Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
File: xyIeQCmYq8HwNUdeFYt06MdpIMA.mft (raw, json)
Hash identifier: wpGzF5DIuFrCJKJAjDD3BovkoMqX/GETAWdgLK1qNSk=
Subject key identifier: 59:53:D5:B9:21:32:7A:B1:C1:E4:B6:BE:AC:C5:95:C6:31:D1:34:C5
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial: 01A08B6822AF6101AB8CB49013FF854E9622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 13:00:52 +0000
Manifest this update: Thu 10 Sep 2026 13:00:52 +0000
Manifest next update: Fri 11 Sep 2026 13:00:52 +0000
Files and hashes: 1: F7bFWfa8raW6YPzNQdPQYhccFpw.roa (hash: XVhjnbPUE5xdXqpegewxKMJvfafoKnZU90EE9D+PlOg=)
2: JpOEIniBJHts2084NOqMHq98Ajc.roa (hash: bzhADrpPKOaVRuCZzxcDyjV658iQtircvowggSUU670=)
3: xyIeQCmYq8HwNUdeFYt06MdpIMA.crl (hash: mB91n3HXxL8Ccv8V1wSy6Px6I9GnUtX3wgxGGhVNPHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:22:af:61:01:ab:8c:b4:90:13:ff:85:4e:96:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
Validity
Not Before: Sep 10 13:00:52 2026 GMT
Not After : Sep 11 13:00:52 2026 GMT
Subject: CN=5953d5b921327ab1c1e4b6beacc595c631d134c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:7f:d4:08:95:80:14:d6:13:1e:e0:59:80:
d0:ad:de:56:44:ee:fb:06:de:b0:ba:78:2f:12:ff:
85:37:64:4b:ed:96:59:f8:3d:5a:72:2d:1d:b0:bd:
e8:54:b2:b6:c7:89:06:96:d8:6a:db:16:b6:03:49:
4a:da:09:d9:0f:40:35:a4:3b:6d:7f:f0:de:66:95:
b1:1d:19:a2:9a:b8:e7:37:09:97:70:59:a9:e6:ff:
0a:6f:10:d2:49:03:f7:3c:5b:ab:6f:cf:94:d2:98:
fb:96:75:87:33:74:e7:0e:79:8b:c9:2f:0b:4a:27:
4a:15:a0:84:2b:29:e0:1c:1a:e9:2a:22:2b:81:1b:
57:08:87:69:95:b1:a3:84:9f:b6:d5:d2:2a:5d:08:
09:ef:a9:ee:99:a9:f5:51:67:7a:7f:74:1d:26:14:
7f:11:31:34:40:9e:f8:a8:3b:e6:bf:d7:e0:1a:8f:
e6:0e:73:29:9d:e1:37:9a:47:40:c8:7b:e1:ee:f0:
48:b2:9c:c0:1f:33:39:37:0a:24:91:4f:06:d6:32:
b4:a4:69:a7:75:83:b0:12:c4:a4:94:ba:ca:32:d7:
09:73:5a:81:fd:72:49:c4:c6:d1:1b:db:ee:cc:1b:
b1:f2:8b:88:7c:6b:24:fa:6b:c6:1d:51:57:b3:2b:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:53:D5:B9:21:32:7A:B1:C1:E4:B6:BE:AC:C5:95:C6:31:D1:34:C5
X509v3 Authority Key Identifier:
keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a7:30:06:54:c7:21:b2:aa:7d:0c:a0:dc:ce:dc:d2:40:50:
9f:45:a5:9c:85:e5:4c:b1:e0:af:34:c7:6f:2e:09:0d:23:ff:
3d:68:c6:80:fd:b8:8b:4e:ee:0d:20:9d:28:aa:4f:2f:85:8a:
f8:07:4c:71:3e:20:34:ad:e1:63:b3:a4:7f:2e:04:db:bd:6f:
04:75:2f:3e:68:f8:e9:0f:fa:e9:c3:b6:64:d2:70:9e:54:24:
16:ae:e2:e7:d4:bb:d4:7c:69:ea:5a:01:aa:61:1a:e1:5d:c8:
a5:3a:3d:66:ba:05:32:91:e0:36:67:81:b2:cd:44:f2:9c:94:
26:36:d2:dd:e9:27:bf:bd:ff:35:39:0c:c6:5e:3b:3a:5e:42:
4c:2d:ac:8d:b0:c7:71:b4:c2:ee:80:03:2a:e6:a8:27:0a:49:
4f:ca:49:b7:22:71:be:1e:a3:db:6e:4b:66:43:8a:47:5f:64:
c3:2b:f0:10:6b:70:38:46:eb:e9:65:31:3a:58:7f:8f:21:97:
2c:93:4d:41:2c:68:d9:16:5d:2e:6d:a3:11:70:14:be:f2:c5:
21:35:50:61:54:96:71:93:9f:e9:bd:70:4e:0d:b0:76:ae:da:
c8:fd:f2:27:01:8e:fd:9e:9c:32:40:fb:e2:06:55:34:c4:b7:
cc:38:31:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:34:53 2026 by rpki-client