Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
File: xHKa8T09FW9BGXaxduVU-mcddvc.mft (raw, json)
Hash identifier: UFSyiOBWZKh9t1MPNl86ArlzGHywkjcZei011fQg1R4=
Subject key identifier: A4:3D:36:3F:EA:43:8B:B3:84:67:C2:68:23:02:E1:1D:F0:C9:D9:A1
Authority key identifier: C4:72:9A:F1:3D:3D:15:6F:41:19:76:B1:76:E5:54:FA:67:1D:76:F7
Certificate issuer: /CN=c4729af13d3d156f411976b176e554fa671d76f7
Certificate serial: 01A00213DBC15E28FBBE8B048A30EEB3456B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
Manifest number: 1745
Signing time: Fri 14 Aug 2026 21:00:50 +0000
Manifest this update: Fri 14 Aug 2026 21:00:50 +0000
Manifest next update: Sat 15 Aug 2026 21:00:50 +0000
Files and hashes: 1: 5bGOVGgpUSjx1uwMkRS9oqXlCJM.roa (hash: gEd4SfTflxW3Gsgz2afT2mctC6KsEwsMe5axMz0injA=)
2: xHKa8T09FW9BGXaxduVU-mcddvc.crl (hash: lYm0yNNhWmgy7KJZLYjZBvXcqPJux3zsF42hIXHXJ9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:db:c1:5e:28:fb:be:8b:04:8a:30:ee:b3:45:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4729af13d3d156f411976b176e554fa671d76f7
Validity
Not Before: Aug 14 21:00:50 2026 GMT
Not After : Aug 15 21:00:50 2026 GMT
Subject: CN=a43d363fea438bb38467c2682302e11df0c9d9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1e:db:24:86:a5:8e:40:2a:87:6f:d4:89:7b:
1c:8f:4b:23:21:db:43:62:30:fa:b8:a7:c7:a3:6a:
4f:d4:a6:40:a0:14:12:de:ce:8a:21:8c:62:a6:b5:
f3:37:b3:07:76:f8:0d:e4:28:22:b9:e3:77:f5:01:
03:26:70:ee:fb:11:57:2e:78:a8:08:bf:90:5e:94:
66:a7:9c:30:60:cf:2f:e2:14:10:18:a1:4c:0b:50:
58:83:e1:a9:3a:c2:a8:ba:b4:ca:8f:77:2a:2e:00:
f4:a2:7d:2c:bb:d4:b6:3f:74:3b:00:2c:52:2e:bc:
39:26:4f:50:74:d7:8e:a0:90:13:5c:45:41:26:44:
79:4a:8b:33:4e:b8:28:94:79:b1:14:f2:7e:9a:4d:
0f:1e:66:96:ea:e1:47:21:30:65:bd:1b:5a:78:ed:
85:26:a7:a8:e5:7f:c0:6a:0a:6c:34:30:8f:d2:b6:
28:fe:da:5b:b4:e2:71:cd:04:b0:68:0e:25:27:5e:
ca:83:38:19:7a:f0:a0:92:92:87:87:3c:88:3d:88:
44:9a:bc:d8:1c:67:db:59:91:be:e4:a9:cd:7d:2d:
eb:8c:64:b3:9d:bb:66:cf:7f:3d:64:bf:5b:4f:d2:
d6:79:cd:db:8b:0d:2c:a8:24:54:d1:1d:63:2e:34:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3D:36:3F:EA:43:8B:B3:84:67:C2:68:23:02:E1:1D:F0:C9:D9:A1
X509v3 Authority Key Identifier:
keyid:C4:72:9A:F1:3D:3D:15:6F:41:19:76:B1:76:E5:54:FA:67:1D:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:32:0b:fd:93:ec:39:4a:bc:57:fe:a4:29:e1:b2:5d:b4:24:
e2:e1:9e:db:ae:c7:d2:a2:b7:26:f7:82:62:e1:ba:28:be:6f:
f3:08:be:a5:69:b4:d7:a0:31:34:74:75:5c:44:77:70:49:aa:
87:1e:b5:5c:bf:a6:a1:da:a1:dd:93:37:9b:60:41:39:cc:8e:
bb:8d:f5:bf:cd:d1:b4:72:4e:00:87:cb:38:2c:04:63:1d:49:
8f:ac:a2:a9:de:58:74:1f:f8:5d:93:3c:02:1b:c1:ce:c7:5e:
5b:e2:1f:87:41:fe:25:e5:fd:74:56:67:94:4b:65:d8:19:ac:
b9:72:b7:f5:a9:c9:42:b9:7d:5b:68:44:0f:c1:3e:29:d4:8b:
58:7b:65:a1:6a:9e:6c:7a:13:6f:87:78:b9:76:9a:54:25:4d:
51:01:3f:9b:d6:de:bb:35:d2:1a:e4:a9:42:4f:f8:74:17:31:
8e:ac:28:53:01:e8:1b:48:d3:3c:1e:f5:67:8a:39:61:1c:8e:
a0:bd:ee:f9:2a:90:c3:48:9d:56:91:de:c5:c8:d1:96:72:47:
e3:6b:96:38:14:93:83:41:81:23:96:c4:7b:65:00:b1:91:6b:
06:9b:2c:30:a4:bc:7f:15:ba:c0:00:02:f1:4e:84:ce:43:67:
99:1d:ec:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:09 2026 by rpki-client