Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: ykctqY+6NwE0yxF1FrY8OokBfa3CCF2jTRofXbHhuPA=
Subject key identifier: 24:47:A6:2C:71:AA:62:24:7D:11:B5:DB:77:27:FB:1A:40:A4:BB:F7
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 01A004029B206BF5FC0F247606FB337E3450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 1996
Signing time: Sat 15 Aug 2026 06:01:14 +0000
Manifest this update: Sat 15 Aug 2026 06:01:14 +0000
Manifest next update: Sun 16 Aug 2026 06:01:14 +0000
Files and hashes: 1: AorOXJjA6o7VIXG2KhmRn45N0UY.roa (hash: opct1yXiFy361tzWw8bb0wIPcRKu5irJGelwFQC/fvQ=)
2: ErvwJYNq58NBwdxg4NllytvGu58.roa (hash: L/oQiFOQUaagNx6+74y64js5tlg2OsPgxLI2bOEuDOs=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: pFH2kwv7rmSZjQ9tkaYjBYG3R7pP4kWb58z1NCd23hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:02:9b:20:6b:f5:fc:0f:24:76:06:fb:33:7e:34:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Aug 15 06:01:14 2026 GMT
Not After : Aug 16 06:01:14 2026 GMT
Subject: CN=2447a62c71aa62247d11b5db7727fb1a40a4bbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:71:a0:88:f3:49:8b:d9:cc:80:62:d6:c5:
a0:64:4a:08:e9:9d:9d:c5:d9:19:8f:5b:34:d3:74:
ee:67:b5:46:c0:b1:1c:88:7b:71:f7:de:58:34:8e:
fd:1b:39:c2:11:fe:41:1d:7e:d3:df:35:f8:8c:52:
d6:b4:59:64:e3:41:bc:d1:19:3d:d5:0c:ab:c5:5a:
54:16:ac:ef:cf:ec:e0:55:d6:67:2e:8b:6f:c2:68:
f2:09:1b:b5:90:e9:e0:0e:1c:6c:70:46:7d:26:90:
05:c0:d6:e1:79:87:4c:26:6c:59:4b:ba:c1:06:f9:
75:24:f5:98:b4:d3:ec:39:92:4d:91:e9:4f:1e:9b:
e8:6d:40:5e:3a:e4:38:15:31:40:7c:1b:62:63:34:
32:f9:b0:db:a6:38:77:19:fd:b8:28:36:b6:e0:c2:
90:5a:a6:c8:57:00:47:65:98:22:33:d0:3d:be:10:
9c:da:9a:af:90:fb:ed:f8:68:37:7f:dd:6a:92:83:
18:67:c7:02:ad:d7:8b:71:42:1e:1b:de:6b:0f:6a:
71:65:a0:79:61:78:41:86:89:e9:c1:cb:4b:da:18:
46:28:7c:c8:fe:a6:90:6e:9d:2b:63:52:5e:12:88:
19:f6:cc:df:95:b6:da:83:06:f1:24:44:1b:d3:16:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:47:A6:2C:71:AA:62:24:7D:11:B5:DB:77:27:FB:1A:40:A4:BB:F7
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:42:25:58:ba:db:3e:51:94:a4:44:64:f8:00:28:42:a1:61:
43:7f:7a:25:19:c2:fa:54:77:6f:f3:67:35:af:0d:ac:a5:83:
2f:e3:9e:b7:87:f6:15:16:c7:37:7b:61:46:cd:78:52:1d:c2:
fa:b6:78:7a:a4:b4:c5:4c:4d:80:20:26:6e:b4:0e:51:e9:b4:
5c:db:71:5e:5a:f9:e9:12:bc:c4:32:5f:59:bb:ed:39:fc:34:
80:68:8c:ff:e6:a8:55:53:cf:8a:ca:43:11:d3:a4:53:cc:cf:
52:20:7a:4f:7b:29:2b:2d:19:b1:c5:30:1c:be:73:60:6c:89:
9e:c2:cc:28:82:a1:d8:1d:2b:1e:0a:72:16:d3:fd:88:c6:a7:
85:7e:4a:93:f8:7f:cd:98:e2:cd:6c:c8:ec:59:84:6c:8f:3b:
4f:d3:fe:84:fe:ff:cb:14:7e:64:8d:70:a5:c8:65:31:3f:5d:
5f:bb:50:a7:ea:64:10:2d:f0:30:d6:56:7a:34:44:7f:b3:24:
8a:4f:54:ea:9d:0f:55:65:90:cd:11:1d:89:9d:ad:61:87:53:
b3:74:84:9d:d7:8a:4c:98:11:d8:cc:ee:57:11:c0:8f:3f:4d:
a5:7f:e3:86:0a:aa:71:72:ba:ae:9a:a8:3a:ea:07:10:4e:65:
8b:7c:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:43:38 2026 by rpki-client