Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier: qPiJy17KjoD/KcNR6beoNDFMgbI8usAxp1SKB7axPGs=
Subject key identifier: 98:82:A2:44:4F:AF:2A:75:B9:A5:48:69:59:F4:28:1F:9B:22:0B:A0
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 01A01F43236BCBE3DF7C3D99CDA8EE3B03CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number: 1A11
Signing time: Thu 20 Aug 2026 13:01:28 +0000
Manifest this update: Thu 20 Aug 2026 13:01:28 +0000
Manifest next update: Fri 21 Aug 2026 13:01:28 +0000
Files and hashes: 1: BQKL8EXCPvyOQg1ICU181HzsTLY.roa (hash: MQTZW+TVECgfYFhuLaoeF6hUd6ELHRAnYHxRk4WvfLE=)
2: FxY1RAn7Uc02QNfQHdB91asNvfo.roa (hash: XFxgE3CskWpWNCg7s6TQKuMZYsJq+2wXqoHIuIsrGSk=)
3: mvSatyfuo61e-RTaG2TAjXDZEec.roa (hash: Wd+3k5bQsb75PtYForkA7tIC7S5S2MMNM7YiFG0yOOs=)
4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: xAJDasudreuoWRiNyObj2XuJObLGDQN+wVhypdt8oio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:43:23:6b:cb:e3:df:7c:3d:99:cd:a8:ee:3b:03:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Aug 20 13:01:28 2026 GMT
Not After : Aug 21 13:01:28 2026 GMT
Subject: CN=9882a2444faf2a75b9a5486959f4281f9b220ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:20:ee:72:ce:33:f5:eb:a9:d4:61:4f:96:3d:
9c:7f:a6:f0:f6:21:8f:3a:4d:4c:ea:30:6c:92:a6:
0a:f4:83:52:5c:56:f1:4c:60:53:71:86:86:04:6f:
b1:90:ce:23:2d:63:72:8c:8b:63:49:24:61:f0:6d:
55:69:97:ce:03:bf:8e:8d:7d:ef:c6:df:46:20:47:
15:d3:d7:f0:95:b8:28:91:39:e5:b6:ab:80:c9:e0:
a7:02:3e:55:75:3f:93:a9:a9:6d:88:ca:27:48:03:
e0:89:0b:a0:80:7e:b8:e8:71:65:c7:b3:4f:07:fc:
33:6e:de:63:1b:c0:6c:ea:24:5b:7c:72:44:35:bc:
30:ac:56:f8:b1:4e:a7:04:19:24:4b:1e:42:e4:b2:
94:f7:67:04:dc:85:a4:7c:8c:d5:c6:ae:36:f2:ed:
5e:e0:57:20:24:cb:e8:45:32:cd:57:56:a4:97:7c:
7a:e0:4d:fb:f4:86:19:6c:5a:38:6a:ab:1c:7a:82:
1e:20:17:42:70:88:ff:ef:16:69:d9:3e:b0:b5:cc:
07:b5:7c:b2:33:df:c4:71:a8:24:ab:16:e0:e3:2e:
17:6d:f2:4a:de:d6:8d:0f:82:6f:9f:e8:a5:0d:fb:
27:bd:d4:22:d9:48:c5:0f:dc:dc:4b:6b:72:e2:fc:
02:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:82:A2:44:4F:AF:2A:75:B9:A5:48:69:59:F4:28:1F:9B:22:0B:A0
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:22:30:e5:87:c3:89:d0:38:5f:cf:51:f8:e8:d9:62:ac:33:
2d:7f:52:01:3f:96:ed:b3:af:ef:fb:b3:b8:c8:53:b6:4a:60:
90:17:dc:82:40:db:d0:23:86:1a:97:39:8a:17:46:9f:b3:ff:
60:b1:70:9d:ed:39:6e:f8:1c:32:28:d6:9d:a4:b8:82:c8:3e:
e3:91:43:ce:2b:e9:ff:a4:3a:c8:c2:ef:6a:46:9a:d5:b8:ea:
45:0a:42:fe:65:28:86:aa:0d:0c:68:77:b9:11:92:0f:2d:44:
6e:c4:4c:66:ca:bf:3b:1a:c7:f1:8a:34:ea:4d:2c:8b:c3:1a:
11:7a:17:a4:5e:dd:f8:90:e3:6f:34:dd:c8:9c:b9:0e:50:73:
cc:12:7d:99:3d:c5:e6:d3:36:f0:8b:59:27:2b:fd:13:0d:4d:
90:b7:87:d8:47:66:bc:15:b2:28:fa:33:67:b9:5a:b2:7b:5b:
b0:9b:38:1e:cb:a7:81:d6:84:a2:99:45:22:c6:64:32:34:c0:
ce:39:cc:d9:ee:f4:55:e0:e6:a6:4a:ed:da:d9:a8:3b:6e:31:
f8:16:60:05:ff:af:f4:bb:31:fa:84:c1:f8:a4:62:b5:bf:3e:
74:15:21:3d:e7:69:3e:ba:41:7f:bc:1e:b4:73:a6:ab:78:f3:
cb:aa:12:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:01 2026 by rpki-client