Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
File: xTtM8KdHHwAPilagSbFjlnzDvZk.mft (raw, json)
Hash identifier: lVjogRi1bR1tbsRYVyvowmP74DwBzZiDS6VxHR2/O8k=
Subject key identifier: D8:CE:1D:02:E9:CB:D9:35:1D:5E:71:2F:54:B5:8C:03:A5:C5:10:CB
Authority key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
Certificate issuer: /CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Certificate serial: 019FA33C835074A21D2DADEFE8082B2D2B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
Manifest number: 18EE
Signing time: Mon 27 Jul 2026 11:01:19 +0000
Manifest this update: Mon 27 Jul 2026 11:01:19 +0000
Manifest next update: Tue 28 Jul 2026 11:01:19 +0000
Files and hashes: 1: 4O_QOhMXcJ0t8sIeKd1mrxtJgYw.roa (hash: TciVqBMkJDUC0ydXbkijfxJoweOnHoMs5V4ucXCEH+g=)
2: xTtM8KdHHwAPilagSbFjlnzDvZk.crl (hash: DCuuRz8bYOWhe0PnWgxYgTRs2Ehx+fEvvFTVQurdSrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:83:50:74:a2:1d:2d:ad:ef:e8:08:2b:2d:2b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Validity
Not Before: Jul 27 11:01:19 2026 GMT
Not After : Jul 28 11:01:19 2026 GMT
Subject: CN=d8ce1d02e9cbd9351d5e712f54b58c03a5c510cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:d5:6e:91:0a:3b:e6:c4:92:8a:99:98:8a:
a2:03:e2:0a:ee:b7:e2:c9:91:a9:34:44:02:0d:ab:
14:88:79:13:10:eb:32:72:e3:50:79:3b:9a:e7:37:
bc:71:80:7e:1d:b3:ea:47:d7:93:2f:cf:d8:2a:be:
59:44:d2:9e:f4:5e:e8:35:b9:51:60:17:b7:5b:29:
89:ed:fd:38:42:fe:f2:80:e4:22:8d:2a:af:17:a0:
f9:22:61:ea:de:df:5a:ff:30:24:fa:61:11:d1:c0:
79:cb:50:52:cd:9b:34:eb:10:45:9f:c3:72:36:df:
82:54:d2:35:ae:40:05:fd:0c:a7:01:46:7f:20:67:
fd:e1:d6:29:d8:20:38:79:ef:55:1d:d7:ef:5a:0f:
a2:8b:05:12:83:a4:f5:be:82:63:e8:4b:16:e7:34:
dc:b6:22:e6:ec:41:36:2b:11:88:72:1d:0e:ac:08:
d9:ee:d5:76:44:6d:d1:3f:ce:83:35:90:40:a3:31:
8b:14:2c:1f:de:fb:5e:50:59:7f:29:fc:33:47:bb:
99:0a:80:41:1c:8f:b5:a9:fe:a0:ea:7c:a8:da:26:
c9:01:f9:50:c1:ba:e4:18:c5:02:eb:b4:ba:9c:12:
74:36:24:21:72:8a:b8:19:8f:34:5a:85:69:9e:21:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CE:1D:02:E9:CB:D9:35:1D:5E:71:2F:54:B5:8C:03:A5:C5:10:CB
X509v3 Authority Key Identifier:
keyid:C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:95:f0:4a:84:f9:48:62:c0:a0:db:79:d6:a2:2f:77:47:16:
57:9e:d1:fd:c2:11:94:15:50:2c:92:79:08:6a:92:82:3b:2c:
41:e1:8d:fb:4f:a7:11:fb:04:23:03:b2:8f:9b:d0:e2:72:53:
9a:3b:c6:69:af:63:df:f9:c1:b4:9b:6d:2a:db:97:39:84:c7:
f6:8e:1e:8a:a3:8f:e4:42:5f:29:12:8b:ec:61:81:16:26:5d:
8a:22:a5:37:95:12:2b:e5:4f:23:f4:0c:ca:6b:bf:25:df:9e:
4f:9b:5b:cb:21:59:f0:a3:b3:70:ac:46:41:ad:35:c4:5a:be:
c8:c0:89:91:cd:69:2b:37:64:00:74:52:1f:c1:c6:09:21:2d:
2f:82:9a:6c:23:3a:61:f8:38:07:e2:e8:ce:2f:dd:9c:78:99:
7b:af:61:a5:c9:ee:3d:74:c8:ee:54:f8:36:b5:d7:e5:cf:76:
34:43:5a:f1:6f:15:84:03:50:54:89:1c:2a:12:e2:b6:3d:50:
9c:33:e0:06:9c:47:66:db:09:68:45:7b:1d:5e:ed:a5:1a:01:
15:ed:35:93:a7:3c:95:a4:b9:1e:d1:e8:72:77:a8:18:18:e4:
a0:7d:f2:2e:ce:7b:95:29:3d:ab:e3:1d:f3:99:18:8b:71:64:
4c:07:44:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:44:44 2026 by rpki-client