Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
File: xYe5zadWA-sNnjdxZ79-DI5EBAM.mft (raw, json)
Hash identifier: 8Exeysvt+RkUJkdvOD5Zp75uffceQA5CeQD+FbsvV80=
Subject key identifier: DE:82:5B:45:48:BC:DF:0F:89:52:C9:75:BE:FE:06:FC:77:BD:D1:71
Authority key identifier: C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
Certificate issuer: /CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Certificate serial: 01A08AFA9BD83C74D377EA174310B8140413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
Manifest number: 1375
Signing time: Thu 10 Sep 2026 11:01:14 +0000
Manifest this update: Thu 10 Sep 2026 11:01:14 +0000
Manifest next update: Fri 11 Sep 2026 11:01:14 +0000
Files and hashes: 1: ZmvGPOp_1qrvVkC55KMPvnEbYj8.roa (hash: PAyaFkNXlsk7gSyWBxSONv2o7kwM1R1bojPLp2ngilE=)
2: xYe5zadWA-sNnjdxZ79-DI5EBAM.crl (hash: NL/+yhT1tMViEemwSBb/fZCuLufXAtYaD7WRIGS1snU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:9b:d8:3c:74:d3:77:ea:17:43:10:b8:14:04:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Validity
Not Before: Sep 10 11:01:14 2026 GMT
Not After : Sep 11 11:01:14 2026 GMT
Subject: CN=de825b4548bcdf0f8952c975befe06fc77bdd171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:64:a4:5e:29:19:69:b1:bb:ed:0e:e2:6e:
ea:66:01:67:d4:b7:6f:22:80:06:cb:88:69:34:f7:
3c:61:0d:70:b8:e2:d0:bb:2c:4c:f4:60:2f:8d:54:
bb:46:c1:9e:0e:04:d6:fc:cf:3b:fe:b5:ef:31:f5:
2e:87:9c:9b:bd:f8:3e:f9:0d:ab:5f:ce:9c:a2:e2:
75:9d:a3:a4:38:10:ad:cd:a6:85:65:64:90:da:41:
4e:d5:1d:e0:ae:77:68:66:f7:90:cc:50:53:54:9e:
9f:a6:9e:78:cc:04:7f:ce:76:d9:ed:59:1d:fa:cb:
29:01:55:81:f4:e1:c8:94:ff:c0:55:e2:fc:ed:b2:
85:4e:74:0e:6b:77:75:f6:14:3f:63:02:83:8c:1d:
34:be:34:6e:f4:30:38:d5:0d:85:77:07:e2:94:e7:
68:ec:f4:26:b0:68:94:4a:68:d3:00:3b:72:10:2c:
10:5b:83:3d:25:8b:60:0b:ce:70:aa:f8:63:94:73:
a4:86:63:41:1d:1c:1e:04:87:6d:4c:8b:00:46:4a:
58:d0:95:07:7e:72:0d:d0:33:f7:36:dd:e7:ff:c8:
65:b4:5c:c1:fa:70:32:bc:5c:71:16:54:1c:99:d6:
89:8e:be:a8:8f:db:42:24:8d:d5:58:6d:18:a0:4c:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:82:5B:45:48:BC:DF:0F:89:52:C9:75:BE:FE:06:FC:77:BD:D1:71
X509v3 Authority Key Identifier:
keyid:C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:67:be:c8:bb:8c:14:1d:52:55:4f:16:0f:bd:c9:64:e8:b4:
f5:97:ba:43:29:e1:db:4f:19:e0:18:b5:d6:4e:af:7d:d4:26:
a3:de:38:0c:bf:0a:89:68:fa:e7:a3:7b:75:47:d4:3d:f7:12:
64:d3:ca:04:b9:07:96:1c:23:4b:7c:27:ec:19:41:c5:be:1a:
2f:9e:49:82:0c:dc:e2:91:60:f3:91:67:e7:74:db:c5:da:b0:
71:d0:22:cc:90:ce:e2:d6:03:04:6c:62:28:52:4b:c9:ab:ab:
1b:b2:d8:48:4a:8e:e7:71:00:e5:99:3a:9f:95:b6:d3:12:55:
04:c5:c1:40:37:8b:cd:8f:31:39:2d:bd:8a:6d:91:0f:ae:9e:
3f:3c:1f:6a:69:ae:0a:48:37:4f:af:aa:9e:e6:68:11:97:5f:
0e:09:bc:e0:28:59:23:3a:ca:d6:5d:c8:a7:b0:c4:97:2e:79:
8c:78:d4:3c:1d:14:2f:a8:5e:31:51:2e:da:96:c6:99:d0:b0:
a0:35:61:d9:9e:72:ba:74:79:dc:52:71:db:e3:7b:38:59:b3:
51:e9:8b:65:c1:c8:24:3f:7c:2f:df:a0:3d:b3:2e:13:3d:ad:
d4:e6:92:68:71:6e:24:df:f8:07:fa:d2:0d:d1:f8:68:dd:8b:
db:7d:1b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:12:22 2026 by rpki-client