Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: f8OHRreOyGj+E70Z5/UK/cUzX7dxYxgbDnitzz2aCns=
Subject key identifier: 01:E3:D5:A9:F0:C4:0B:F6:38:D9:2D:2C:4C:3C:60:30:75:90:86:1F
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 019FFF81D1B18D477DBDBE497643C2100EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 09:02:05 +0000
Manifest this update: Fri 14 Aug 2026 09:02:05 +0000
Manifest next update: Sat 15 Aug 2026 09:02:05 +0000
Files and hashes: 1: pl4G0drpVsiUnTNv0aNJRxAq40Y.roa (hash: TIrmY5F1mz/rcq5o0AaF7KuNyHFmI5rxVVBApqp6+Ig=)
2: uCT5qS0TatwLKR2syBgBgC34NYE.roa (hash: 6Pav0LB8Y/JGRbLI7vMShFMSStiFyP+H+ECIrWK519s=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: qHDZpzDyMqITmAyH5o2XU2Wgr1bKgPTYRf3UTC7B+Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:81:d1:b1:8d:47:7d:bd:be:49:76:43:c2:10:0e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Aug 14 09:02:05 2026 GMT
Not After : Aug 15 09:02:05 2026 GMT
Subject: CN=01e3d5a9f0c40bf638d92d2c4c3c60307590861f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:28:d0:ef:47:70:91:14:ab:e9:d5:84:bd:d1:
e9:38:d0:29:91:b2:12:c5:3a:66:df:16:65:7e:c8:
51:d4:e0:d2:6b:0f:f7:82:db:96:85:c5:df:be:ad:
bc:ca:bd:d2:1e:45:e7:a7:eb:3e:31:1d:e9:96:1e:
47:d6:7e:69:2f:c0:60:ea:39:36:e3:c7:7c:12:23:
f5:1f:d9:a8:c5:0b:5d:85:78:42:2b:2d:8f:04:3a:
46:ed:aa:44:d1:7f:b7:4c:13:e7:4e:bc:a1:b0:1b:
d9:54:7a:a5:f9:3d:41:59:9b:58:c4:d7:fd:60:65:
f1:78:d2:ef:8e:8a:54:a4:2c:fc:87:5b:43:9d:91:
eb:6b:6c:ad:92:ea:27:b1:20:3b:6f:d0:e3:70:9d:
e0:7d:56:2f:f3:b3:d2:50:d1:cd:b6:4d:61:39:9d:
40:c9:f4:ea:a4:5e:51:fb:47:41:68:01:68:a0:51:
22:8c:06:05:97:f7:fd:4a:78:48:7b:e6:cb:8c:95:
63:c4:ab:2c:0c:0e:46:12:07:be:2f:58:c7:08:49:
4e:c7:a0:1a:7f:a6:f8:a5:2b:f2:c2:aa:5f:15:6d:
3b:b3:a9:ba:2d:33:a4:ba:bf:a4:fc:a9:d3:4b:aa:
b4:74:94:37:27:bd:d8:51:59:2b:9b:f6:c4:02:d2:
38:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E3:D5:A9:F0:C4:0B:F6:38:D9:2D:2C:4C:3C:60:30:75:90:86:1F
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:91:3d:3a:de:60:0b:0a:ef:eb:99:73:3c:94:8e:c5:e6:7f:
3a:83:c7:90:7e:00:10:31:22:6d:3e:02:08:10:74:92:0d:2c:
91:89:ab:74:7c:79:18:a1:a7:0a:bc:19:07:b9:88:35:56:63:
66:05:1a:ef:12:eb:0f:3b:f0:d8:8a:b2:71:f5:24:db:e6:23:
02:7d:b2:81:0a:57:2f:7e:ab:18:19:4b:8a:9a:04:0e:2d:57:
62:cb:bf:3c:34:5c:3e:99:06:cf:5c:74:32:d9:ba:1a:e5:5c:
12:9f:e3:55:9d:7d:06:9d:28:90:20:d9:c4:0b:ae:41:e1:9f:
34:c3:1c:a9:80:2b:03:52:0f:f5:28:92:5d:80:59:e7:c5:17:
b0:b8:45:a2:e7:12:4a:b6:c9:99:d0:44:63:9d:aa:09:81:1c:
1a:06:56:48:79:46:82:79:f3:10:19:ba:43:a8:22:0b:47:07:
7b:a6:55:70:af:02:2f:9a:71:b9:82:54:38:a0:eb:60:44:a8:
5a:70:c9:b8:0b:70:00:ae:e9:4e:44:0d:9f:bb:58:2c:66:17:
dc:ce:42:f9:c4:08:65:af:e2:56:82:6d:c0:87:8e:58:fb:d6:
6a:2e:16:07:73:2f:49:b3:b3:7e:5a:e6:8c:e7:cc:3b:4f:3f:
90:a8:b8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 19:18:55 2026 by rpki-client