Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.mft
File: xEBsnAYTL85A7cBG4GmuNFK6aOM.mft (raw, json)
Hash identifier: afomsB76bzYBQIfTJv0Pcqyh3HpAbV/aA6j6w4LxRdA=
Subject key identifier: 98:64:70:EB:41:3B:8F:5A:4B:29:12:95:7E:75:B4:2E:47:FF:BD:F3
Authority key identifier: C4:40:6C:9C:06:13:2F:CE:40:ED:C0:46:E0:69:AE:34:52:BA:68:E3
Certificate issuer: /CN=c4406c9c06132fce40edc046e069ae3452ba68e3
Certificate serial: 01A0427426BAE378FF56F7D93E4DBB45D291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEBsnAYTL85A7cBG4GmuNFK6aOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.mft
Manifest number: 01E5
Signing time: Thu 27 Aug 2026 09:01:43 +0000
Manifest this update: Thu 27 Aug 2026 09:01:43 +0000
Manifest next update: Fri 28 Aug 2026 09:01:43 +0000
Files and hashes: 1: b_C6-vRVgU9-ZGu5iPetXhBiGd0.roa (hash: 2gUqRWsgOMEHr5aKvlRadKgrnBBP2u9PjUCeJ2rack0=)
2: xEBsnAYTL85A7cBG4GmuNFK6aOM.crl (hash: 0/SlhjONPUioLuM3vWPy9X0vlxpLAseZeLbi4DzFN3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEBsnAYTL85A7cBG4GmuNFK6aOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 08:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:74:26:ba:e3:78:ff:56:f7:d9:3e:4d:bb:45:d2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4406c9c06132fce40edc046e069ae3452ba68e3
Validity
Not Before: Aug 27 09:01:43 2026 GMT
Not After : Aug 28 09:01:43 2026 GMT
Subject: CN=986470eb413b8f5a4b2912957e75b42e47ffbdf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:2c:5e:3a:8d:48:d8:d9:69:4f:d9:43:53:
b8:8f:c2:76:c0:85:5e:04:58:fc:25:12:e6:7e:79:
07:48:68:97:24:db:25:9e:b1:41:dc:ce:14:10:f2:
b6:da:aa:66:fe:91:6b:eb:be:51:37:24:88:f4:da:
b8:8e:72:0d:0e:16:69:e0:aa:e7:2f:25:6f:78:a5:
8d:a4:4e:7d:ff:2c:05:7a:bd:26:7a:9f:e9:08:8a:
37:7a:5b:a0:85:30:34:df:bc:5c:00:88:d1:63:c0:
4c:d9:70:b4:34:22:25:4c:ae:da:c3:97:1c:8d:f0:
e2:f9:81:02:f6:29:e4:40:78:58:cb:8e:03:0c:f8:
d9:7b:1c:5f:be:3d:84:8b:42:1f:83:6e:f6:3e:16:
6a:00:5d:7b:d2:65:08:5f:77:78:d6:66:43:de:af:
77:99:c0:3f:95:c9:0a:27:c3:79:15:d4:4e:3f:76:
2d:cd:e1:61:95:23:1a:25:55:c0:94:73:a9:04:71:
ac:3f:57:a3:7d:28:c9:88:c1:36:b7:11:8e:0f:ab:
50:16:44:2c:41:30:c4:b5:66:34:05:58:0a:3a:c5:
fa:a1:66:9b:69:51:7f:df:9e:a4:e5:16:dd:04:61:
96:db:ce:70:50:f8:9e:5d:4b:22:51:db:1a:91:20:
c5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:64:70:EB:41:3B:8F:5A:4B:29:12:95:7E:75:B4:2E:47:FF:BD:F3
X509v3 Authority Key Identifier:
keyid:C4:40:6C:9C:06:13:2F:CE:40:ED:C0:46:E0:69:AE:34:52:BA:68:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEBsnAYTL85A7cBG4GmuNFK6aOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:35:97:90:ca:04:a1:a2:47:b8:42:97:b5:ff:d3:e9:b6:0a:
30:8c:8f:8a:65:50:01:a4:6a:4c:c5:5a:7d:f1:e9:c7:c3:ca:
9b:32:db:4b:46:55:68:0a:c9:cd:9a:60:42:e7:69:01:5c:b0:
00:68:7a:c1:5a:9b:8f:c7:ea:d3:cd:19:56:52:bb:62:a7:ef:
92:f1:e7:fc:ed:e2:a4:45:17:66:82:8d:c5:25:d2:a1:7d:82:
5e:45:2d:6e:c1:0d:f4:f6:50:e4:45:84:91:dd:8e:22:ca:4d:
10:1f:83:f3:78:be:4f:8e:e5:17:ee:0c:96:b0:99:9e:0b:eb:
3c:63:f5:1b:ac:74:5a:29:5c:89:c2:f4:bd:f1:11:a4:83:5c:
29:2f:99:7c:3e:1a:ec:70:8a:11:9b:93:72:2c:ec:b4:a1:a0:
e0:39:24:07:57:37:8d:49:ce:a6:ea:82:ce:a6:a9:2b:ac:d7:
35:01:9d:5e:d2:84:36:17:05:8b:d4:27:43:7f:9f:eb:47:9d:
59:03:2f:7e:87:40:bd:e6:95:94:d1:5e:eb:38:68:58:d6:b6:
e5:12:59:49:1a:db:87:6e:df:8d:e3:76:26:c9:d1:7f:20:7f:
f6:ab:4e:94:e3:35:c9:98:f5:4d:74:96:1f:e7:d1:30:53:ad:
49:43:9a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:25:34 2026 by rpki-client