Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json)
Hash identifier: dxV6oHPrId31gioiJFPMjf5ASfZlyf7rpgUu74pctIc=
Subject key identifier: C5:5D:F8:14:54:31:17:5A:E7:3A:97:90:C4:94:35:97:6D:40:EB:D8
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial: 019F83E8EF7E8B3124072590613B3ECBDF2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
Manifest number: 0FD8
Signing time: Tue 21 Jul 2026 09:01:48 +0000
Manifest this update: Tue 21 Jul 2026 09:01:48 +0000
Manifest next update: Wed 22 Jul 2026 09:01:48 +0000
Files and hashes: 1: 4Kxd8dm-CWu1jCIsUqmZWt5sIc4.roa (hash: RVAhzYMBRgQ2W1wIbtL6Kztr89B+xTCwvr6xBM79OwQ=)
2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: sUgiie5oMrgmvwliqUVZLH2yPrj4Z8A/4jf281XwBA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e8:ef:7e:8b:31:24:07:25:90:61:3b:3e:cb:df:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Validity
Not Before: Jul 21 09:01:48 2026 GMT
Not After : Jul 22 09:01:48 2026 GMT
Subject: CN=c55df8145431175ae73a9790c49435976d40ebd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:96:4f:9b:a0:5b:0f:37:2e:67:57:d7:7b:
c2:b7:04:1b:86:27:66:04:4e:97:fb:f8:71:b1:a8:
7a:ae:a0:96:4b:85:67:55:9e:e7:02:0a:26:2c:da:
6a:1a:c9:f6:f7:82:87:78:b5:40:b0:10:14:83:d5:
fe:27:7e:e2:5d:3c:c3:99:e9:a5:3b:1d:ac:39:88:
d5:42:66:91:5b:28:29:e3:d0:72:0c:5a:4d:5e:83:
c1:58:2a:7d:23:2f:60:ab:c9:23:05:7f:97:6a:0c:
ed:b6:15:f4:b7:13:b9:bb:9e:f0:10:ff:08:78:06:
15:99:32:7f:c5:54:db:f6:61:05:1c:1c:04:76:73:
0b:82:a7:35:9a:0b:fa:d1:2d:fe:9b:b9:11:ce:ab:
91:3d:14:f2:10:0a:5d:b0:f0:1d:37:a2:5c:b2:79:
0d:ea:51:91:eb:d8:6d:b0:f0:ca:04:0f:4c:83:01:
f6:42:f8:1d:40:83:7f:ff:b3:b8:7b:d4:2a:3b:a0:
79:cd:b5:af:f8:8f:4a:16:1f:cf:c5:f3:3a:be:0b:
e3:5d:ef:ce:a2:42:e8:c3:c5:50:d8:e5:3e:d5:9b:
12:92:4f:8b:7b:1a:99:42:58:55:77:41:b3:19:8e:
b8:4e:68:4f:6e:0b:5b:35:e8:a2:e8:7c:4d:22:9e:
de:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5D:F8:14:54:31:17:5A:E7:3A:97:90:C4:94:35:97:6D:40:EB:D8
X509v3 Authority Key Identifier:
keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:39:9b:a2:b7:8f:2b:56:bc:fa:10:0d:95:58:5e:4c:73:3d:
ba:e3:7e:ee:7b:87:dd:3d:ce:b1:e3:e7:63:8e:1a:69:4a:4c:
bc:7e:27:d3:81:6a:46:4a:e3:2b:89:3d:66:2c:7d:ab:e8:47:
4d:20:5a:91:ca:f8:5f:f5:bf:c9:2f:5b:9b:ec:af:a2:f3:52:
d9:ec:7b:33:58:b8:83:2c:84:7a:13:d7:f6:4a:08:59:96:59:
45:3a:dd:23:39:1c:bf:6d:67:cc:ec:ca:bb:eb:c7:14:74:58:
82:88:80:f1:b1:21:06:f4:16:3c:81:19:72:53:47:c6:a5:40:
ca:e3:3e:09:aa:a0:f4:65:6c:bd:56:0f:d7:11:fa:96:6c:bb:
d6:f6:ac:1b:0a:13:df:93:53:42:41:c8:6d:34:cb:36:d5:44:
dc:62:d6:b5:e1:68:6e:92:26:4d:a9:b7:83:0e:55:44:91:10:
03:96:6c:12:6c:57:0e:cd:d3:02:c2:f8:79:9a:ec:14:fc:22:
fd:e1:3b:91:61:f7:ef:89:ee:ec:f6:ed:a9:2b:b2:a9:39:7a:
3f:c7:f6:94:ac:0e:7d:a4:12:61:d2:d7:f6:f0:29:b6:b2:0c:
a6:a6:f2:23:2c:e0:0d:4d:5d:54:1b:99:c5:43:9b:80:94:0a:
90:30:6e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:21:28 2026 by rpki-client