Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier: qFmyBKC4btN2LrG1KzRsj4ktkt1eAIekSZU82Qw36kQ=
Subject key identifier: 35:08:47:48:59:B6:C5:13:11:40:62:FE:DA:F0:60:2D:A3:3B:2F:E8
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 01A00213EA70ADCE30913CB028C38887D51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 21:00:54 +0000
Manifest this update: Fri 14 Aug 2026 21:00:54 +0000
Manifest next update: Sat 15 Aug 2026 21:00:54 +0000
Files and hashes: 1: jbS8RSSk1qPuBMHXiz0NFlG5gaU.roa (hash: ffpPuQq0nfWr1B/H6xQP1tfUAtvyoDxPWUAq5WEIXy0=)
2: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: nCKxv9PjFD5c0wF990dGIhcxF+UDilmpN6vqVEh0bXc=)
3: xo3E7B75wnW1W3d1HJPhSZevYZA.roa (hash: PthsrXu6VgY7H1QeefirkpT9auw29AQ4kvdF+HY+Frc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:ea:70:ad:ce:30:91:3c:b0:28:c3:88:87:d5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: Aug 14 21:00:54 2026 GMT
Not After : Aug 15 21:00:54 2026 GMT
Subject: CN=3508474859b6c513114062fedaf0602da33b2fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d5:6c:8b:1b:59:52:57:74:b8:75:eb:7e:9e:
49:61:37:ef:be:a1:90:5e:9b:76:59:b0:67:f7:2e:
1d:52:e1:3a:72:54:12:03:a7:6d:c6:f7:9a:a6:46:
9c:2a:48:02:47:a5:45:b5:c7:20:71:5d:9f:86:8a:
16:ac:71:65:df:f0:d7:01:cc:55:20:b6:12:c3:30:
75:8f:af:23:4b:da:9c:b4:70:ce:7a:ce:00:6c:e4:
96:ac:65:78:00:7e:99:e8:18:64:c9:b0:ff:8e:6f:
32:70:71:48:b7:5f:4c:c0:ab:00:d0:44:76:c2:1d:
6d:64:d8:57:8d:a9:9b:da:78:44:16:26:5d:3b:90:
8c:58:78:5d:2d:2e:d8:89:37:0d:b3:22:93:f0:e5:
c3:2b:fa:a8:8f:71:27:c9:a7:73:6d:bd:47:83:4b:
a6:13:bb:e5:f2:c8:fd:ab:77:c7:3e:2a:fe:9e:b6:
18:38:55:e6:c8:50:2d:ba:f4:70:55:89:db:d8:a9:
71:4f:eb:58:69:ab:0d:63:8a:1c:13:d3:38:7f:b6:
0b:49:96:25:cf:6b:0d:1f:f2:5f:d8:f3:87:5f:8e:
03:cc:db:cd:6e:62:4d:3e:34:9e:32:87:23:2a:f0:
e3:a9:1d:71:1c:b1:7e:6f:da:4d:8c:c0:11:9c:3f:
2c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:08:47:48:59:B6:C5:13:11:40:62:FE:DA:F0:60:2D:A3:3B:2F:E8
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:11:ac:d4:b9:6b:33:c2:a0:f0:80:09:b6:bc:a6:9c:22:9f:
d5:f1:09:a4:ff:e1:fb:f5:ab:79:e8:37:b9:7d:43:9a:e9:58:
74:21:67:1e:6a:63:7c:26:55:a1:98:88:ab:3e:c8:7a:f2:35:
7e:89:e2:73:36:67:1d:ad:60:bc:c2:81:e0:b3:aa:30:1d:ac:
bf:1d:7e:63:f8:91:62:16:db:71:96:6a:18:ee:93:ec:53:9a:
29:44:78:ba:6f:79:10:d4:9f:35:e9:85:45:1d:66:d7:c6:02:
3f:f1:27:6b:92:15:2a:9c:bd:97:e3:4d:80:e6:20:1b:1f:b7:
61:80:ca:e8:52:4f:72:3e:e5:7c:af:93:a9:f5:b8:df:c7:ff:
0e:b1:21:a5:20:6a:6a:3b:9b:66:ba:b7:d4:a2:5d:99:3a:46:
4f:91:11:16:ec:f5:54:9c:ff:63:3a:ea:8d:a2:7b:ac:e6:a8:
ac:87:7b:f6:c6:5a:25:34:70:07:59:a8:de:80:ee:c0:ec:f2:
45:78:69:6a:53:47:0f:0d:0f:09:8a:e9:65:0f:8a:13:c6:9b:
08:13:a1:2c:73:8e:11:e0:91:3f:7a:24:8e:a7:39:a2:83:80:
93:a3:b5:1a:1f:6f:80:de:bf:4a:b5:9b:cc:29:59:55:93:72:
8e:0d:bb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:26:13 2026 by rpki-client