Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier: CdUPOA2SqQUIa1Q94lsRUH0XTeoOzatzWYFISamCOmI=
Subject key identifier: FD:65:20:72:EE:7F:C6:ED:6D:F2:33:A7:42:50:BF:50:1E:1E:A1:DB
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 019F976ECEB0DEAE55E2E33CCEFD981BD48A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number: 07E3
Signing time: Sat 25 Jul 2026 04:00:49 +0000
Manifest this update: Sat 25 Jul 2026 04:00:49 +0000
Manifest next update: Sun 26 Jul 2026 04:00:49 +0000
Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: yX8EOvXvk21w7zI+PAY1QuwgWACSDDQBFvQnz4RrkFc=)
2: zIooxkz42P8_5ReZHQIQQDyh_E0.roa (hash: vHG8nX4oJh4/M/Rbe7SvWBLoOWc7PYioObPqt6DtUuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:6e:ce:b0:de:ae:55:e2:e3:3c:ce:fd:98:1b:d4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: Jul 25 04:00:49 2026 GMT
Not After : Jul 26 04:00:49 2026 GMT
Subject: CN=fd652072ee7fc6ed6df233a74250bf501e1ea1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:4d:a4:8c:d6:12:b3:70:0e:9e:0a:0d:e2:
0e:6d:bd:0e:a9:ec:8d:0f:3c:0e:9c:20:f0:2b:cb:
5d:f0:19:eb:87:8e:a3:64:82:02:8d:f5:d2:d5:e7:
62:a9:96:30:58:8b:67:26:10:4b:6a:07:24:01:27:
48:32:d2:88:b1:07:ca:19:b6:a4:03:20:50:d8:8e:
c4:23:cc:12:d4:5c:29:8d:1a:90:f7:6b:ac:04:2b:
83:25:88:ad:d9:5b:47:90:df:22:4e:d3:10:67:a3:
ef:d6:3c:93:91:2e:a2:5c:d0:3e:97:2f:fc:ab:fa:
09:c5:58:b6:1e:6b:34:ff:70:05:39:d2:4f:35:10:
ae:4e:82:f2:cd:91:59:6f:14:9b:c7:96:03:3e:c1:
fc:df:eb:ba:89:9d:15:a6:51:7f:c1:20:4a:58:ff:
53:7b:48:8e:b7:61:1a:b7:14:37:e2:a7:9e:cb:cb:
e8:2b:54:e8:4b:8d:f9:5b:e3:87:1d:24:0d:ce:1f:
48:af:02:bb:8e:8d:08:5e:56:09:34:db:79:82:2d:
d5:e1:d9:b5:59:01:f6:58:73:86:0d:c9:82:92:64:
5a:36:49:79:92:9f:9e:d4:79:0c:a5:da:32:8b:ac:
74:9a:da:1e:24:28:2b:01:de:7a:98:b8:c9:91:d0:
f2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:65:20:72:EE:7F:C6:ED:6D:F2:33:A7:42:50:BF:50:1E:1E:A1:DB
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:cc:14:3f:84:f0:c7:4d:d9:fb:9d:9a:ac:fe:61:35:15:7b:
52:74:f0:aa:f0:fe:3c:8f:af:e0:6e:f6:c6:a0:a2:e1:1e:3f:
e4:e9:db:74:f1:3f:51:79:34:00:34:57:1d:af:cb:94:53:1d:
46:34:49:03:e3:1d:6b:39:1b:e3:48:49:6a:87:e8:f7:dd:63:
39:ea:dc:26:7e:2c:70:e2:aa:56:30:71:9f:17:fc:1f:26:23:
f9:cf:5a:c8:27:2a:62:ee:52:64:2a:33:24:a4:ee:87:36:f8:
5e:e1:04:89:28:a1:a9:ba:3d:11:40:f0:1f:47:bc:b0:b8:62:
44:f5:e1:b5:e3:dd:e1:e2:d3:7e:97:e3:ee:8c:1e:b6:67:4b:
ff:cd:c1:e5:4a:48:c9:7e:05:fa:70:8d:e2:f5:0d:54:e6:49:
2f:a8:c9:bd:5c:ef:8d:4a:d3:d0:c4:c3:f3:37:e9:57:9e:65:
4c:1b:86:a3:db:d9:00:d3:8d:74:b4:a0:27:31:2c:31:69:71:
37:15:5a:f2:85:93:c7:27:df:65:1e:68:44:e1:61:a3:3a:13:
e2:c7:30:cf:4f:81:e9:05:3f:9a:da:81:a5:cc:f2:82:17:21:
be:4c:a9:f3:63:0b:60:2a:a9:21:67:0f:63:bd:2e:4d:48:2f:
5a:55:87:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 07:52:39 2026 by rpki-client