Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
File: xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json)
Hash identifier: Y5TTRgS+yBD13/JJjRXx2VX4ncFxAYopTjxx+fbiS4E=
Subject key identifier: 55:C9:D6:CC:3A:7F:D9:5A:4A:88:51:F0:3F:01:4C:F4:4B:47:20:61
Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
Certificate issuer: /CN=c7208a8b85bcb807cad64138543263acb204448b
Certificate serial: 019E2B82BFB315E8063B66CC531F211C4C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
Manifest number: 08FA
Signing time: Fri 15 May 2026 12:00:49 +0000
Manifest this update: Fri 15 May 2026 12:00:49 +0000
Manifest next update: Sat 16 May 2026 12:00:49 +0000
Files and hashes: 1: RgWi-aprHOGj2N0T2_M-Cs4Yuhc.roa (hash: FwSEX5ZWPDMp7ATa85IYHEA7kyGOC21zknxdskogO04=)
2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: BXKBdZqBMl0rGvwU6mgS7vhS5Ir3o2ZDOYRHJ1cGWo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:82:bf:b3:15:e8:06:3b:66:cc:53:1f:21:1c:4c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b
Validity
Not Before: May 15 12:00:49 2026 GMT
Not After : May 16 12:00:49 2026 GMT
Subject: CN=55c9d6cc3a7fd95a4a8851f03f014cf44b472061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:38:a6:d6:b1:15:26:e0:37:c2:b6:ee:3d:e2:
92:09:e5:06:23:07:dc:ee:06:3f:7e:96:cf:f9:ca:
88:8e:51:c3:52:4c:5c:27:34:71:ab:27:9b:70:7c:
3b:37:cd:49:54:94:c5:57:9d:5f:46:9b:91:18:d2:
4c:a9:25:c6:89:ee:de:63:6f:5b:32:b2:ee:a9:39:
cf:c5:1b:f7:1f:2b:a5:de:3d:79:f4:35:56:f6:4a:
f1:c7:eb:56:f3:5b:f6:52:cf:27:23:e2:b2:b7:e2:
80:5a:3e:86:d1:76:38:89:9b:c9:28:89:c1:f8:b4:
b4:dc:6d:eb:2d:0f:bb:95:ec:48:e8:e4:45:04:02:
13:ec:6e:6f:86:5c:db:27:8b:44:8d:1a:54:4a:a3:
66:25:ec:31:88:c8:27:d3:3d:f1:79:0f:59:8f:6c:
e8:95:99:6a:0a:f9:31:9e:ef:9f:d5:ae:65:60:23:
b4:69:e7:64:3d:bb:dc:7e:e3:5e:1a:ce:57:65:21:
6e:3e:72:0c:73:2d:30:f7:e5:81:1c:f6:b7:92:a9:
99:56:e7:07:48:94:e9:e0:91:a7:de:d6:ca:89:e8:
c8:23:33:14:95:57:f1:72:67:8e:53:a0:42:f0:0a:
9c:dd:66:ac:cd:9e:67:17:c7:c7:c9:21:c7:ac:41:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C9:D6:CC:3A:7F:D9:5A:4A:88:51:F0:3F:01:4C:F4:4B:47:20:61
X509v3 Authority Key Identifier:
keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fa:46:ce:bb:dd:0e:1f:00:b2:49:c3:7c:53:16:43:fc:34:
93:77:f4:5d:d2:03:d3:f6:37:f4:01:db:47:13:de:b1:21:ee:
9f:23:77:c6:31:72:9d:56:86:d6:ce:ac:fa:35:b9:3f:ae:ad:
97:cf:c1:e4:5a:ed:ac:f3:54:65:b4:6b:bc:fa:5b:90:b0:cf:
0b:3e:30:99:04:00:d2:92:2a:6a:f2:dd:e3:c3:ee:6f:4e:62:
66:52:f9:f4:16:cd:72:b1:6f:4f:64:13:94:ee:c2:1b:35:1e:
c5:06:6a:a9:47:82:64:08:2a:81:05:32:a0:99:3e:ee:fe:1b:
58:84:36:59:4a:06:b2:ef:66:18:ea:b8:df:b8:e9:bd:bd:ab:
9a:87:ab:44:cb:a2:b1:64:77:c9:0c:33:39:37:45:ee:d6:06:
7e:70:88:02:a1:44:05:d7:73:ce:3b:fe:88:18:a3:6a:5c:db:
06:87:49:4a:ae:06:4d:47:8f:c2:11:fe:8f:9f:56:19:2d:0b:
15:89:ea:8f:3d:c7:5f:12:b8:73:00:78:b8:5b:05:5b:94:00:
1b:97:76:6a:c4:5f:6a:dc:32:23:bd:b9:4d:7d:e0:18:46:0e:
65:76:cb:62:f1:2e:14:87:27:ca:cd:ec:29:6d:b1:04:5e:98:
5d:2d:7c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 15:02:40 2026 by rpki-client