Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
File: xcidUmDLNP27s7wlv0rbr0zcaKA.mft (raw, json)
Hash identifier: JkByAwbYNxdNoVTv8zJdmZHBJ20nqlTN0K6MsBkbrTw=
Subject key identifier: 61:4B:21:D4:24:34:D2:B5:F7:AD:73:33:F4:F6:85:B2:40:17:F5:80
Authority key identifier: C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0
Certificate issuer: /CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
Certificate serial: 01A03B27AA3ACD6D41D96241BBFF94DAF6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
Manifest number: 09DB
Signing time: Tue 25 Aug 2026 23:00:50 +0000
Manifest this update: Tue 25 Aug 2026 23:00:50 +0000
Manifest next update: Wed 26 Aug 2026 23:00:50 +0000
Files and hashes: 1: JD_hILTLs5WiN-GGz9cnjaMmPmg.asa (hash: w3ngbPPlSEh0i5ZlPs9dJQ8lVMYy1vGnqLwn37EOyHY=)
2: xcidUmDLNP27s7wlv0rbr0zcaKA.crl (hash: +Euv6bU+CKdup21pOzK/u6+x3ULrkmCQM+vDeag5oFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:27:aa:3a:cd:6d:41:d9:62:41:bb:ff:94:da:f6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
Validity
Not Before: Aug 25 23:00:50 2026 GMT
Not After : Aug 26 23:00:50 2026 GMT
Subject: CN=614b21d42434d2b5f7ad7333f4f685b24017f580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:98:38:2d:0e:72:52:58:e0:df:f6:69:fc:8d:
09:9e:80:b0:51:e1:28:ec:04:3f:72:1b:f9:c5:de:
b2:b6:41:73:b3:eb:d1:a0:62:22:54:d7:92:a5:f4:
da:9a:33:94:4f:e7:e2:e1:31:08:bb:cd:36:9c:e5:
8f:e0:68:63:cb:9b:bb:09:e0:08:48:f8:b4:33:07:
37:7e:63:35:ef:88:b6:dc:65:8f:fb:73:ee:4f:55:
d5:1a:c4:e1:f7:f5:ac:b1:88:ba:2f:d3:f8:79:4e:
f5:d8:2d:63:41:e1:93:b7:24:da:35:ea:da:90:dd:
0b:a0:54:a2:ad:1a:90:c5:e6:f4:23:79:59:fd:d2:
ea:1f:cc:e7:38:fb:7e:c9:9e:c1:8c:1b:67:f0:fa:
d3:65:b9:38:53:9c:a7:78:03:5f:fc:07:38:0c:d4:
41:c1:7b:5a:31:b9:f8:ec:15:0f:fd:e8:de:c9:03:
be:e0:4a:74:2c:66:bc:d2:2c:cb:a0:d1:c8:23:b6:
7d:26:67:fb:f1:68:a8:d6:09:42:4d:70:d8:ed:6f:
88:f3:0a:5a:fa:c8:10:d2:54:5a:7e:bd:dd:ab:d8:
f9:f4:25:d7:a7:d1:8a:8a:3a:2e:8c:e8:86:f5:c3:
7e:62:fa:37:a6:9e:85:ee:09:f5:66:19:ba:e3:28:
2a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4B:21:D4:24:34:D2:B5:F7:AD:73:33:F4:F6:85:B2:40:17:F5:80
X509v3 Authority Key Identifier:
keyid:C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f1:53:f5:32:eb:67:5c:09:51:d1:eb:9c:6a:90:32:f1:04:
a9:2d:f1:0c:09:54:9d:b8:1a:22:8a:4e:ce:a2:d7:42:a7:0b:
4d:24:79:64:f7:2f:29:68:1a:20:a7:12:4b:4c:37:4f:34:b3:
0e:2a:aa:fc:1a:28:cc:ba:45:2a:23:a7:c1:ab:cc:11:80:99:
26:48:2a:b1:78:63:11:86:00:34:f2:07:53:d3:cf:4f:16:ff:
c3:0c:f3:92:48:86:d8:54:06:3d:7e:c3:63:4a:05:b2:88:e1:
18:3a:b3:05:30:b3:2f:65:a6:56:55:0d:82:79:a5:9d:d9:ee:
f0:19:d0:3e:7f:9c:08:5d:2a:93:f2:94:20:ab:df:66:6c:f2:
f4:7c:34:62:e0:34:b4:01:f3:df:48:fe:ba:33:d8:73:af:ed:
93:c6:20:c2:14:79:df:1e:91:04:2b:84:69:35:48:91:1e:08:
f2:54:11:37:b7:6c:2d:fc:c3:5e:5d:0f:96:c8:98:c1:b9:20:
ad:99:23:aa:f2:98:fb:da:ce:36:58:17:9c:2a:5c:a8:fb:db:
23:2e:67:b8:db:ff:1c:47:ae:26:9b:62:1a:f4:7b:aa:04:bc:
43:b4:94:de:f7:df:46:60:78:58:2f:29:de:b4:98:8e:c9:37:
21:2c:0f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:59:17 2026 by rpki-client