Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
File: xx85HWDhoTnMxCsXoyqVNj31z7A.mft (raw, json)
Hash identifier: VT5ydXH2wRzAosR8n9/P1kzUCnstIE+TCXqUJMlPQ/c=
Subject key identifier: 52:46:41:D5:3F:8D:F0:D5:DF:33:38:D4:3D:12:46:90:DA:5A:48:1F
Authority key identifier: C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
Certificate issuer: /CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Certificate serial: 019FA1F26363AC1304E018DB5B10BB262145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
Manifest number: 02ED
Signing time: Mon 27 Jul 2026 05:00:44 +0000
Manifest this update: Mon 27 Jul 2026 05:00:44 +0000
Manifest next update: Tue 28 Jul 2026 05:00:44 +0000
Files and hashes: 1: 5Ac1xGg2xzacy1Elgpwm7Fl9gOY.roa (hash: VWmcJPkpnJaJdz3GW3aT+bj0R6mJFxMSWGrX3LD0Zyk=)
2: xx85HWDhoTnMxCsXoyqVNj31z7A.crl (hash: PBVxZ+HdaAhLlk/msr7ojTp2fWidCb1ncPf4GjLBleA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:63:63:ac:13:04:e0:18:db:5b:10:bb:26:21:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Validity
Not Before: Jul 27 05:00:44 2026 GMT
Not After : Jul 28 05:00:44 2026 GMT
Subject: CN=524641d53f8df0d5df3338d43d124690da5a481f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:51:de:bf:10:5a:84:70:25:a2:86:0f:1e:
69:16:cc:83:61:07:a7:b0:d4:56:99:07:36:98:66:
d2:c4:e3:44:9f:e2:ec:dc:5b:84:82:08:fb:76:64:
6d:9f:27:de:2d:c6:5b:b0:93:9a:83:d5:2c:04:c0:
5d:23:da:44:34:f5:58:9f:33:3d:be:c9:2d:fd:06:
ac:28:a1:33:d4:a8:d0:5e:74:26:f3:0e:f2:3c:64:
08:a0:11:a2:d0:ed:a8:76:45:fe:00:fd:7d:44:dd:
6b:9b:bd:d1:27:e0:c9:14:38:e7:ec:35:99:c8:5f:
4e:16:c1:34:d8:3a:10:8d:dd:1d:d5:2f:af:aa:50:
b7:e2:77:a0:0e:a2:99:85:d3:e2:d3:da:cd:bc:32:
d0:da:0e:c8:ae:eb:04:fa:45:aa:5e:25:a3:42:c7:
2e:2a:00:e4:0e:15:3d:05:8c:58:5e:4d:fb:30:d4:
6b:47:1d:b5:72:e1:74:a6:b3:61:8e:97:64:0d:75:
82:39:2e:88:7f:ba:8a:1f:46:82:4c:43:a0:15:c1:
76:20:cc:e5:cc:59:1e:bb:7b:48:5f:02:da:2d:57:
df:dc:cf:e8:dc:d4:a7:a8:7c:87:29:57:09:eb:3e:
ad:88:18:69:cd:24:8f:c5:05:05:c8:5c:12:f0:0e:
63:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:46:41:D5:3F:8D:F0:D5:DF:33:38:D4:3D:12:46:90:DA:5A:48:1F
X509v3 Authority Key Identifier:
keyid:C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:89:1a:ba:6a:17:bc:3f:42:57:65:b4:8c:fc:91:bd:19:e7:
2e:43:d4:7d:25:c0:6f:6d:31:4a:e8:0e:ca:7b:73:5d:a5:a4:
f6:eb:f5:4e:6d:ac:c0:4e:b3:b4:be:d4:4a:01:fb:da:d3:9d:
3b:28:c6:04:7a:5b:a1:db:de:2a:47:db:3c:da:92:71:a4:60:
a5:f5:a0:54:ab:fe:5a:4c:c3:36:6a:2e:1c:96:b6:68:a1:93:
3d:74:86:93:09:06:4a:7e:25:07:df:31:de:32:87:12:42:34:
e5:33:58:7c:ba:c1:87:42:65:25:28:6f:6d:6b:04:71:1f:6c:
e4:2e:79:01:c2:47:f0:34:d9:c3:af:d3:9d:40:32:76:06:ef:
6f:20:08:1a:af:97:17:18:cb:e0:f4:3c:9e:77:b2:03:53:c2:
fb:a1:b6:5a:fd:bd:c3:8f:27:ca:a9:70:3c:3a:43:36:86:02:
b5:29:fe:f0:d0:f6:23:44:9e:8b:5b:9f:35:3b:78:a8:0d:73:
ab:9a:2a:08:b4:9e:a9:d7:d8:5b:bb:43:8c:17:ef:e9:ec:42:
dc:db:79:c1:2b:c2:7f:54:85:cf:e3:62:c4:6c:ed:cc:eb:d1:
92:37:1e:54:68:69:a0:f0:ba:bd:fe:c0:46:12:37:f6:52:66:
36:90:f6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:23:46 2026 by rpki-client