Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
File: xx85HWDhoTnMxCsXoyqVNj31z7A.mft (raw, json)
Hash identifier: 7n6HafF6rJhe2UVJWaoO7AFLFEPfUnp9ez0hXyDH9GM=
Subject key identifier: DA:4D:A6:B9:3F:F9:8D:89:84:45:AC:E0:02:6A:2B:3B:93:6D:42:9E
Authority key identifier: C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
Certificate issuer: /CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Certificate serial: 019DD087C4C70277E1F197B577C6FF6DF531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
Manifest number: 01FC
Signing time: Mon 27 Apr 2026 20:00:51 +0000
Manifest this update: Mon 27 Apr 2026 20:00:51 +0000
Manifest next update: Tue 28 Apr 2026 20:00:51 +0000
Files and hashes: 1: 5Ac1xGg2xzacy1Elgpwm7Fl9gOY.roa (hash: VWmcJPkpnJaJdz3GW3aT+bj0R6mJFxMSWGrX3LD0Zyk=)
2: xx85HWDhoTnMxCsXoyqVNj31z7A.crl (hash: 7yF5MAXY131VAhOsdRaC24ITbWFHaccrTNdD0xh4+CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:c4:c7:02:77:e1:f1:97:b5:77:c6:ff:6d:f5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Validity
Not Before: Apr 27 20:00:51 2026 GMT
Not After : Apr 28 20:00:51 2026 GMT
Subject: CN=da4da6b93ff98d898445ace0026a2b3b936d429e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:f5:fb:6c:af:c2:c3:4a:26:e1:8d:9a:73:
e2:e1:37:e2:cd:64:e9:6a:d2:3c:e1:e7:60:95:77:
41:3d:36:d9:8d:41:48:43:2c:df:42:b3:97:bc:fe:
b5:78:a1:f3:4a:32:2f:76:27:5c:98:68:20:8f:5a:
8a:a2:74:5a:47:1f:95:9a:41:f6:fc:78:e1:51:80:
c0:6d:90:fe:d7:47:d2:ba:a0:ec:bf:53:aa:25:87:
ea:7e:f9:e9:b3:8f:c9:c3:1c:17:f8:47:65:94:6f:
25:4f:20:70:c0:6a:92:a8:06:8f:b5:1f:a1:2d:e3:
e1:1d:94:16:89:f4:d5:4c:c9:ff:d6:82:5a:95:a6:
6d:a9:23:d1:ad:cb:0b:d5:cf:5b:ec:be:62:e5:32:
90:12:48:ac:09:84:ae:4d:50:dc:47:37:23:63:e9:
ba:0a:90:7c:2b:0e:b8:7a:27:aa:f4:32:87:8b:32:
1f:ee:87:80:6a:45:c1:86:58:eb:dc:73:5e:21:21:
69:ef:e6:42:0f:eb:73:46:53:49:fe:2a:63:3f:3b:
ed:72:37:2d:0d:a4:c2:85:98:6a:e1:73:8f:38:a9:
49:97:23:9c:4a:85:f1:7c:36:9e:16:54:78:34:90:
c1:78:bb:b6:51:6d:fd:45:8d:a8:03:e5:c8:f9:2f:
7f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4D:A6:B9:3F:F9:8D:89:84:45:AC:E0:02:6A:2B:3B:93:6D:42:9E
X509v3 Authority Key Identifier:
keyid:C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:36:17:ea:1a:75:c1:59:0b:45:19:21:7e:fb:b9:12:6f:fb:
e1:d3:5c:49:30:10:5a:21:f7:9e:cc:0e:6c:b8:8d:ea:c4:34:
0b:6d:76:9d:8f:62:73:ad:61:5f:c6:f7:eb:8b:03:90:0c:6e:
b4:41:fe:32:27:5c:a5:0a:3c:a1:49:d5:e6:5c:ed:22:33:6b:
87:44:66:3f:ef:7b:ae:3e:da:2b:75:ce:37:f7:bc:2f:da:ed:
b9:f2:9d:0d:a7:8c:d9:4c:18:d3:0b:19:87:3e:31:c0:a0:4c:
ae:ab:ec:62:d4:07:f0:b8:3c:46:37:54:7e:83:f7:ac:a1:60:
52:9c:e0:fb:1d:47:f4:20:cb:5f:c4:37:a8:90:60:be:0e:6f:
5b:25:39:7a:40:6f:27:a1:50:e8:fb:74:69:3e:b2:89:a1:12:
37:b0:40:d7:58:36:df:75:9d:a0:9f:13:e3:3f:48:e6:be:14:
ee:68:14:ae:1e:a3:5a:b2:c6:a1:05:5b:e0:9f:0e:8a:6a:fa:
37:14:fd:06:35:f2:6f:af:46:dd:ab:6a:f9:7c:7b:15:8f:c1:
8b:c5:be:f1:c5:36:d0:70:e0:af:bd:c0:42:30:6a:e9:74:57:
d0:12:8d:ff:ac:20:e5:bc:26:de:1a:6c:b2:07:29:d9:46:1e:
1f:35:19:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:33:05 2026 by rpki-client