Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
File: XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft (raw, json)
Hash identifier: qrNxCYUjatMf5M+/vdhpkyNIhI2wdBKrXsi/ulIEG60=
Subject key identifier: 40:B8:22:BD:BC:0E:77:F5:20:6A:9A:D1:94:A7:E7:A8:75:A4:31:3A
Authority key identifier: 5C:14:65:0A:6F:9E:C8:C3:85:70:B1:BC:49:97:58:65:86:8A:DE:E0
Certificate issuer: /CN=5c14650a6f9ec8c38570b1bc49975865868adee0
Certificate serial: 01A0035E98C8A8781214DA72CE28C79B512D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
Manifest number: 7B
Signing time: Sat 15 Aug 2026 03:02:06 +0000
Manifest this update: Sat 15 Aug 2026 03:02:06 +0000
Manifest next update: Sun 16 Aug 2026 03:02:06 +0000
Files and hashes: 1: 04Jned94Tm4i1zjB6zNQbqDkj_E.roa (hash: SONtOeyZ10Os/7J4wXL7zFzVJyuJnftLszlFQu+LaN8=)
2: XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl (hash: 6gAvIqa4mlV4s6FqWr4sOXPxFeA1CTYU67vbUOoF6AM=)
3: ZVwy0ZfFb9sOAQVJkv6jGWwOzQA.roa (hash: aaY2/fswTLKyyajK0wJbHpj/eHxX7OB2bAMISHRWGRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5e:98:c8:a8:78:12:14:da:72:ce:28:c7:9b:51:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c14650a6f9ec8c38570b1bc49975865868adee0
Validity
Not Before: Aug 15 03:02:06 2026 GMT
Not After : Aug 16 03:02:06 2026 GMT
Subject: CN=40b822bdbc0e77f5206a9ad194a7e7a875a4313a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:49:03:8b:88:8a:82:d8:d8:69:db:15:57:
8f:b9:d5:1f:8a:89:f5:c3:26:be:3f:93:51:a7:12:
4b:a4:d9:26:bb:58:4e:46:47:8f:45:e9:db:54:d0:
73:b7:d9:2b:82:b3:ad:b6:8d:b0:b2:55:84:08:37:
08:c3:da:f3:54:d4:54:79:ec:fe:4e:50:6d:09:0b:
a4:23:e3:b6:be:d4:dd:c2:c5:f4:4c:84:cd:cd:3e:
07:f0:74:9b:7d:40:99:ed:b1:9f:09:03:5d:ef:1d:
fc:cd:a6:a3:ab:b5:b3:9c:2c:89:8c:eb:fd:72:27:
c9:e1:17:3d:a8:de:2e:d4:79:8e:2c:dc:9d:42:c2:
3d:2b:fa:5a:d6:69:ac:89:a3:b6:78:37:11:00:81:
bf:47:d1:b7:10:8e:9e:78:ff:5c:c1:d1:42:e8:a5:
54:62:7e:fe:1a:df:fb:4b:25:e7:ea:54:d6:2f:5c:
6b:3d:de:f9:e8:d2:6d:da:c8:1a:dd:27:c5:32:6c:
b4:49:d3:85:a7:fa:59:60:0b:f3:ae:bb:ed:8b:fd:
96:53:db:0a:45:d2:2b:e8:51:d8:1b:29:87:9f:38:
6e:9e:f4:2e:19:cd:59:d1:c9:19:af:5c:60:80:7e:
d8:c6:43:a0:7d:5e:3a:6b:7f:fc:30:86:42:6d:60:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B8:22:BD:BC:0E:77:F5:20:6A:9A:D1:94:A7:E7:A8:75:A4:31:3A
X509v3 Authority Key Identifier:
keyid:5C:14:65:0A:6F:9E:C8:C3:85:70:B1:BC:49:97:58:65:86:8A:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:24:97:57:c0:5e:0d:03:46:74:cf:5f:ae:08:b9:ff:65:5c:
e2:32:df:66:d5:ff:1d:29:f1:e9:56:3f:26:9c:b1:da:67:3e:
19:af:90:80:60:f2:66:dc:50:08:4d:2f:18:5c:35:a5:f1:ad:
70:64:1b:6a:13:58:5c:ab:c7:17:22:81:75:e0:45:dc:ff:44:
d2:10:20:ee:00:19:6f:4d:72:33:fb:22:99:28:ff:bb:2d:10:
d1:28:8d:3a:a8:f7:ec:a5:d2:2e:1e:92:5f:2c:b5:f8:ee:c2:
f5:35:77:84:c6:89:4b:ea:8c:8f:78:ca:03:83:3f:72:80:71:
2c:39:00:f9:6e:26:42:4a:f1:82:d6:14:1d:8c:4f:fc:bd:30:
f2:20:90:62:77:b6:36:60:96:19:3c:f1:76:28:31:25:6a:2e:
87:e5:15:29:5f:ed:70:99:b5:29:5d:7b:41:da:0e:04:d5:e2:
25:96:cd:0d:ca:e6:03:06:fb:39:06:13:49:80:2e:3e:f4:74:
0e:ba:b4:a1:ef:26:e9:62:06:52:43:b8:5e:bc:1c:c1:8a:0e:
f8:81:21:8d:75:2a:3e:4b:1b:54:0d:55:e9:e5:1b:9d:95:27:
55:97:af:b8:71:c5:46:1a:61:8d:69:9d:f6:9f:e6:f9:03:93:
11:e2:9a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:03:42 2026 by rpki-client