Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: TgtdaBYxrx+WQWclwuntd6k4kyLnvYhsAyyNMfySsM8=
Subject key identifier: 87:86:A4:31:F3:66:91:C4:E6:97:2F:F8:8C:62:C6:87:AD:5E:58:56
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 019F92B6219DA1F0AFD17CF3EC35E3F75284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 07C2
Signing time: Fri 24 Jul 2026 06:00:37 +0000
Manifest this update: Fri 24 Jul 2026 06:00:37 +0000
Manifest next update: Sat 25 Jul 2026 06:00:37 +0000
Files and hashes: 1: gW00o8n4Rs81BAgnMAtJNPDGHdU.roa (hash: SSNtGXPA/36/YiPMJlKvxQTbaar7XDaEXBXVj0gHR90=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: ocixpYpIyrrGcK2esl/xWBvUfCwb47L1xaN0+Sfi26Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:21:9d:a1:f0:af:d1:7c:f3:ec:35:e3:f7:52:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Jul 24 06:00:37 2026 GMT
Not After : Jul 25 06:00:37 2026 GMT
Subject: CN=8786a431f36691c4e6972ff88c62c687ad5e5856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:dd:2a:64:5a:eb:e8:ca:d0:97:75:47:60:
28:f5:de:8f:11:5f:ee:3e:e1:9b:5a:79:0c:ec:02:
01:2d:7f:fb:b3:c9:b7:02:36:c9:b3:83:3c:3e:b1:
f5:d5:a8:ae:3b:7f:73:d7:18:87:2f:8f:40:3f:c9:
6a:02:a0:ae:25:7c:9f:7c:8c:cb:c3:19:e1:ad:d1:
f4:2c:9c:4c:0e:4d:de:7b:6f:77:f9:69:7d:f6:1f:
0c:d9:df:58:e7:d6:09:d3:f2:74:17:7b:d6:ca:52:
ea:ee:ff:02:6f:a7:b1:df:92:dc:4a:d4:d5:91:95:
20:aa:5b:cf:51:03:7b:4d:47:4c:0b:fe:e6:d2:a8:
28:42:a5:a3:fb:2d:37:3a:56:82:99:13:0b:b0:be:
fc:3c:fa:2a:ba:5d:27:ec:f9:fb:d8:07:cc:e1:d4:
a3:8b:0f:0d:fb:3c:be:c4:d9:85:ed:83:cb:bf:15:
76:6b:fe:35:ff:d2:9d:fc:fe:f0:ce:0b:94:65:8e:
44:ae:11:90:cf:27:3a:7a:43:1d:ff:23:ba:30:53:
c6:23:b5:7f:82:ad:3f:76:a4:6f:20:70:ef:38:91:
2b:86:8f:9d:11:15:81:ac:c8:67:8b:28:22:87:28:
c0:a5:38:18:0a:b3:36:8a:ab:a3:5b:c5:18:67:05:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:86:A4:31:F3:66:91:C4:E6:97:2F:F8:8C:62:C6:87:AD:5E:58:56
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6f:4e:c9:f8:fe:44:f4:6d:b1:2e:9a:15:03:91:41:ea:17:
75:11:8e:f6:5c:86:ae:72:18:16:56:95:0c:a7:7a:7f:c5:cc:
66:84:7c:48:10:2d:f0:7b:88:ba:4d:6b:ef:52:1a:95:34:74:
73:0e:ea:7a:d9:75:8e:10:d1:f1:4d:17:1d:da:b8:a7:15:9a:
9f:7a:15:f9:fb:bc:36:01:23:7e:68:32:0e:ba:3a:17:76:07:
65:a4:b9:b6:b5:df:b3:5c:19:7d:82:9e:e3:e9:8f:74:26:b3:
7d:df:63:52:e4:66:d8:33:50:74:88:26:89:6c:be:32:75:4f:
0d:d5:0d:0d:73:37:3d:1e:75:da:5a:47:cd:41:62:11:a5:63:
01:1b:8d:22:9d:d2:c3:64:34:e4:3b:8d:f1:e4:aa:07:bf:a4:
35:d0:9b:58:7a:14:70:6d:f2:e7:12:26:aa:bf:f2:d6:9e:e8:
dc:14:15:ea:09:0f:a7:18:86:70:3e:48:94:86:e9:56:85:ea:
55:57:8b:25:21:ab:c2:22:a5:37:fe:0c:b2:c7:d0:1b:f8:fc:
36:e9:5f:a6:ac:d3:92:e6:a5:e9:84:21:1a:db:c1:42:c2:43:
33:82:a8:bc:cd:b7:61:6f:50:a2:17:e4:f3:22:3f:cf:1d:dd:
a6:1d:f1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:16 2026 by rpki-client