Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json)
Hash identifier: 6LyiyFFuhgMg0WdMrB199pc3YL9oGgOYd5X3Xz+d3FU=
Subject key identifier: 59:68:34:24:B8:80:BD:84:D6:44:88:71:89:5A:F5:A2:C0:90:F0:1E
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial: 01A08AC2FBEEEC618CA747E27BFDE16413D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
Manifest number: 072E
Signing time: Thu 10 Sep 2026 10:00:29 +0000
Manifest this update: Thu 10 Sep 2026 10:00:29 +0000
Manifest next update: Fri 11 Sep 2026 10:00:29 +0000
Files and hashes: 1: EhoGVGxSzJ85EDf-pwsVPGfHrjk.roa (hash: bYaigFFh4NG+rmCpPKbaSMIoScBrwWuRStJPl8NxmHQ=)
2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: la/5Ghg90FidhyFczF5qFZUiNVpeykoUxwF781/j/VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c2:fb:ee:ec:61:8c:a7:47:e2:7b:fd:e1:64:13:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Validity
Not Before: Sep 10 10:00:29 2026 GMT
Not After : Sep 11 10:00:29 2026 GMT
Subject: CN=59683424b880bd84d6448871895af5a2c090f01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:0b:03:42:0a:dd:ac:0f:9f:8b:eb:ce:fe:
df:9a:5b:28:c3:4f:1c:cc:62:d1:7d:16:3f:75:45:
0b:12:66:8b:ad:94:0c:16:3b:85:f9:93:af:d6:9e:
a4:c5:e1:84:23:f9:02:c6:d8:f8:34:a3:82:1a:7e:
f3:5a:07:52:f3:83:3c:20:ff:09:2f:d7:9d:0b:72:
89:4e:a2:18:4d:df:b8:e2:e1:16:70:cc:1f:0a:7e:
15:f7:99:fd:d5:2e:bf:dd:1d:cb:b2:18:48:cb:f7:
02:1c:e4:7d:57:00:84:d4:0b:b7:12:ac:e7:aa:6d:
e7:80:79:b7:24:7c:b4:7e:ce:ff:ff:c3:74:b6:fe:
30:1f:20:a5:2e:4b:af:e4:7c:f2:57:2d:50:9f:22:
80:7f:b4:01:02:37:a3:71:35:3b:a5:8d:06:f9:3a:
8b:d6:2a:f0:33:64:35:d5:ef:cd:38:fc:8c:d8:53:
f3:e4:6f:29:85:8b:7f:c9:75:64:1f:88:4f:3d:f5:
b6:8d:e8:8b:95:ad:f5:52:05:1f:23:5a:32:3c:90:
c8:93:60:d7:00:1a:20:bb:ed:cf:8b:c2:f6:d5:9f:
22:f6:00:8b:d2:08:73:1c:d0:64:8c:e2:d3:2b:3d:
9b:d2:be:39:b8:e4:cd:89:db:62:71:91:c5:98:64:
da:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:68:34:24:B8:80:BD:84:D6:44:88:71:89:5A:F5:A2:C0:90:F0:1E
X509v3 Authority Key Identifier:
keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8b:4f:ac:a1:b0:6c:86:a8:1d:24:bd:e3:fc:6f:9f:b2:8d:
19:ff:4c:d8:be:82:58:39:09:e7:8c:72:ef:d3:66:ea:29:b5:
36:14:7f:5b:37:2e:e9:6d:73:8a:8e:a5:92:63:7f:e7:9b:af:
20:07:06:2f:e1:f7:93:b7:cf:6c:cf:86:8a:32:bf:50:d6:9f:
58:67:e0:0d:4f:92:e8:45:37:18:82:84:2c:53:52:98:15:44:
d8:b7:c4:8c:2d:d2:2b:05:b1:bb:38:f1:f2:14:d9:aa:94:1d:
ce:10:0a:14:8e:72:6b:56:88:62:0d:a2:5c:ac:2c:fd:0b:fc:
f8:3a:3b:e5:84:81:3f:28:5e:72:b0:ff:b7:1b:97:1d:10:f2:
b3:be:65:06:3b:2a:1f:95:b3:fa:72:25:4f:68:19:79:f6:58:
5d:0c:28:21:92:76:8b:5e:23:b2:31:29:5d:da:c5:74:33:45:
95:e6:58:52:31:70:fe:36:61:62:0a:dd:4b:13:e4:ff:82:45:
64:7b:54:fd:1b:03:67:ce:a6:b7:4e:60:2d:0f:ac:50:df:e5:
e5:3e:7c:38:1f:45:52:4c:c4:69:c8:1f:0c:9f:42:05:cc:9b:
85:32:28:e5:f7:5c:1a:fa:33:bc:3d:91:b2:a6:91:9f:68:a3:
5b:ae:5d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:52:34 2026 by rpki-client