61:47:a1:61:
de:f9:f1:e8:98:d6:e6:b2:99:ef:32:e1:a0:cf:83:fe:da:11:
f0:95:0b:d2:b6:40:66:69:00:7a:06:0c:c8:2e:bd:c0:87:a9:
fc:32:ea:25:74:0e:50:f0:78:fd:23:34:6e:f4:70:6a:63:6b:
80:3e:cf:f9:58:da:39:e3:81:42:ca:fd:b0:91:07:8e:93:10:
20:f7:10:f8:68:3c:b8:3a:1b:9a:c3:ae:f6:7f:05:10:64:af:
6a:fc:d5:e4:1e:f8:37:c3:98:d2:41:d5:ba:29:c1:a7:7d:c6:
bd:50:9a:11:f5:53:25:51:66:b5:7a:da:14:84:11:2d:9e:ad:
dd:c2:56:32:3e:af:e6:7a:ff:6d:c2:46:d1:e4:9e:ea:c8:09:
7a:ee:1b:bb:c4:10:a0:84:95:d5:89:ea:20:b1:0c:42:dd:1b:
e1:05:67:64:00:35:fb:17:da:17:62:c0:3d:81:d6:36:de:d1:
93:32:8d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:47 2026 by rpki-client