Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json)
Hash identifier: oA7tYZNdkapX6sPf0knex2bdheZmqCQ8UtgP3j4RN+w=
Subject key identifier: B5:61:0A:20:01:91:FF:DC:3F:C8:36:CE:62:4A:50:10:6B:8C:14:A9
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial: 01A17C293433C1BD5A586089F623DF84BB47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
Manifest number: 07AB
Signing time: Tue 27 Oct 2026 07:00:37 +0000
Manifest this update: Tue 27 Oct 2026 07:00:37 +0000
Manifest next update: Wed 28 Oct 2026 07:00:37 +0000
Files and hashes: 1: EhoGVGxSzJ85EDf-pwsVPGfHrjk.roa (hash: bYaigFFh4NG+rmCpPKbaSMIoScBrwWuRStJPl8NxmHQ=)
2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: v9KccqrEWZkTWMUvxU6m/oFbg+jgryjMWjbn+z9Kl9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:34:33:c1:bd:5a:58:60:89:f6:23:df:84:bb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Validity
Not Before: Oct 27 07:00:37 2026 GMT
Not After : Oct 28 07:00:37 2026 GMT
Subject: CN=b5610a200191ffdc3fc836ce624a50106b8c14a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:38:6a:fe:f8:c8:fe:fb:7c:c9:27:3f:9e:
2e:ea:03:6a:30:63:73:c0:af:61:9a:96:e0:33:85:
80:0a:ca:cf:23:74:48:bc:ca:41:10:c2:5a:c5:fc:
90:d7:89:17:fb:8f:d5:27:23:5d:4a:5c:ae:93:93:
16:5f:68:d3:54:74:21:4a:71:65:a5:72:a3:f7:96:
30:60:2f:30:d9:bc:1e:52:d2:a6:42:04:01:23:a1:
7d:a8:25:dc:72:ef:42:28:01:a0:d7:3b:e2:f9:48:
d2:81:46:fb:7f:34:bb:7c:ca:43:f7:e0:88:9a:f6:
56:c7:c7:82:97:5a:56:e3:8f:2e:c1:3e:2e:11:e4:
37:20:c5:41:41:2a:be:84:ff:9b:cf:da:9e:b1:9b:
2d:fc:c2:16:34:ea:30:0d:c8:e7:59:07:c5:b5:d3:
ca:3d:07:6c:df:a3:d2:70:ea:a5:9a:ba:8e:3f:c2:
5f:27:3a:b0:63:84:23:2c:02:25:8b:c4:6a:2a:3e:
d2:01:06:89:d4:45:4c:77:f3:4f:7c:83:d9:7b:21:
7a:65:eb:91:cd:c3:e5:8e:bb:73:63:cf:ba:d1:00:
20:d4:28:4e:55:9b:59:61:8f:57:6f:e4:20:d2:d2:
37:55:6e:54:b7:78:0f:05:ad:9f:4f:21:c3:70:cd:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:61:0A:20:01:91:FF:DC:3F:C8:36:CE:62:4A:50:10:6B:8C:14:A9
X509v3 Authority Key Identifier:
keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:88:4f:27:d4:04:67:91:5c:e0:bc:a2:8c:71:6e:ef:59:c6:
c7:a5:36:82:b9:51:2a:35:08:79:ed:84:7b:6a:34:9d:14:d2:
47:0c:51:9b:51:29:3f:29:32:93:c0:97:4a:02:7d:9d:c1:cd:
84:fa:66:51:f4:4f:0a:ae:8a:1e:29:42:03:d1:ca:d5:cf:34:
25:62:41:cd:88:41:62:b8:4c:4f:f0:29:d9:ad:00:59:53:b5:
d7:e7:b7:38:97:ff:ec:20:56:87:e8:f3:32:2c:4a:ff:19:3d:
4e:4b:6c:e3:b7:cd:5f:6b:96:bf:46:4b:6a:62:66:06:ff:52:
9a:4b:a5:93:52:28:9e:f1:9a:38:a1:c1:2e:4b:3a:a6:51:c7:
7e:53:53:71:e7:27:91:64:f6:2e:a3:38:94:97:a7:d7:67:d3:
92:8f:47:ae:7e:5a:33:30:24:e8:e0:cc:59:d2:ce:7e:e7:e1:
9a:d1:9d:91:9b:46:fd:61:27:26:cd:c9:a4:96:5d:55:b5:b8:
86:56:77:ad:9e:1c:ff:5e:5c:9d:af:d4:ae:aa:af:51:8a:99:
fc:73:4c:4e:30:dd:61:98:b0:83:91:6c:30:61:bf:b0:f6:ad:
43:7c:2d:99:92:d2:47:4d:27:e7:19:8f:e8:a2:c3:55:7e:c2:
1b:94:e2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:58:19 2026 by rpki-client