Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: Se1428+RayV4YaOnBwSzDCkc1I1C+fOtJyHbSzfARKc=
Subject key identifier: FE:DC:EA:70:F5:43:04:A0:7A:C0:4C:5B:16:B9:22:58:C7:A1:54:08
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 01A002B8F0F9FCEC5CB306BF17EC93332E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 1A01
Signing time: Sat 15 Aug 2026 00:01:09 +0000
Manifest this update: Sat 15 Aug 2026 00:01:09 +0000
Manifest next update: Sun 16 Aug 2026 00:01:09 +0000
Files and hashes: 1: XZNXCKIqVDgpPc7kS3zYiOP2yVE.roa (hash: rxN9jO9dfAmhC4tVQzEusEgOoOYY+A90wdSvN0MmV5g=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: Eb07zOfiik49geiO2JEyZsIsmV0HMMdLZd0GlPPVf+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:f0:f9:fc:ec:5c:b3:06:bf:17:ec:93:33:2e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Aug 15 00:01:09 2026 GMT
Not After : Aug 16 00:01:09 2026 GMT
Subject: CN=fedcea70f54304a07ac04c5b16b92258c7a15408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:81:53:45:50:27:1d:84:f6:ed:b0:37:04:
b0:af:65:7b:40:f9:15:cb:71:b1:df:3f:b4:83:c3:
76:a8:55:ca:8f:c1:43:b1:ba:6a:47:8f:12:72:51:
53:66:61:92:fe:0d:8d:32:40:7d:d9:76:1a:83:10:
6c:b3:7f:a7:22:a1:92:dd:a9:a5:e0:1e:fb:25:8c:
90:99:28:c3:34:69:9b:78:0d:9c:ba:26:7b:53:9b:
56:03:8d:69:d4:03:15:3a:20:53:a6:e6:ce:ca:e4:
5d:08:28:61:88:3a:82:9e:9b:da:ad:0d:c6:bf:7a:
03:3b:ac:a7:24:07:aa:54:32:70:ed:77:37:41:19:
ec:30:54:e5:ab:3b:dc:79:d7:04:55:d7:3f:f1:79:
38:72:10:c0:5f:70:c7:c0:71:7e:ba:55:81:44:69:
94:ce:00:9e:f7:2b:7f:f4:d2:f9:63:26:54:b9:fc:
10:09:ed:ae:c1:63:d0:39:ce:19:fc:9e:c2:33:00:
25:c9:3c:f1:f9:2e:4c:8e:31:89:46:f7:82:72:f8:
86:3e:c2:a2:bf:b9:8d:bc:e8:fd:82:40:e9:54:20:
cf:48:7a:db:3d:f5:5e:ab:45:02:90:96:c9:e2:ee:
35:4f:87:fc:09:a0:75:e0:91:69:3a:ef:d9:28:a1:
14:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DC:EA:70:F5:43:04:A0:7A:C0:4C:5B:16:B9:22:58:C7:A1:54:08
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:df:43:c8:18:5a:fa:f9:1b:8c:28:f5:64:bb:4c:36:ba:bf:
76:eb:73:47:e0:ae:cb:11:fe:ce:71:8c:63:e9:ce:91:cd:b3:
5e:51:7f:a0:f4:ad:9f:67:48:d7:62:78:91:99:26:3c:63:ac:
f1:26:06:84:7f:71:06:13:22:02:07:7a:ee:10:78:65:62:65:
92:c4:92:bc:c3:70:af:17:e4:42:da:d8:cb:5b:f1:e9:9c:22:
cd:53:10:bd:dd:27:39:36:0a:53:eb:af:a2:ed:4d:7f:cb:e2:
97:d1:d2:bd:aa:cb:c5:4b:c9:9b:3c:d9:cf:4a:16:48:8e:00:
78:cd:52:f7:cb:44:36:d7:ba:27:9d:c4:52:ea:7a:83:fa:ee:
73:9a:89:33:d3:4c:55:22:73:48:49:9c:19:27:ae:8a:ba:2a:
dc:fa:cb:4a:44:06:1f:11:e7:f0:6a:42:ff:ae:3f:7d:8c:6c:
2b:7b:53:03:a8:cd:36:49:19:08:c2:a0:88:6c:30:8f:71:b2:
6b:51:1e:ee:0a:22:24:06:63:0e:90:bb:2b:90:90:8f:45:79:
32:1c:e0:27:23:10:9f:1a:89:d1:88:33:9c:8a:68:a9:9e:6c:
db:68:b2:cb:00:bd:db:d3:f7:ec:c3:fe:48:ca:65:9e:64:f5:
33:53:a1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:05 2026 by rpki-client