Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier: 64yie+NjAfVGGjoCxj5mhZ4BrxHVRbq2Od1CYYJw0bE=
Subject key identifier: D0:C0:A5:61:47:99:B6:B3:49:33:16:63:C2:DD:DD:B4:7E:C4:10:FF
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer: /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial: 01A0F4FB4235045D82C4F34ECB02F6AFF074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number: 153E
Signing time: Thu 01 Oct 2026 01:01:42 +0000
Manifest this update: Thu 01 Oct 2026 01:01:42 +0000
Manifest next update: Fri 02 Oct 2026 01:01:42 +0000
Files and hashes: 1: 2GXp3bAaWM3wTgvjV8eCwVFexe4.asa (hash: hZQJ0WbwmhsDuDCzZWaSBDjdh67b2hIGAFsSqcCCZZ8=)
2: Q2eq3vQ27LdqIhXEwPYKtKFxrj8.roa (hash: w/CxsU35XsDW4qiiMK3VW7xr1QGFT3WBU9iNjApYbmk=)
3: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: MldlPLHVFx9MopkSnNqmvlygwm5y+6LdpQ+WiSHKcrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:fb:42:35:04:5d:82:c4:f3:4e:cb:02:f6:af:f0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Validity
Not Before: Oct 1 01:01:42 2026 GMT
Not After : Oct 2 01:01:42 2026 GMT
Subject: CN=d0c0a5614799b6b349331663c2ddddb47ec410ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:f8:41:75:21:87:7d:2c:aa:c4:03:7f:4b:
e6:16:fb:8d:7e:49:1b:53:25:a3:2a:cf:42:22:b2:
05:18:c1:d4:c2:7b:ac:82:ff:68:2d:72:70:57:d2:
1d:5c:eb:b5:e4:16:dd:48:20:7d:1f:3c:cd:b4:1e:
06:c9:f7:b9:3f:f6:01:ee:1a:3a:1a:f2:01:7a:f5:
74:b6:e1:09:56:46:79:f5:d4:73:d0:24:b2:52:3b:
42:68:87:02:d5:14:de:0c:fd:6c:a6:b9:cb:4f:d1:
d3:a3:0b:36:ba:b2:d3:8c:8f:cf:5c:4c:c2:d7:38:
70:d6:f4:85:7d:ce:84:ed:88:f6:e0:4e:fe:ad:e1:
90:76:14:d1:89:9c:8a:f8:ef:db:0b:98:41:da:94:
e5:36:05:b1:4b:68:fb:73:b2:e6:cf:e3:20:2c:a3:
77:31:1c:46:02:3b:04:9d:7a:b4:56:6c:96:72:c1:
76:37:72:f9:4b:55:fd:f2:73:cd:f1:1d:3e:2a:a7:
db:ac:37:57:bb:92:98:6b:dd:4a:a9:a5:d9:5b:0b:
94:21:1c:59:8f:6e:30:0f:fb:0a:2e:00:c2:ce:2e:
5d:d1:df:b7:ac:43:9c:84:59:07:da:ce:5d:4e:c7:
0e:6c:9a:7d:3c:cd:0d:9f:df:f4:a2:31:29:50:17:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C0:A5:61:47:99:B6:B3:49:33:16:63:C2:DD:DD:B4:7E:C4:10:FF
X509v3 Authority Key Identifier:
keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9a:e0:1f:71:f8:ef:fb:63:1d:a8:c3:c9:8e:60:3d:29:a2:
5a:af:83:88:6a:0e:16:c4:bb:86:d4:9b:02:54:ab:f0:fd:39:
4b:a9:3a:ff:91:f2:b4:1b:fe:3f:1e:46:a5:9a:bd:59:74:df:
1b:1c:d1:2e:ed:ca:3c:73:6b:69:62:78:e2:29:ef:7d:34:f4:
5d:d4:af:4b:66:df:3c:69:75:eb:ee:8e:57:e2:b6:b3:42:26:
22:53:d6:1f:b5:fe:0d:9f:dd:37:c6:05:4d:30:21:db:99:f2:
b3:1f:c4:bc:31:da:95:34:59:db:b5:9e:41:f6:00:7d:cf:69:
24:ba:48:9c:2c:0d:9e:ec:23:56:06:b0:05:d5:38:18:c8:ac:
a5:e7:73:b3:9b:86:e0:ba:d0:37:49:30:17:bb:af:48:50:b5:
81:4e:61:6f:53:73:35:82:44:08:a8:ae:c9:08:41:be:51:84:
fc:32:2b:d0:4e:f6:bf:1d:40:b7:e7:fe:3d:55:8b:e9:0c:67:
c1:b6:96:53:85:9a:2a:21:17:e4:ba:8b:e0:4b:19:67:4f:8d:
b9:d0:cd:9a:c2:a5:84:ed:a3:8a:67:72:51:10:e6:27:87:51:
a9:a8:af:ef:64:e8:d0:cd:d1:44:9c:d0:2f:69:56:d7:e7:62:
28:8c:ba:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 04:20:35 2026 by rpki-client