Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: JS2v+PgpAaiFTk6DwxUvndEX7Oxl+Ezk/HC60oq7gJg=
Subject key identifier: 8A:D3:01:CC:4C:9F:DC:84:80:1B:CB:A0:8F:DA:AC:43:A8:DE:6F:AA
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 01A0016F07189F29E648C965FFBAB79460EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 18:00:48 +0000
Manifest this update: Fri 14 Aug 2026 18:00:48 +0000
Manifest next update: Sat 15 Aug 2026 18:00:48 +0000
Files and hashes: 1: pl4G0drpVsiUnTNv0aNJRxAq40Y.roa (hash: TIrmY5F1mz/rcq5o0AaF7KuNyHFmI5rxVVBApqp6+Ig=)
2: uCT5qS0TatwLKR2syBgBgC34NYE.roa (hash: 6Pav0LB8Y/JGRbLI7vMShFMSStiFyP+H+ECIrWK519s=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: 9UXxLUyouST5lvmGR5unYQqg1Esqv40c9eCH5gAmrLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:07:18:9f:29:e6:48:c9:65:ff:ba:b7:94:60:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Aug 14 18:00:48 2026 GMT
Not After : Aug 15 18:00:48 2026 GMT
Subject: CN=8ad301cc4c9fdc84801bcba08fdaac43a8de6faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:02:2b:22:dd:9d:56:07:17:01:d6:c1:50:
1b:a7:43:74:d8:92:21:2b:b0:01:12:a2:33:97:6c:
9d:53:a5:b1:8a:24:87:34:a4:1b:5f:9b:c9:00:4e:
ec:3f:a0:35:2d:6b:04:42:80:91:e6:1a:50:fe:6c:
8f:93:4b:8f:8d:f9:fb:c8:c5:2a:e2:59:0b:e1:97:
a8:6b:47:fb:86:7a:b7:be:e7:b6:bb:bc:a0:53:0f:
9b:8c:23:84:34:32:19:b0:01:52:dc:40:ad:da:d0:
9b:a8:04:30:df:74:8a:68:46:48:5c:ff:55:30:d3:
e8:e0:a4:1a:03:ba:14:a0:ef:b7:41:0b:fa:13:7a:
a0:c6:22:db:5b:77:f6:5b:f8:f2:39:e4:76:99:c7:
d9:ef:ea:0d:67:73:ec:ed:4d:47:d4:af:03:b7:51:
a6:46:a5:35:e5:a5:8c:fe:a2:94:8c:31:c4:be:45:
31:8f:d0:b1:92:59:b7:c8:e6:6f:02:6c:80:40:af:
0e:71:07:64:08:a5:a2:16:c2:e1:95:f8:cc:04:6e:
db:5c:84:6d:ea:83:fb:c4:5a:dc:9f:f7:e6:86:85:
55:78:b6:61:b2:43:13:33:14:fa:0b:83:19:a6:06:
3d:a8:76:84:c4:96:92:66:99:13:16:d4:ef:17:ac:
53:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D3:01:CC:4C:9F:DC:84:80:1B:CB:A0:8F:DA:AC:43:A8:DE:6F:AA
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:95:41:64:27:8a:b7:92:f9:fb:a4:2f:14:5c:38:06:1f:e9:
38:57:d2:48:d1:a2:21:be:e9:07:11:da:eb:bb:db:5a:15:04:
85:bf:e0:7c:eb:4e:cb:d1:3e:6f:dc:6e:d2:6f:69:ba:8e:69:
c8:dc:b1:6a:2c:de:d4:30:54:b3:31:7c:07:85:2e:04:53:5a:
e9:a7:aa:4f:ba:11:a1:fb:16:45:39:4d:65:d4:0f:a7:38:f8:
b2:e4:24:4a:6e:e1:6a:fa:c4:3c:7e:f4:24:92:ab:45:9c:13:
90:c3:0d:74:fb:b3:50:b9:26:76:e4:0d:36:a8:53:c3:04:4d:
20:ec:d6:0c:b1:5c:14:c3:dd:59:e0:9c:5a:0a:2e:fd:4a:ca:
73:28:f6:17:20:b8:0f:fe:85:2a:62:d0:d0:73:9b:c7:1e:0a:
ff:81:f0:57:b6:b2:4b:a2:a2:79:80:ab:10:07:54:6e:69:66:
e6:c0:91:b5:60:37:56:03:e3:8c:3d:18:16:0b:98:86:d2:91:
90:b3:dd:37:50:8e:ec:60:21:be:de:22:22:cf:44:6c:51:86:
95:88:89:23:45:02:e3:c9:2a:2a:83:6b:ba:0b:dd:fd:2d:09:
9d:e9:37:87:67:a4:b5:ab:3b:2b:3c:14:f1:c1:a4:2e:9d:f5:
82:50:37:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 20:18:46 2026 by rpki-client