Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: ILhB7YLGLwGELu9vLuuq45R+G7mDt42co4P7De5xu+8=
Subject key identifier: C3:08:DF:E8:BB:89:8D:AB:5B:F8:F3:F8:E6:00:5C:90:9E:73:7D:00
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 01A026FC9B7E14B794F22285C3BA10910992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 08C8
Signing time: Sat 22 Aug 2026 01:01:23 +0000
Manifest this update: Sat 22 Aug 2026 01:01:23 +0000
Manifest next update: Sun 23 Aug 2026 01:01:23 +0000
Files and hashes: 1: uWNKx0IJVXvtTHYU4bkunZTjfuw.roa (hash: AUH4XmlqocQ9F/9lHvt0FvG+HzGfyUQaY0PdFUq9T4I=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: +Xtdb6SFppmAfCyAhTUroKE7rMb3tzcUiUPMwLbdIco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:fc:9b:7e:14:b7:94:f2:22:85:c3:ba:10:91:09:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: Aug 22 01:01:23 2026 GMT
Not After : Aug 23 01:01:23 2026 GMT
Subject: CN=c308dfe8bb898dab5bf8f3f8e6005c909e737d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0b:0f:56:5e:19:d1:dc:16:a5:f5:77:a8:6b:
22:4e:d2:60:74:56:3e:7a:30:19:6d:98:a4:2b:bd:
bf:46:21:b6:34:05:7a:94:c9:dc:79:7e:8b:b5:8a:
3d:d9:50:6b:09:d4:af:89:c1:11:13:30:a7:0b:1e:
7c:5d:05:11:91:ca:25:43:b7:2f:3e:dd:9d:7b:d4:
69:86:eb:a9:55:7d:be:9d:cb:b9:e6:7d:c3:d7:b2:
52:5b:75:55:30:7a:32:74:66:e0:9a:39:c1:a1:c7:
3c:dc:48:19:b5:63:6d:71:ab:1f:e2:03:27:fe:05:
08:58:35:50:6b:43:00:6a:bd:f5:be:83:d8:6d:9f:
f2:1e:e6:9e:88:c4:00:e9:f9:b0:4c:db:85:e7:bb:
f8:e2:17:15:c9:22:99:92:19:6b:fe:bb:f6:88:c9:
b9:bd:95:bd:9b:00:f8:31:77:c8:ab:21:2e:c2:b3:
a9:87:fb:d9:3a:36:cd:8d:00:8f:81:4b:0b:7b:d7:
2c:05:bd:cc:e6:1c:70:07:56:a7:08:30:a1:2c:9d:
cd:fd:71:4f:ca:1d:4b:a8:3e:ba:21:3f:ac:63:9a:
94:e5:d0:ae:eb:41:18:17:49:04:80:b4:38:45:79:
61:1f:cb:d8:5e:06:2b:c8:fb:bd:67:62:4b:7b:f3:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:08:DF:E8:BB:89:8D:AB:5B:F8:F3:F8:E6:00:5C:90:9E:73:7D:00
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:21:e2:93:08:b7:ae:d6:79:52:51:43:06:80:69:b6:97:0e:
ae:6d:5e:0f:48:9b:05:97:73:de:c1:05:89:a6:83:58:6d:61:
08:e6:4f:97:ec:1e:b9:08:d1:76:fc:42:59:df:af:83:30:0d:
02:6c:74:ba:b8:df:e1:2d:a4:c9:96:e1:49:45:5c:aa:30:37:
03:6c:8c:10:19:1d:be:7a:4a:09:ff:66:d2:be:27:a1:3f:99:
57:71:4d:a2:d1:df:18:01:00:31:3d:ac:d7:63:d0:7f:12:bd:
ef:a6:2f:bb:7a:d5:9b:ad:70:2d:ad:21:5c:4c:a0:ad:38:cb:
36:81:32:29:c9:24:dd:5a:c7:16:47:e2:e2:e0:a5:7f:4c:52:
aa:7d:4b:75:19:cc:37:3c:c0:f8:f5:99:49:37:81:d0:b1:93:
c1:ac:95:f9:7e:e7:65:a5:75:f8:d8:b5:df:d0:e9:d9:c1:ce:
38:e6:a7:13:76:b3:42:e2:5e:4d:dd:df:11:00:26:c3:49:92:
5b:12:3a:7f:e9:81:5b:3d:1e:52:82:75:1d:38:5e:e1:d4:10:
df:7c:fe:88:d5:84:a6:6e:e6:af:c3:9b:59:56:04:bd:84:a4:
70:10:43:01:a3:32:88:b1:76:de:77:7c:bc:a3:88:58:f5:1a:
0e:37:c4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:09:09 2026 by rpki-client