Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier: jcVlTLE3kt9sx2NAq+lDT3aZ/7sGuB3yJuJkiXvPsTE=
Subject key identifier: A1:76:35:F3:1B:50:8D:A1:DE:81:06:23:00:DB:CB:C7:4E:C5:DF:E2
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer: /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial: 01A075BD0455C9EC91BDE865E91F4F86BA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number: 19D0
Signing time: Sun 06 Sep 2026 08:01:56 +0000
Manifest this update: Sun 06 Sep 2026 08:01:56 +0000
Manifest next update: Mon 07 Sep 2026 08:01:56 +0000
Files and hashes: 1: a3vqBzTeMihaLI7nX3YXTwT9QXM.roa (hash: YtcSgTlR3L7xs2ulbON7vgzLF5ftnMrGCR+z8FjX7OE=)
2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: wAnQcc5zcaNCF7Uc0HeHk2Fd81pQViocDCRevdQTbAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Sep 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:bd:04:55:c9:ec:91:bd:e8:65:e9:1f:4f:86:ba:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Validity
Not Before: Sep 6 08:01:56 2026 GMT
Not After : Sep 7 08:01:56 2026 GMT
Subject: CN=a17635f31b508da1de81062300dbcbc74ec5dfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f9:4d:c7:59:e4:59:74:8e:31:84:14:64:13:
ce:ea:76:5c:1e:ae:ee:ac:f5:ee:3a:4b:16:24:86:
93:56:11:4c:39:4d:73:e2:27:e4:94:26:5e:95:b7:
30:ed:ab:5b:e2:9b:c8:5b:aa:84:cb:f1:20:16:74:
f6:9e:43:0c:a4:ca:c2:ce:19:ba:f1:83:7a:68:6e:
02:be:e0:ff:93:be:90:92:92:60:66:41:e9:d0:6c:
6d:81:3d:a8:94:b0:5d:fe:2a:20:3f:63:8c:9a:1c:
9f:fc:6c:4d:5e:12:c1:25:ed:e0:31:f3:b6:98:0c:
77:fc:31:de:2c:fe:cd:19:36:66:8a:46:6a:1c:32:
ca:64:de:43:7e:87:33:f7:6e:6d:47:fd:c2:42:49:
b6:05:0b:a9:43:fa:9d:f1:33:f7:25:3b:45:16:60:
4e:2a:78:eb:85:8e:73:36:8c:a0:6e:bb:9f:ef:7d:
90:0a:a9:ef:20:e5:4b:75:ed:a3:c8:70:ed:12:be:
87:fd:8a:1e:b3:52:1b:b3:a9:0b:01:f8:00:78:c3:
50:6b:cb:df:00:21:31:9c:88:9b:c8:89:e3:37:2a:
51:dc:63:48:fb:83:99:c6:cf:61:7c:06:07:b1:35:
75:68:78:7b:35:03:29:be:2a:ce:a0:78:c5:b7:eb:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:76:35:F3:1B:50:8D:A1:DE:81:06:23:00:DB:CB:C7:4E:C5:DF:E2
X509v3 Authority Key Identifier:
keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:00:3b:d2:27:4d:4d:22:93:c5:e8:14:27:e1:cf:85:ac:be:
52:69:7f:15:48:78:10:bb:f0:97:5b:3c:66:5a:a3:16:36:0c:
f8:86:80:b2:81:d5:da:09:41:58:ce:35:00:86:48:22:66:87:
f3:1e:8c:8c:0e:c9:ef:89:24:6a:8f:a6:ac:01:7a:11:5a:1d:
24:00:9e:bd:a5:b6:0d:d3:f4:04:a6:07:f6:ab:20:58:20:41:
8c:fb:e5:e0:1b:c5:4d:0b:cb:f4:a4:3a:03:a3:45:75:25:42:
97:1b:3d:d9:4a:4a:74:ce:13:e1:e6:5b:29:fc:3b:3a:6a:79:
2a:4a:c2:eb:f9:78:d1:2a:7c:d7:57:c7:fa:b3:aa:7b:84:2e:
af:ab:a8:4d:1f:ea:ad:91:18:75:b5:25:4e:fc:77:fd:60:1b:
6c:96:0f:08:9c:8f:33:18:d3:9f:a4:d4:fb:05:6e:56:a0:90:
ef:41:7d:e4:79:f7:fa:0b:e5:5f:3b:12:60:52:f2:c9:8a:28:
f9:b9:c2:2c:b1:e5:63:10:93:75:9c:db:74:10:5a:f4:e8:91:
8d:a3:9c:b2:38:9f:64:ea:87:10:97:98:74:92:24:08:a2:b7:
b7:45:95:c1:06:ea:1c:18:d0:83:32:25:66:80:d8:1b:76:68:
ad:e0:70:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 14:08:35 2026 by rpki-client