Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier: jHQjAVRbweplaX2LYr2IbmIXd921/CutrcHBRMDOZD0=
Subject key identifier: 10:18:EE:62:EA:8D:53:CE:40:32:23:55:ED:F2:C5:EB:8D:DE:FA:8E
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer: /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial: 019FF9ED35622DE5ABF77F0E2654A6C217B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number: 14BC
Signing time: Thu 13 Aug 2026 07:01:40 +0000
Manifest this update: Thu 13 Aug 2026 07:01:40 +0000
Manifest next update: Fri 14 Aug 2026 07:01:40 +0000
Files and hashes: 1: 2GXp3bAaWM3wTgvjV8eCwVFexe4.asa (hash: hZQJ0WbwmhsDuDCzZWaSBDjdh67b2hIGAFsSqcCCZZ8=)
2: Q2eq3vQ27LdqIhXEwPYKtKFxrj8.roa (hash: w/CxsU35XsDW4qiiMK3VW7xr1QGFT3WBU9iNjApYbmk=)
3: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: WYaHvuspBpYpePt0DRqkopHzOvm8yOg1biXugeKMWsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:ed:35:62:2d:e5:ab:f7:7f:0e:26:54:a6:c2:17:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Validity
Not Before: Aug 13 07:01:40 2026 GMT
Not After : Aug 14 07:01:40 2026 GMT
Subject: CN=1018ee62ea8d53ce40322355edf2c5eb8ddefa8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:ff:39:e0:5a:14:10:b7:1c:ab:b7:d4:89:
fb:c7:43:bf:e8:0e:12:e5:ea:b4:f7:dd:cb:16:16:
60:36:b7:b0:73:3d:b1:87:dd:90:a0:5c:e4:72:f5:
7b:d1:55:4e:56:b7:95:62:bd:26:28:e0:f9:39:6a:
50:74:7a:b9:28:18:b3:95:da:91:96:b2:0b:8f:57:
8a:a7:4b:dd:de:a5:ea:8b:62:7d:3b:08:97:e1:91:
dc:69:7c:28:29:bf:4d:1f:3f:5a:9d:e9:ac:6e:70:
65:e2:e6:10:a6:c1:fd:1c:99:c2:7a:6a:92:4a:bc:
b4:d9:0b:6b:ba:4c:51:7f:03:24:2e:aa:b0:c2:cc:
2f:2d:2b:f8:62:8b:b9:c2:1a:43:67:b8:02:b8:4f:
5b:69:95:36:06:f6:99:bd:d0:08:26:6e:59:2f:46:
49:4d:db:50:59:c3:a0:c2:01:b9:8b:cc:93:44:40:
b8:a6:7d:a5:d5:74:ba:cb:ea:15:25:0a:8a:84:b7:
66:86:c0:f5:ab:24:6d:ef:6c:13:85:1c:59:cb:a7:
98:79:50:ae:93:5f:95:35:27:4a:cb:4f:81:1c:96:
89:54:8c:65:a9:98:61:eb:03:f1:a7:dc:05:03:59:
e9:f5:68:c8:21:14:39:db:1c:bf:df:83:42:18:ca:
3e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:18:EE:62:EA:8D:53:CE:40:32:23:55:ED:F2:C5:EB:8D:DE:FA:8E
X509v3 Authority Key Identifier:
keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9e:5b:2c:af:90:9d:06:53:7b:23:8f:2d:ac:2e:94:37:3c:
5e:8b:10:b9:40:34:a0:45:43:41:0d:0e:cb:f1:02:42:5e:f0:
3d:82:6e:60:b9:c9:48:38:62:9c:6f:7a:69:f9:42:64:13:0d:
7f:bf:8d:93:22:e0:68:f7:cb:29:9d:84:f5:90:17:9e:48:9c:
56:b6:9f:8a:e5:f7:50:c5:69:25:4c:3a:3f:4d:be:62:21:9b:
9b:8b:f2:c0:07:4d:cb:b4:8c:2e:97:a6:77:d7:74:e0:92:e6:
df:78:14:cf:92:75:a3:28:65:d3:86:0b:8f:bc:5e:8b:ce:3f:
55:bd:8a:15:a4:85:74:5a:f8:66:38:22:4b:84:4e:09:13:d7:
36:93:b6:11:82:c6:6b:9c:20:19:14:ca:c3:2e:77:26:03:82:
8d:a1:33:de:d4:9a:6d:58:2f:c4:38:44:9a:19:33:9d:c1:36:
ce:89:c8:40:6f:7d:a6:45:07:53:a5:0f:25:50:a0:b0:0b:f5:
6a:1b:20:09:62:13:50:ea:c9:87:de:7b:ba:7a:a0:5d:b6:4c:
d3:2c:68:b6:fc:30:73:58:4f:73:b9:a8:ae:9d:06:49:1a:60:
07:5c:89:89:a7:f1:99:91:df:0e:80:83:b9:9d:da:bd:5f:fc:
86:a5:0d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:49:14 2026 by rpki-client