Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier: onkRvJhUkjux4YciqI+aFMGrI8K7DXtn7ZgZ3bwItVU=
Subject key identifier: 24:46:52:81:E6:CC:38:89:5E:89:FE:7B:E8:12:59:F8:07:5E:35:E1
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 019FF911588793D696BEE83A498E34951EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number: 0EEE
Signing time: Thu 13 Aug 2026 03:01:31 +0000
Manifest this update: Thu 13 Aug 2026 03:01:31 +0000
Manifest next update: Fri 14 Aug 2026 03:01:31 +0000
Files and hashes: 1: RrwlRSSdwln9HbzArcN9f7ThR9c.roa (hash: Ic3y0/hXv+5FL5zNAqt7WX+ncQH0cGC5wuQsjbsXF7I=)
2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: FYCdkrrYlC+tfO3Mh7rpzp7KqjG2tIePn2pyzpp/Akg=)
3: fWpL_ta7aXoIKT8lwYmDL0nQegU.roa (hash: r+7J0jRgrAdlkGpSk5T7jtJhr78GxAY9zYWBhS85+uQ=)
4: l5tw0iDO7abT_AibKjZJaQ4nwWc.roa (hash: r+71S+WnEwowT4NhvO1eI4eYiERh6tzaeOlSbc80Img=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:11:58:87:93:d6:96:be:e8:3a:49:8e:34:95:1e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Aug 13 03:01:31 2026 GMT
Not After : Aug 14 03:01:31 2026 GMT
Subject: CN=24465281e6cc38895e89fe7be81259f8075e35e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:4b:ed:74:9d:11:c4:b9:d5:c9:ce:10:86:
4b:b9:3a:c3:96:f0:fc:2c:0e:82:4b:72:52:d1:86:
3b:4a:a5:7a:02:e0:09:7d:34:e3:42:b6:f4:12:17:
8f:e8:2e:18:82:77:7f:05:02:fc:b5:0b:64:ed:8b:
90:73:42:f0:0e:01:b3:5e:27:3a:8a:1b:60:37:f6:
d5:47:7f:0f:f7:09:eb:28:27:ec:b9:c6:02:ef:4f:
90:fa:34:69:d1:d2:93:88:6f:c5:e2:24:48:30:37:
77:90:a0:66:4c:51:16:bd:d1:f1:32:fe:75:ea:bb:
79:5f:d2:ff:4c:85:2c:36:7b:1a:55:48:42:28:97:
a6:93:e1:b0:22:b3:fc:94:cc:01:22:97:b6:ea:21:
d1:0c:65:a4:56:76:29:55:df:72:ac:7d:b1:03:ba:
e0:02:d7:18:98:69:05:59:33:f8:c0:b0:3d:15:d9:
3b:98:c3:fe:bb:5a:e5:96:95:e4:92:03:c4:cb:47:
47:64:04:71:fe:76:30:8b:2f:2f:af:13:5b:35:e4:
be:e2:6b:cb:08:5a:4b:2b:75:15:5b:c4:83:3b:97:
eb:e1:5b:56:2a:25:61:c9:b9:e1:2f:e4:2a:c7:7c:
fb:67:cb:67:b3:59:1c:3c:a7:0f:ee:e2:e0:f6:64:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:46:52:81:E6:CC:38:89:5E:89:FE:7B:E8:12:59:F8:07:5E:35:E1
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c5:d4:7f:65:aa:45:29:13:b2:f1:43:5e:3c:2e:60:10:f8:
27:77:79:d1:cb:fb:55:6e:8a:bf:44:45:dc:2f:50:57:9e:36:
bd:4d:62:da:66:72:0e:9c:d2:3a:ca:dd:db:de:ec:b5:4b:a8:
d1:70:87:f0:04:ad:c4:1e:64:33:3b:59:c4:c0:26:68:99:01:
62:bc:eb:94:0d:d0:4f:c9:9c:af:95:d1:8a:37:0f:03:50:95:
5b:29:f0:3a:3a:25:36:bc:48:a3:80:ca:18:84:20:ef:a1:ea:
25:56:7c:f0:ef:35:e5:44:79:68:a7:ce:64:3b:00:92:4f:22:
f7:db:ee:0e:a4:fa:52:09:da:5c:ed:c9:7d:e5:12:ce:65:3b:
d3:88:d5:22:76:4a:a1:1b:66:15:d0:7a:a3:ec:88:76:6c:ce:
12:81:9c:27:88:cf:5e:b6:65:31:ad:22:d6:9e:13:7a:a1:8d:
9e:99:c6:97:62:7f:01:52:69:7b:2c:91:0c:a4:6d:66:fc:8b:
7b:4b:99:61:db:8f:67:62:08:24:8c:fc:33:75:8d:af:6c:a5:
22:75:d8:2b:15:dd:f7:14:c7:85:7f:5c:ed:86:a9:09:5c:bf:
d9:aa:9b:92:70:41:ff:7d:7b:28:70:b8:51:23:d1:38:6b:6e:
4c:a1:5a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:24:17 2026 by rpki-client