Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: /FUNTlz+MkHDg0qssLoGfonEN070bG+8Y+VLmjCJ/Co=
Subject key identifier: F2:22:7A:93:BC:E7:6F:8D:F5:AE:34:E5:E4:0B:93:9E:2C:FD:70:54
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 019F28129BEBCEE39583519C1C01EFD04889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 0844
Signing time: Fri 03 Jul 2026 13:02:15 +0000
Manifest this update: Fri 03 Jul 2026 13:02:15 +0000
Manifest next update: Sat 04 Jul 2026 13:02:15 +0000
Files and hashes: 1: uWNKx0IJVXvtTHYU4bkunZTjfuw.roa (hash: AUH4XmlqocQ9F/9lHvt0FvG+HzGfyUQaY0PdFUq9T4I=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: XY57NQX6l/ovoH6cyvpAMvBbsU9aX6hK9YYEi80gxRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 13:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:12:9b:eb:ce:e3:95:83:51:9c:1c:01:ef:d0:48:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: Jul 3 13:02:15 2026 GMT
Not After : Jul 4 13:02:15 2026 GMT
Subject: CN=f2227a93bce76f8df5ae34e5e40b939e2cfd7054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fd:5b:e3:fd:82:2f:97:d5:50:05:23:76:65:
bb:e4:fe:55:53:78:cc:9b:28:8c:1e:e3:05:48:b6:
98:cb:30:b6:1d:de:9c:f7:59:ae:62:3e:5a:79:f4:
db:34:b7:7f:7f:10:a7:6c:e1:f9:4e:6a:b3:f6:9f:
68:15:ed:57:47:ff:7a:e4:be:0a:bc:83:73:75:a4:
59:f6:bd:fd:f6:27:4b:d9:e1:63:0a:20:86:11:4f:
89:b3:9e:2d:ab:c9:52:89:81:9d:17:9a:5c:35:4b:
94:db:d0:17:f1:85:cf:91:9f:35:e2:ce:b2:31:fe:
ee:b7:b6:42:fa:44:20:7e:db:6b:09:d7:7e:b1:61:
7c:e6:f4:81:16:77:d8:64:80:0b:60:1a:e7:2b:53:
72:92:f1:fe:dc:7f:a6:0f:87:71:81:1d:8f:9a:fc:
30:3a:3b:9d:a5:36:06:5b:35:0d:e5:0a:42:95:20:
8b:0f:d9:4a:71:28:87:87:9e:a8:9b:07:84:1a:e0:
62:77:ac:57:8b:da:6f:b5:08:0a:5f:3e:7e:1f:91:
44:3c:25:e4:67:1c:9b:5f:55:62:b3:ed:76:c9:04:
ae:51:d2:84:a7:e8:4e:a1:93:f5:10:af:1c:1a:72:
e6:69:5b:d6:78:d5:c8:c2:f5:13:af:f7:40:d3:f7:
0c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:22:7A:93:BC:E7:6F:8D:F5:AE:34:E5:E4:0B:93:9E:2C:FD:70:54
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:40:a8:d7:36:1d:62:a5:1d:a2:fb:5d:e6:9d:58:79:2e:de:
bd:61:4e:2f:0a:8a:68:a7:78:89:d1:90:cf:38:cc:4a:64:f2:
98:2c:ac:c7:57:9f:21:e1:a8:03:69:35:5d:be:dd:98:c9:9f:
a2:93:86:75:a6:ae:bd:60:62:c0:89:43:7f:97:26:65:d1:b5:
2c:46:89:66:4a:47:6f:e8:13:3e:0b:d5:91:c7:28:e1:d7:5b:
94:16:31:a0:d5:f8:68:e7:33:77:40:6a:9c:6c:dc:44:58:ee:
f4:94:d4:a7:16:95:d8:89:3a:1e:5b:6e:77:2d:85:3a:21:b7:
a8:f5:3a:1b:e1:11:78:60:4b:df:19:be:89:64:7a:92:c3:a3:
c1:4b:d1:1a:e1:91:96:ae:9a:69:03:74:1e:ba:d0:18:90:80:
62:07:76:18:72:57:29:5a:50:bd:d5:1b:e9:e9:ae:20:e4:a4:
d8:74:81:d5:16:2f:63:c4:7a:72:3c:d5:9f:22:52:57:40:20:
7e:cc:33:f7:89:b0:2e:84:3a:40:35:5c:2e:aa:4c:c2:8e:48:
4f:93:67:7f:c9:ba:70:97:7d:36:30:5b:8f:18:9a:36:4a:6a:
be:56:7c:e7:e5:da:e3:41:2d:47:bc:a4:a9:f6:c9:9f:b7:bd:
bb:7a:5a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:47:40 2026 by rpki-client