Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: 23iaQIYX8HN+/bQFJODA7yCrS3RxxXZJRe7QV1C2oFQ=
Subject key identifier: 6B:80:CA:5F:72:DE:A8:28:2D:1F:8B:0C:C6:4E:B6:A6:B4:25:53:77
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 01A002B8D7459423700EF71D320B260BE09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 07FC
Signing time: Sat 15 Aug 2026 00:01:03 +0000
Manifest this update: Sat 15 Aug 2026 00:01:03 +0000
Manifest next update: Sun 16 Aug 2026 00:01:03 +0000
Files and hashes: 1: gW00o8n4Rs81BAgnMAtJNPDGHdU.roa (hash: SSNtGXPA/36/YiPMJlKvxQTbaar7XDaEXBXVj0gHR90=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: POC7jZYI4e04p3LxuXzNl9KDP6yVfWkfyfnUgQLErl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:d7:45:94:23:70:0e:f7:1d:32:0b:26:0b:e0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Aug 15 00:01:03 2026 GMT
Not After : Aug 16 00:01:03 2026 GMT
Subject: CN=6b80ca5f72dea8282d1f8b0cc64eb6a6b4255377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fb:52:e9:6a:5f:45:27:26:e9:27:41:bd:4f:
67:b4:47:78:73:97:ab:8b:78:33:a3:60:e6:d5:a7:
26:d1:3e:57:f4:bd:2e:72:fa:7f:c2:58:c2:9c:1d:
21:53:d7:05:60:9e:c5:0d:9b:e6:de:08:f0:82:fb:
27:1f:7b:26:3f:14:33:38:cf:fe:62:7b:38:3b:4a:
14:b3:ed:de:9d:5a:45:d2:32:06:61:d1:ba:aa:f0:
2a:20:21:c0:7a:f9:eb:93:75:f8:c8:1e:53:b8:56:
e0:ec:45:e3:a9:b2:1a:56:47:f1:18:de:8d:f9:3c:
f2:5f:d7:d7:7b:51:6f:ef:5a:4c:1b:3d:dd:2f:40:
e1:2b:39:30:a2:06:03:42:dc:aa:95:c6:ba:9d:3b:
0d:32:2f:81:79:8f:df:b9:95:44:23:8e:03:f1:a1:
cc:a7:9c:ed:b8:ee:ed:b2:e1:0b:ea:b9:28:f7:91:
6f:5f:5d:24:93:26:fa:f0:0a:a0:68:68:89:0f:73:
6c:bb:be:b0:22:65:be:4a:c6:5e:a0:98:60:a0:40:
aa:c7:e2:65:44:60:f7:a4:a6:a4:81:4a:66:8c:90:
24:5f:6f:d8:f1:84:38:41:d8:a3:ed:0a:0e:41:e0:
7a:c9:2f:8d:34:43:e7:da:bb:59:f3:0e:58:a3:9f:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:80:CA:5F:72:DE:A8:28:2D:1F:8B:0C:C6:4E:B6:A6:B4:25:53:77
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4e:67:96:25:9d:26:f2:94:66:e8:a9:1f:3a:b6:dd:23:3f:
8f:51:81:ae:75:04:43:37:c7:06:06:68:a7:3e:c3:0d:9d:5a:
cf:ad:8a:05:6c:aa:de:7e:a2:7d:70:50:62:44:5a:7c:61:24:
9b:ff:e4:b3:f9:0c:ca:3d:ec:e1:90:fb:d1:3c:4b:70:5a:97:
3e:ed:90:ba:c7:75:a6:a5:c2:e7:51:bb:07:1d:e7:f5:b6:0b:
9f:8a:7e:65:ee:58:2e:4a:09:4d:9d:54:0a:f0:cf:6b:7d:58:
4c:c7:80:4e:42:47:61:60:f1:fe:02:76:9f:33:10:9b:0f:73:
86:17:00:75:d2:b4:d7:bd:5e:f8:86:18:e8:47:6d:85:87:33:
32:81:2d:92:cb:0f:87:c6:37:ce:49:dc:77:1b:44:11:4e:c6:
47:3a:83:8e:83:1e:eb:78:15:e5:2f:a4:89:24:e0:11:21:c0:
2a:57:ed:99:81:85:b5:a3:e9:73:17:a9:2c:11:7c:42:ba:57:
4b:05:d2:80:83:f7:ff:b0:64:95:72:b8:17:82:8a:88:ca:e0:
b5:e6:88:8d:bb:94:6e:a1:32:be:50:8a:b1:d1:3c:4c:5d:60:
1d:77:04:d5:15:c3:05:58:34:b2:ce:92:6d:0f:07:01:04:7a:
00:e3:2d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:38:34 2026 by rpki-client