Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier: wUul82eORhwUNMp0q6g56kMlpHL/Ph9trkpFdA5cXCc=
Subject key identifier: 8C:A1:25:5D:FD:6D:B4:75:18:34:27:F8:5B:A1:87:A1:A4:CD:7F:10
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 019FA14DEC03B84A44A11D8F4E2276EB0BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number: 16D6
Signing time: Mon 27 Jul 2026 02:01:06 +0000
Manifest this update: Mon 27 Jul 2026 02:01:06 +0000
Manifest next update: Tue 28 Jul 2026 02:01:06 +0000
Files and hashes: 1: Vu85Nu-HoLeRv_52CEznI8bQbss.roa (hash: c6ty/wCdDrBOcI9jUvVNl5APK8YZjil4x8ZlNRshHvo=)
2: hwEYkWKezFU1S6DS8A0TF6JXUos.roa (hash: dJKRSf7F67Dm6ZGKlb7G6KP8NQfxdE863RZT2JIwE9k=)
3: lo3R5w_kTel81Z1irkIbzAD6F8Q.roa (hash: PuU1Xdn3kY1LjMwZS3Qaqe5MniakxiQ+Y+f6yTPGRCQ=)
4: nb0hXlBPQhPWTuMEqZzkSxkwpXI.roa (hash: 55gzjqx5n4gyySLdEurC8vvFbXFEosab3sYhqOZ+WA8=)
5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: HH+dFPevVejyF0wpyxVMlPTTcX/cg0TdJGQsGoDoUjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:ec:03:b8:4a:44:a1:1d:8f:4e:22:76:eb:0b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Jul 27 02:01:06 2026 GMT
Not After : Jul 28 02:01:06 2026 GMT
Subject: CN=8ca1255dfd6db475183427f85ba187a1a4cd7f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:c5:80:a1:7a:a3:4f:82:96:20:de:ad:50:
7d:51:ce:7b:b3:e0:0f:ba:17:f6:a8:8e:84:83:34:
da:b7:37:35:f4:d8:97:50:86:67:8c:09:0f:c2:d1:
8e:82:83:b2:ed:f2:5f:ed:88:72:e4:76:0c:69:ba:
ca:cf:b5:b1:f2:16:59:be:21:94:12:d6:f4:a4:07:
9d:a2:33:4e:3b:9a:1a:ab:aa:c9:cd:ff:cb:74:8d:
24:38:bc:e8:13:ca:60:97:a3:e1:6d:3f:cf:19:13:
70:b5:9d:ce:06:39:e1:2c:b6:ad:e3:c5:af:4c:bb:
56:bf:c8:f5:86:7f:20:2c:24:03:fd:59:0f:60:9d:
41:83:c9:6d:01:f8:ce:95:a8:e4:d4:9a:97:f1:61:
ff:d1:91:24:4c:e5:f1:32:48:3b:bb:24:35:95:f2:
86:97:f0:c6:98:cd:11:49:29:f7:14:34:0e:4e:8a:
99:ab:90:e9:7c:56:f3:95:46:6e:06:88:62:35:be:
a6:b7:15:48:d1:d1:81:0b:df:df:97:1a:09:af:65:
2d:b4:8a:25:c0:b6:46:ff:33:a9:23:00:e5:ae:09:
ab:d9:b6:c0:75:f4:27:b4:3d:27:78:3b:c8:b6:77:
ea:1a:75:8f:8a:0a:d0:77:00:3e:c3:9c:26:f2:ac:
4e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A1:25:5D:FD:6D:B4:75:18:34:27:F8:5B:A1:87:A1:A4:CD:7F:10
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:18:78:7c:fb:08:25:32:06:12:30:47:4b:29:fd:f7:62:0c:
66:00:a3:4c:05:a8:6f:c4:c0:9c:77:4b:16:97:73:73:67:aa:
17:e0:58:1b:89:a9:ed:ac:28:72:c1:18:80:5c:f2:f7:27:6f:
ca:a9:b4:f3:de:ec:73:61:23:c5:da:ab:61:54:2a:4f:2c:16:
25:e7:ea:46:53:2e:d5:59:97:8c:89:a9:dc:79:e8:52:d2:c4:
0b:f0:b8:06:1d:6e:1f:ff:cb:da:aa:6a:19:b0:97:bc:11:18:
ba:fe:0f:f5:1e:e8:e5:d4:9c:48:7c:66:09:97:12:f0:4d:b4:
11:77:5f:6d:fa:6f:ee:fc:3c:4a:f5:12:62:68:c7:8f:97:3a:
9f:e4:5b:71:77:7b:c6:cd:eb:f5:10:f4:ff:9a:3a:51:43:7c:
d4:1d:80:a5:26:f8:c9:c9:7f:46:dc:fa:9a:bb:30:47:78:d2:
2a:27:0d:dd:77:f8:ac:0f:8d:e9:40:d9:d8:c5:a5:17:8c:9f:
12:8c:37:87:1f:f7:6a:1f:01:cb:38:5d:94:98:5f:dd:ea:9e:
74:f5:34:ca:48:d8:dd:28:f7:1c:d8:fe:a2:28:0a:10:de:83:
2c:d6:c0:e4:ce:24:dc:dd:74:5e:f5:27:62:0a:d1:7e:60:b1:
28:f6:e9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:48:10 2026 by rpki-client