Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier: 4+jIpw4nuvdt+vJfMr5ecE2+d7T7g9scBz7tBreRR8Q=
Subject key identifier: F0:6E:A5:36:ED:65:0C:09:A9:49:F1:F0:16:ED:C8:DD:DD:C1:98:C8
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 01A0035DFEDEBADF7F914982BD33239EA9AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number: 1A1E
Signing time: Sat 15 Aug 2026 03:01:26 +0000
Manifest this update: Sat 15 Aug 2026 03:01:26 +0000
Manifest next update: Sun 16 Aug 2026 03:01:26 +0000
Files and hashes: 1: vvOgIMkDpg0381NKvOJ6xEsVrhU.roa (hash: Ilfe2d/82ILTFX47xfIYllXXNOO6y9+T+nkxBpSb/2g=)
2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: ZQQ6wJQ4R7ELlesOFbkHJ8triAdZzHuSDLuDENivFog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:fe:de:ba:df:7f:91:49:82:bd:33:23:9e:a9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Aug 15 03:01:26 2026 GMT
Not After : Aug 16 03:01:26 2026 GMT
Subject: CN=f06ea536ed650c09a949f1f016edc8ddddc198c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:08:7f:78:d4:8a:3f:e6:8f:81:99:cd:c3:6c:
1a:64:eb:49:b0:f8:f0:cb:ab:bd:60:04:95:64:50:
57:e9:81:44:e6:d5:6a:15:50:5f:c8:8c:4f:2b:5b:
7e:11:62:92:a8:c4:72:69:ca:fe:ad:97:49:59:9d:
f2:54:7d:b3:0b:f8:99:f3:ef:ee:58:c5:3b:54:81:
f3:00:94:83:2a:7a:91:ac:a1:8e:01:c5:93:43:46:
4e:11:af:86:67:af:21:e5:df:ac:3a:77:c7:20:2c:
3c:63:1a:b9:ce:20:1a:88:48:08:02:6c:e1:60:dc:
0f:54:47:47:93:1b:85:f2:82:3d:c3:5d:91:4f:47:
7b:e7:51:11:5a:38:87:a9:49:54:8c:10:56:e0:99:
42:0f:d6:b4:ca:fd:f2:42:ba:e5:a7:6e:fe:93:81:
3f:83:20:05:cc:4e:10:04:00:cd:5f:e2:ef:5d:11:
4a:a1:2d:4d:e3:11:1a:c1:c1:43:dd:53:0b:c4:0b:
c5:a9:9d:d4:aa:d9:a2:7f:84:bc:f2:8e:81:70:bc:
cf:73:06:87:2e:3e:2d:44:28:47:ee:da:ab:47:84:
f8:51:18:4a:3e:b6:fa:4c:b6:ba:7d:27:72:16:d0:
67:d3:9f:8c:93:74:c0:39:e7:1d:aa:1b:50:79:3f:
22:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6E:A5:36:ED:65:0C:09:A9:49:F1:F0:16:ED:C8:DD:DD:C1:98:C8
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:97:0e:34:bb:a6:a6:cb:de:25:db:3f:c0:e5:6c:76:ed:29:
b2:1c:c0:06:57:62:8c:ae:01:b4:6b:30:50:4c:da:d4:80:b0:
e8:e0:a3:9d:4e:42:ec:63:fc:c4:61:54:0a:a0:ce:fb:3f:37:
fa:6b:54:a4:db:5d:de:bf:5e:49:29:ce:54:58:52:98:a2:06:
95:85:4b:21:4b:b7:a1:e9:8a:14:56:9b:d0:6a:b7:a3:22:e1:
22:45:1e:17:ed:fb:f4:7b:79:91:e7:7b:a4:e4:bb:6d:b0:47:
84:04:f1:c1:54:e0:67:1e:d5:6e:03:a6:0c:14:bc:25:32:86:
ed:c1:bb:04:68:5c:1d:31:e4:69:c3:54:86:0c:e8:29:b7:3e:
8a:d9:7b:a7:5c:bc:1a:e7:a1:f7:0f:af:c1:a7:6a:e8:63:13:
30:26:41:f7:ca:1e:13:53:d0:90:84:5a:86:32:2d:77:39:56:
dd:83:7e:8f:8a:54:f1:2d:c7:84:64:2e:4b:f7:24:af:77:8f:
bb:e0:90:9e:09:2f:b5:2b:ec:7f:7f:6c:19:f2:f5:af:ca:80:
61:d0:fe:90:62:87:37:a4:3d:19:ff:75:1c:d2:bd:8e:8a:98:
8e:bb:1c:e4:1b:4b:2c:54:48:00:36:31:45:03:dc:57:5a:8f:
c2:0a:33:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:33:56 2026 by rpki-client