Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier: MhvcmH2p6kM8ElabMFmH/Y0vpISTEzCj2S+zhYaoYiM=
Subject key identifier: AB:05:8A:13:3A:95:0B:DF:1F:54:8D:58:2A:34:84:08:2F:CA:19:92
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 01A001A67180EC591FB8E7A469A916A344FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number: 1A40
Signing time: Fri 14 Aug 2026 19:01:20 +0000
Manifest this update: Fri 14 Aug 2026 19:01:20 +0000
Manifest next update: Sat 15 Aug 2026 19:01:20 +0000
Files and hashes: 1: CZ1LSUniiHGNKwvHak6fSDmBxdc.roa (hash: Mosbvu2i3W9lRSEMHDa5n4kbGcSkA8mN4bx3wDReYfc=)
2: JhlPUIaiuE2YohDfzMjZESoyDBM.roa (hash: 7exMhOdMj9M/aNI0j3yYX3O6VN6kNC8RAmHhooROzJc=)
3: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: jOuAnOyoq0WVZA2yEB8MqVxuH0yVR627Bq5xF/PMcuM=)
4: i9Jjligy-EqoCiaFX_JoZgf9dZ4.roa (hash: XW8rc6v037pilJaZxg9f1SStjDu20ZBHUdc/h3ZDPqs=)
5: j2M12KSK7yupbk2QrIFnkpZ-KPM.roa (hash: yQynIUWOty/ocy5JzISGlHN5/AewbIRpARiMe1+4m+I=)
6: kSIrlNkYtxjevrUOWqXwGaCeFxQ.roa (hash: P1EFKe/doBtEMdSkydhZWieCIypvlDRY3TVJIkRt4p8=)
7: rgypQg1mq_y1PkBJTzbgugJszfU.roa (hash: 2UJiTYNC2SMcM+K20BC59uzzBZrc7ob9nA7WO1YUWjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:71:80:ec:59:1f:b8:e7:a4:69:a9:16:a3:44:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Aug 14 19:01:20 2026 GMT
Not After : Aug 15 19:01:20 2026 GMT
Subject: CN=ab058a133a950bdf1f548d582a3484082fca1992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:76:33:36:e6:40:72:8e:91:f0:1a:36:45:
dc:61:49:72:27:eb:d3:ac:39:99:50:7f:4e:96:9f:
b0:8a:8b:76:81:a5:10:06:8b:e6:33:1a:fb:e5:c5:
3e:7b:5c:3a:a8:12:19:cb:0f:ac:21:e7:f0:f7:3e:
2f:06:3d:5d:85:34:cd:09:55:07:70:8c:cd:85:f5:
24:5b:d6:8a:c0:11:ca:82:56:d3:12:a4:1f:05:56:
fd:67:a2:71:18:44:b7:41:4b:ab:2e:5e:ef:4d:00:
42:95:b3:c0:7e:c2:c1:cc:16:4b:8f:cb:dc:d2:21:
82:f9:80:f2:75:5e:ae:4d:8b:4b:9e:25:12:81:be:
38:30:36:26:ca:a5:30:34:7b:e9:fa:c7:75:b0:37:
10:8b:f4:d3:11:39:4d:1f:52:36:76:c2:88:60:a7:
ad:f9:24:ef:d5:aa:d7:3f:b6:84:59:ab:e9:03:4b:
84:2c:85:da:68:21:1d:e6:d9:ad:d7:e1:4b:52:3a:
99:93:73:85:31:35:f9:26:a5:9d:a5:7e:1b:3d:50:
01:55:1d:1e:eb:91:d1:0f:55:b8:ea:b3:33:b5:81:
f4:08:e4:c7:60:10:f5:55:dd:36:e8:aa:bd:d8:cf:
e0:11:27:cd:71:d6:a5:95:e7:37:77:6c:fd:6c:50:
15:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:05:8A:13:3A:95:0B:DF:1F:54:8D:58:2A:34:84:08:2F:CA:19:92
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1d:cc:4f:ca:33:12:fb:f3:f2:3d:30:3d:c2:85:cc:d1:4a:
39:3e:13:87:2e:6b:c1:6b:20:27:7c:b2:e6:57:8a:d8:af:a3:
c1:13:92:d1:2f:0e:b5:56:3d:e0:31:74:65:92:c8:39:5b:88:
37:25:aa:91:12:5a:0b:ce:c1:8f:3a:ef:64:5b:56:f6:99:b5:
6c:1e:a4:dd:b7:a8:01:1d:f0:0a:a0:29:fa:56:8f:36:2a:06:
f2:09:d2:e4:70:96:c7:a2:3c:8e:64:f7:29:74:9d:4a:26:d5:
17:8a:17:02:81:f7:b8:43:3b:29:68:51:14:57:f4:e4:e1:52:
9a:70:7a:e0:bf:f8:05:e1:ba:da:4c:10:7d:a3:f8:d8:b7:98:
29:39:fa:61:96:b8:69:84:52:4f:bf:16:87:53:93:d0:fb:ae:
24:a7:48:96:d4:fc:38:ca:b6:f2:40:97:c0:ad:9f:aa:ce:8f:
8a:46:d3:5c:33:fa:bd:a7:50:74:05:26:2f:a6:2f:40:0a:aa:
d0:bc:2a:4f:76:06:8e:ae:8b:09:a0:8b:76:65:3a:65:60:04:
14:2a:eb:50:65:84:67:41:8b:ec:34:d4:f9:ed:52:89:80:ac:
c4:e3:39:fc:04:61:fb:f9:15:59:12:0b:56:76:d8:37:07:cb:
89:3b:dc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:04 2026 by rpki-client