Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: J7HHFTF6p0VC82gsJmGGgKUb1O84vIQ53bFAS/iWIa4=
Subject key identifier: 32:3B:84:3D:3E:DD:F8:8C:E2:8E:9C:87:E7:5D:46:E8:4B:34:22:C6
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 019E2B1559F684AE94B5CEB2D3D29D1662C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 07C1
Signing time: Fri 15 May 2026 10:01:19 +0000
Manifest this update: Fri 15 May 2026 10:01:19 +0000
Manifest next update: Sat 16 May 2026 10:01:19 +0000
Files and hashes: 1: uWNKx0IJVXvtTHYU4bkunZTjfuw.roa (hash: AUH4XmlqocQ9F/9lHvt0FvG+HzGfyUQaY0PdFUq9T4I=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: SQ1YgZ+puB7dtlazmhXzypsTxRKyZEwGA2qS4OrHeZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:15:59:f6:84:ae:94:b5:ce:b2:d3:d2:9d:16:62:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: May 15 10:01:19 2026 GMT
Not After : May 16 10:01:19 2026 GMT
Subject: CN=323b843d3eddf88ce28e9c87e75d46e84b3422c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:1e:a1:7c:b5:51:2d:e1:7b:eb:fa:47:f6:
78:21:36:06:e4:bc:94:0e:a0:fd:a7:c0:16:ff:54:
d6:c0:79:ad:6c:97:fb:6c:26:31:8e:72:e7:8e:20:
39:44:34:03:07:dc:dc:5c:f3:0f:63:74:f0:8c:8a:
04:3f:38:41:51:8e:a3:bd:d6:15:9e:a2:d3:fc:e7:
cc:5c:a8:07:29:3c:50:c5:96:a2:ef:06:83:ac:3b:
4b:60:55:72:1d:15:11:66:25:be:35:35:e9:76:ed:
1a:15:20:0c:2e:fa:d4:7b:86:49:19:15:28:bc:6f:
5b:3d:b6:a3:21:5e:3b:14:f2:cf:14:86:83:94:90:
fe:fc:2a:81:5f:0c:6f:5e:69:e1:c9:c3:5d:6c:94:
39:a3:b4:d6:8d:6c:1c:c8:87:c5:c5:64:ed:32:ba:
78:79:4b:79:1a:d4:ba:c7:52:9f:bc:61:ac:0b:15:
d3:52:b1:89:a0:2f:39:f4:2f:f6:2a:b6:9a:82:ec:
cf:c3:b7:2f:ea:ef:5f:df:a8:88:0d:f6:5f:93:fc:
27:59:89:ce:41:03:40:d8:2f:fb:b7:22:1b:fb:f3:
21:53:e2:15:26:70:1f:46:40:c4:55:a0:c5:b6:91:
c4:d5:a7:4b:3d:dc:21:5a:05:fd:85:ba:0c:ea:04:
7c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3B:84:3D:3E:DD:F8:8C:E2:8E:9C:87:E7:5D:46:E8:4B:34:22:C6
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4d:fd:4e:ab:75:84:d5:69:2f:c9:60:b2:57:ef:cb:d3:3a:
c6:48:02:58:26:23:a9:d5:86:47:1b:ef:88:d0:11:18:d0:19:
7d:aa:2f:08:a1:9e:cb:26:61:25:61:95:e1:5b:a1:26:a5:24:
44:75:ba:fd:07:14:a3:b5:12:46:fd:0c:e0:eb:09:bc:10:c5:
71:7b:e4:90:e1:be:6b:07:b4:22:15:63:50:00:c1:be:19:7b:
26:5b:6f:25:02:2e:48:0e:ee:c5:1e:19:e1:56:f8:6c:b3:5d:
90:fd:ff:ab:0a:62:b7:84:cd:96:28:77:3e:90:9c:b6:16:03:
1f:ed:eb:c4:1c:61:67:85:8a:5d:98:b7:53:c2:57:ac:0b:0f:
65:e7:c0:18:1a:0a:cc:86:12:69:30:8e:64:50:2f:ae:84:bf:
31:a2:a2:3c:02:17:e5:94:db:a2:ac:87:a8:25:d2:d3:23:49:
8b:d7:87:dc:20:3c:ce:d3:dd:94:b9:8c:74:d1:ae:20:9b:a8:
e4:b8:7c:ed:53:82:9e:9e:43:67:93:f9:4b:7d:35:e7:1e:66:
56:50:62:5b:56:31:4e:0c:a8:cb:14:90:48:b2:1f:c0:fa:84:
a2:e9:6a:54:23:de:a2:92:13:ef:55:2e:09:3b:3e:e7:45:94:
8f:1d:59:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:54:53 2026 by rpki-client