Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
File: xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json)
Hash identifier: kiTmcWJfIpGxm6qamzVe4PXa8v0ZIg9mnL/drcXQmoQ=
Subject key identifier: 8C:E5:F9:1E:30:09:26:8B:5F:25:D2:0D:AA:8F:23:66:3C:75:F2:F6
Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
Certificate issuer: /CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Certificate serial: 019FA296CB2A55D6B3774442D01D8E050BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
Manifest number: 08E8
Signing time: Mon 27 Jul 2026 08:00:19 +0000
Manifest this update: Mon 27 Jul 2026 08:00:19 +0000
Manifest next update: Tue 28 Jul 2026 08:00:19 +0000
Files and hashes: 1: OBYyhiA-o_Lu_Sii3K0csw4HB8Q.roa (hash: losaCS7PxxPceDw56uDFnzA7tz476/wdte0ltw/SmOk=)
2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: w75s/WyJZxbStHsmkh7LLfaxvwUDLTwA8mP0wE/Z/EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:96:cb:2a:55:d6:b3:77:44:42:d0:1d:8e:05:0b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Validity
Not Before: Jul 27 08:00:19 2026 GMT
Not After : Jul 28 08:00:19 2026 GMT
Subject: CN=8ce5f91e3009268b5f25d20daa8f23663c75f2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:9b:a2:8f:35:10:7f:a6:76:66:ad:af:50:
3f:97:f7:54:b8:ed:ea:d1:94:c3:93:ac:ea:33:7d:
48:4d:22:69:98:b1:de:3a:4e:ef:b7:d2:62:1d:56:
a9:27:25:88:73:7e:a2:6f:28:96:44:3c:ef:ac:1a:
9e:33:ef:39:6a:29:a0:9f:97:c8:81:b6:0a:ac:86:
f7:a3:48:85:a4:d1:82:41:9a:67:ff:03:2c:26:3c:
b2:0b:c7:34:99:6d:9a:95:78:3a:a2:ac:6a:57:d8:
5f:25:61:a5:a7:07:4d:c6:7b:de:88:d9:7d:67:07:
0e:db:8b:c4:f7:a9:08:63:13:25:d5:45:4e:84:3b:
aa:cb:32:37:47:c5:e0:98:6a:62:ed:54:09:98:b4:
0b:50:73:25:f8:e0:6a:89:a4:8e:6a:6d:bd:e2:bd:
28:ab:86:a3:73:34:d2:df:df:61:63:be:a9:e1:2b:
d9:30:f2:36:7c:ba:9c:dd:c0:a0:d4:bc:b9:d8:2f:
1f:48:c6:d3:4d:4b:d6:e2:25:86:0d:3b:99:ee:8d:
7a:77:a7:c7:f3:0b:d2:9c:81:5b:6d:e1:06:69:e6:
fc:c1:93:41:63:16:1d:94:d9:64:3c:6c:48:d4:88:
79:bf:22:e0:7c:e7:40:2b:4b:15:4f:0f:b6:50:7f:
18:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E5:F9:1E:30:09:26:8B:5F:25:D2:0D:AA:8F:23:66:3C:75:F2:F6
X509v3 Authority Key Identifier:
keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b3:dc:29:02:ca:dd:93:a9:a5:ab:c3:9c:e6:41:68:80:c2:
90:eb:57:30:52:f3:75:63:d2:e3:80:c7:70:c3:d3:c0:85:d4:
1b:b0:26:d0:6e:14:1b:e4:5f:7d:d4:45:7c:36:ea:be:7d:d4:
cf:74:8f:71:78:df:e1:fe:16:c2:3b:75:51:ef:bd:97:d2:b9:
ef:18:46:23:34:56:76:39:0f:0f:34:c7:2e:eb:ed:ca:2b:3b:
bb:8d:c9:ed:7d:81:a1:f2:44:97:bc:05:1a:ff:c8:83:86:b6:
d5:72:12:f3:34:24:fb:fd:0d:a8:b3:09:53:59:24:68:2e:19:
6e:f8:2f:09:86:4c:4d:b1:17:58:07:c9:84:20:2f:06:8b:7f:
48:3a:a0:29:42:a4:bf:c9:88:25:58:44:b5:9e:26:df:8d:05:
63:78:ef:58:08:83:13:93:12:88:a6:16:5d:82:56:84:ad:b8:
a1:a6:4f:c4:19:45:3a:ad:24:53:de:8d:61:3f:09:30:d4:a5:
9a:88:e0:33:b7:cb:cb:fb:88:e5:d1:de:ce:87:31:1b:b6:7c:
02:91:1f:0a:93:5a:56:b3:9f:2d:2a:bf:8b:7d:4d:19:6c:98:
e0:a4:bf:1d:f9:3a:fa:5c:6c:f8:f1:bb:40:51:e7:9f:8e:c0:
5f:9d:a1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:50:21 2026 by rpki-client