Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: at24YnavDAavx8A0jcXpQFnCCxaKVKmUnBO7h71fc6o=
Subject key identifier: 45:39:FD:96:B3:98:56:87:2A:20:EB:AA:86:A3:5B:0B:48:1F:AB:02
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 019FA0E04CEA52A63300B45A4F0600955384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 00:01:21 +0000
Manifest this update: Mon 27 Jul 2026 00:01:21 +0000
Manifest next update: Tue 28 Jul 2026 00:01:21 +0000
Files and hashes: 1: YJVBg6yi8rhbBJuxWKJ7v5Xiat0.roa (hash: Hyd6ST+4DY0Ptd4aJ86bVxwbS75QcKsP6VrnesIx1WI=)
2: __9VedluN1sWd7ruf5_gxA1gv9U.roa (hash: 9+zLsshZreT9h4dF/gegkgeeA5ROS1Ql2Nv3i9Zy+8U=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: rOrFWbVUQdWjIPpNe80o+a44U/MjBmThXyJknBYkiSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:4c:ea:52:a6:33:00:b4:5a:4f:06:00:95:53:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Jul 27 00:01:21 2026 GMT
Not After : Jul 28 00:01:21 2026 GMT
Subject: CN=4539fd96b39856872a20ebaa86a35b0b481fab02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:d9:48:89:2b:3d:07:ae:33:bb:d9:41:be:
b7:04:a7:e7:91:70:f6:53:9d:d8:75:1c:2a:49:f4:
0b:db:c9:dc:c0:c8:74:e9:b0:7e:c2:76:45:76:80:
80:fd:e5:03:1e:c4:6d:9d:36:13:54:48:8e:8b:4e:
6c:57:4b:fa:cc:4d:6b:82:ef:46:3e:56:8e:5f:16:
38:ee:71:f2:0f:9b:a0:81:7d:ea:d8:b5:36:69:b5:
5a:91:58:8e:8b:2f:40:3b:e7:e1:a7:ed:8b:78:93:
de:b9:2d:26:8a:ac:1a:37:b6:86:26:a9:bd:c5:9d:
0b:cb:1e:bb:61:0f:75:58:59:c5:9e:b3:ee:a0:c1:
e9:ef:63:87:5b:37:e5:b0:e1:10:d0:1c:c3:55:d3:
a5:e5:d1:91:71:72:88:99:33:0c:ab:52:fe:e5:97:
e6:9b:5e:2b:73:28:25:e7:6b:ef:83:09:61:60:a7:
4d:17:e5:9b:74:b7:c8:f0:59:b9:a7:d0:e3:7d:c8:
43:36:bb:89:cd:a8:5d:fc:98:38:af:3d:7d:f5:44:
c4:dc:5d:eb:2d:59:07:fb:fc:ae:6b:3f:f3:a4:26:
14:d5:d5:89:66:45:04:85:ba:d4:ee:fd:62:b5:96:
dd:47:70:ca:5a:79:78:d0:15:56:58:fe:db:06:42:
41:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:39:FD:96:B3:98:56:87:2A:20:EB:AA:86:A3:5B:0B:48:1F:AB:02
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5e:6d:78:a1:23:3c:28:a3:d3:d9:41:5c:71:74:c3:00:87:
dc:31:75:12:a5:02:75:17:ed:1f:df:c7:c1:d7:65:46:74:fc:
07:f4:20:47:4f:43:65:a1:e8:95:89:57:ad:c8:cb:dc:78:d5:
fd:32:10:58:bc:45:6b:8e:c9:cf:62:11:be:c5:d8:6a:b4:a7:
37:4c:98:ed:ee:94:41:55:09:cd:35:44:8b:42:26:ef:87:0b:
0a:6f:0e:0c:39:78:d7:27:d8:8c:ea:04:d5:53:63:f7:29:de:
f7:ee:61:8b:ec:78:8f:84:a8:c3:a5:ff:f5:02:d3:6b:9f:c4:
39:eb:73:3d:fb:9d:37:bb:09:35:20:37:ab:4f:18:fc:7e:40:
67:cb:d0:e0:03:33:4e:0b:69:01:0d:20:0b:4a:5d:91:22:04:
5e:d1:2f:a2:66:b4:a5:b7:df:69:d2:57:69:53:95:4b:df:33:
f3:9e:25:10:71:1b:e8:42:5b:ef:5f:ff:fc:aa:47:e6:16:a6:
df:41:13:40:29:64:0b:35:07:0a:47:78:8e:e0:9f:57:43:d5:
a3:03:5f:45:06:41:4f:da:0a:a6:b5:c0:a5:0e:e9:15:53:aa:
11:06:f5:fa:2a:f4:73:f2:20:82:86:9a:18:2c:f8:7e:ce:b8:
37:2a:53:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:46 2026 by rpki-client