Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
File: Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft (raw, json)
Hash identifier: BSCDkUHFoJLNxHkq7U7/u+eii3seDU6gKxdZaWuuw+E=
Subject key identifier: D7:D2:F9:C6:6F:31:BA:B2:AD:39:6F:46:AC:7E:82:CE:0A:17:97:2E
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 019FCCA654F5C4E36B28FD61AA64501CAE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
Manifest number: 1A02
Signing time: Tue 04 Aug 2026 12:01:20 +0000
Manifest this update: Tue 04 Aug 2026 12:01:20 +0000
Manifest next update: Wed 05 Aug 2026 12:01:20 +0000
Files and hashes: 1: 3M28JHI7FacsIOAJQWmxce2Slr8.roa (hash: YkTIvgr/OPBfSq7cSMGcukiH55SIyz1JhUaAuApclZY=)
2: 7MeHuOHX_t0Y7M3OkiYTIbrWBmE.roa (hash: Odl4gnozu+3MVceJoIMFZfxLwPzuPyHk73z9Oo2EcD0=)
3: Gk3x3dMvMywr2S8J1gmXYe0hnoU.roa (hash: /bwOAvbGES0zjJv2PTCP3py4NDDoCXEMIJubC3y4gDQ=)
4: IK5t8ZtR9FmBC9B2Oc1q_FzsZ60.roa (hash: 99eWXzzKhZzYTyaPK2nn6KPekh7aMTWJKB401rZwNvg=)
5: Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl (hash: /yPBwixd1utZ/+qvpzQgbMg+VgiBuUhk0O8gL00Zew0=)
6: aqoU9zJ3XearIjlOINJlmfcvvuw.roa (hash: Sz6yVgzziCuFuMg8Vphcvorcn0t0kQDujyZ/W1bGUWw=)
7: kl3oy-dFL14cqnAqsoTUT2p-gAs.roa (hash: 2IH7sBJVtOHKhrFUONXV2aGCQkjnVLJ+vB9vvY8IEzA=)
8: kyQ4JI7k9YbINgfhHLT6m28Lt5g.roa (hash: k6gw+9YpfRZ8fBPrWOAfF6dmY/qo7leQ3UVRA8om9+s=)
9: qH5fLLWJkV1VZnXKxFAToZGD4BA.roa (hash: gujwjiPUnMht5bxbQJ8geZbpehgQ8vnJKIXcFg1nhbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:a6:54:f5:c4:e3:6b:28:fd:61:aa:64:50:1c:ae:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Aug 4 12:01:20 2026 GMT
Not After : Aug 5 12:01:20 2026 GMT
Subject: CN=d7d2f9c66f31bab2ad396f46ac7e82ce0a17972e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:6a:88:bd:4d:bd:45:26:8d:27:89:c0:9a:
fe:9e:bc:13:a1:71:17:b3:4d:93:79:04:7a:d5:69:
12:61:c2:26:3e:de:48:c3:fe:ed:13:c6:af:1b:2a:
aa:e0:d9:a7:4e:ab:63:76:a8:56:e4:86:a7:92:0c:
e7:09:3b:56:a4:2d:65:dd:41:07:57:c2:fa:2f:78:
97:73:6d:a1:57:51:eb:50:cc:d7:82:1d:f4:c3:3b:
40:42:37:a1:ad:71:8b:da:ec:de:5b:c7:8a:8d:05:
ed:6b:7c:b8:ae:ec:61:da:cf:1a:34:33:0c:3a:85:
6f:b2:ee:31:dc:29:eb:e3:d9:52:ce:dd:e0:4f:f9:
2e:55:1b:c8:91:33:ac:d2:b3:5b:60:ec:49:de:39:
db:b8:35:ed:46:56:ac:8e:99:4f:35:86:34:dc:33:
47:ee:e1:f5:b3:d7:33:4c:a7:b5:38:80:c3:d6:2f:
9b:e8:98:50:cf:95:d5:7f:10:01:6a:64:fe:72:ef:
4d:6c:19:52:c3:b9:6a:ce:b0:d9:f8:54:56:c5:f0:
48:b3:f9:3d:de:8a:3b:a4:e6:be:05:bd:10:2f:d1:
df:34:39:1b:8b:f8:09:c7:9b:96:cb:c7:aa:31:d8:
49:67:2d:c4:c1:b0:9c:6d:57:d0:24:26:76:59:ef:
f2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D2:F9:C6:6F:31:BA:B2:AD:39:6F:46:AC:7E:82:CE:0A:17:97:2E
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:54:b3:58:ac:a9:40:77:9a:87:ee:3e:88:3b:a9:5b:dd:e6:
c4:74:57:a6:e4:e9:2d:7e:c3:5a:d0:5a:e9:ac:dd:4b:b2:07:
2c:70:ba:ef:ab:c4:1c:75:5b:b3:7f:05:ff:07:45:91:48:be:
25:bb:52:4a:ba:af:36:b7:b1:bb:5c:ca:5c:f1:8c:ed:8b:33:
c1:37:a3:70:2b:da:5b:6e:b0:40:1a:cd:67:0d:d9:1d:b9:73:
78:0a:73:39:78:19:cd:5c:d8:58:82:cf:0f:15:93:09:67:4e:
fd:c8:9d:2b:68:6d:40:73:9b:c9:d5:1b:82:14:d6:00:0c:7c:
73:b6:c6:74:e6:38:f1:62:2c:ce:0c:e1:0b:d5:6f:6d:84:d2:
5c:21:a6:c8:cd:0a:30:29:1d:5d:91:b9:43:65:c5:62:4f:4e:
9a:11:95:9b:62:a9:06:2c:1f:5c:90:d3:42:1c:60:7c:09:ad:
6f:c2:2d:44:7f:60:c4:f0:c6:3b:31:ea:95:af:17:72:d4:d8:
d4:dc:77:78:e2:27:94:10:7e:7f:cc:5b:f7:fe:e6:c2:64:cd:
eb:9e:e4:ba:0a:c8:eb:5e:76:4f:49:e8:fa:8d:4d:ac:52:51:
08:2b:01:53:10:be:ee:72:2a:50:c3:e7:22:2b:1f:68:d2:8f:
67:be:fe:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:38:24 2026 by rpki-client