Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: pBnZjY2YpyoMwI+I6aglZqD5WG1bqdRfI6lCIfIS3Ag=
Subject key identifier: 72:5B:E8:33:E3:1E:66:E8:12:51:B2:F9:B7:36:CC:2C:A8:B2:2E:9C
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 01A05931A12C3DD44B137876FB35D535BA67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 1A34
Signing time: Mon 31 Aug 2026 19:00:19 +0000
Manifest this update: Mon 31 Aug 2026 19:00:19 +0000
Manifest next update: Tue 01 Sep 2026 19:00:19 +0000
Files and hashes: 1: 2oiBg97yJfcku7AZ1xtBGexIP9I.roa (hash: ZkJc6vel+43QcyypXskCAIYVCyw1+ndC8Q1LjIoI34g=)
2: GWcwAEGL8dWNpctIdaHLmJt2F-M.roa (hash: icoIbE+7HxZrn6cToVlzjrHBi9MeFRezSthDAS8pPcs=)
3: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: v5EwRN5aO3A3JMh56fX6KV2NpotF5dLh2BfMYPFs6m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:31:a1:2c:3d:d4:4b:13:78:76:fb:35:d5:35:ba:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Aug 31 19:00:19 2026 GMT
Not After : Sep 1 19:00:19 2026 GMT
Subject: CN=725be833e31e66e81251b2f9b736cc2ca8b22e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:23:be:f5:04:cc:7a:2f:52:73:f9:23:b8:
b1:6f:60:22:43:a2:09:25:02:83:09:95:87:ee:71:
a2:d3:87:7a:df:e3:40:2e:34:9f:54:8a:28:2a:26:
8d:0f:54:62:c3:c8:b7:5c:04:8c:aa:52:b6:f2:49:
27:4a:3b:90:ea:2e:93:b2:45:5d:de:9d:5c:60:d9:
bd:c6:3b:b6:71:b8:88:dc:ec:0e:41:79:b0:17:8d:
55:18:06:bc:3f:56:ae:dc:3a:27:44:28:32:33:a0:
a9:67:9f:3d:9c:6e:25:b6:e6:a0:d7:4e:14:75:5e:
3d:98:34:d5:f2:f5:3e:66:e0:fd:6f:c9:ff:0c:5b:
2e:05:7e:92:c7:e3:0d:75:fb:7f:a0:55:40:c1:0c:
4d:0c:7b:23:56:39:b3:00:8e:83:9c:bb:c0:27:41:
9d:54:47:40:1f:54:d0:bf:01:dd:92:13:66:e7:54:
81:fc:69:d6:bb:e5:0b:f1:c2:b1:43:c4:38:d2:d1:
de:e1:f8:dc:44:00:49:52:43:31:01:98:3d:0e:21:
70:0b:ab:97:93:46:1a:8a:a1:8b:5b:d0:99:4b:21:
13:35:b1:82:f4:c0:d9:0d:33:8a:58:25:27:19:36:
dc:60:0b:bf:da:79:48:ad:9c:90:da:bd:39:df:04:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5B:E8:33:E3:1E:66:E8:12:51:B2:F9:B7:36:CC:2C:A8:B2:2E:9C
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ea:42:4b:b9:90:02:9b:c8:d2:9c:aa:27:a9:1c:03:ec:35:
af:4a:b3:1c:9d:3a:d3:b0:c6:23:16:77:7e:a8:5d:43:d1:6b:
0e:ba:a8:f3:11:70:0d:47:59:45:79:a3:3a:24:e2:b0:34:d7:
b7:38:b7:c0:ad:b1:4f:12:1c:f6:51:3f:8e:1a:ee:d3:23:e5:
6a:6c:3e:07:fc:b7:f5:1d:32:89:6d:cf:59:ef:dd:1c:be:21:
f5:bd:41:df:eb:6d:bd:5f:99:09:79:89:5d:2c:73:74:14:d1:
bd:b0:48:d5:08:be:a2:57:c3:09:bb:b9:bc:ee:af:69:08:7e:
cf:cd:09:03:2b:9e:c7:0e:7d:d7:c5:4c:25:34:99:80:e7:42:
c8:fd:28:2e:76:05:fa:56:15:5f:9e:46:76:ec:ba:7a:30:dc:
c8:b1:86:a9:d0:bd:99:6e:a0:58:b8:2b:31:4c:e0:5e:d0:5f:
fb:2e:d4:fd:40:74:9c:f6:02:f8:a2:73:8f:4e:fa:6f:29:7b:
44:43:a6:8d:ee:20:19:c9:74:b5:50:1a:ca:52:be:35:a9:58:
a6:d8:71:7b:83:1c:34:2d:6c:a6:4d:d6:96:5b:14:2f:50:ca:
07:3c:a7:a4:f5:8f:46:2e:2f:30:8f:ba:4d:f8:27:f6:18:c8:
81:bf:c9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:33:04 2026 by rpki-client