Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier: i+DbqmEk/mhIyhVBLb3qInH8Gwt+x/QrOOY0m8J9WhY=
Subject key identifier: 90:8C:DF:EC:57:C4:31:14:3C:13:47:BC:73:7D:A5:4E:B7:17:30:2F
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 019F92B5CD08CB21691DF26A07A0FBEE60F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number: 0EB9
Signing time: Fri 24 Jul 2026 06:00:15 +0000
Manifest this update: Fri 24 Jul 2026 06:00:15 +0000
Manifest next update: Sat 25 Jul 2026 06:00:15 +0000
Files and hashes: 1: RrwlRSSdwln9HbzArcN9f7ThR9c.roa (hash: Ic3y0/hXv+5FL5zNAqt7WX+ncQH0cGC5wuQsjbsXF7I=)
2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: SLPJ+TuxmjrHkt19ZK6qPsM0Z3qJ17dUB7JaULVDSLs=)
3: fWpL_ta7aXoIKT8lwYmDL0nQegU.roa (hash: r+7J0jRgrAdlkGpSk5T7jtJhr78GxAY9zYWBhS85+uQ=)
4: l5tw0iDO7abT_AibKjZJaQ4nwWc.roa (hash: r+71S+WnEwowT4NhvO1eI4eYiERh6tzaeOlSbc80Img=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:cd:08:cb:21:69:1d:f2:6a:07:a0:fb:ee:60:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Jul 24 06:00:15 2026 GMT
Not After : Jul 25 06:00:15 2026 GMT
Subject: CN=908cdfec57c431143c1347bc737da54eb717302f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9a:27:4b:c1:44:78:75:58:b9:08:0a:f6:8f:
17:0f:78:d4:a4:bc:2f:95:fc:9b:87:62:82:63:5a:
c8:f1:b1:6d:d9:d6:70:b9:0e:24:fe:b8:59:32:11:
b3:c1:78:5b:79:bd:9d:56:f1:ef:7f:74:6e:b2:2e:
1c:a2:7e:0a:51:b6:49:6a:b0:05:80:13:e0:b1:e4:
98:62:cd:1d:19:ff:d2:b3:fb:bc:c6:89:c4:fa:0e:
2b:47:c2:4e:04:34:55:8a:18:30:4e:50:bf:44:da:
43:05:73:6a:b9:cc:cf:ef:75:e1:63:73:82:4e:4f:
0a:68:60:15:0a:8f:dd:38:96:fc:ab:7c:69:d2:0e:
de:85:42:18:57:c3:67:32:a9:9b:06:08:9d:7a:e3:
c7:d0:e7:ff:15:f8:24:0f:02:94:0f:03:32:67:16:
e0:bb:ae:c2:40:c8:27:69:42:80:bd:ca:9a:ee:21:
d0:c9:a9:13:ea:ad:cb:18:17:66:7a:81:f3:ff:49:
26:d5:1a:3a:45:c1:6f:c0:23:ed:ee:1d:d2:b8:ff:
ac:1d:5f:e8:ba:98:97:97:34:eb:94:af:ef:3c:f4:
95:1f:18:60:7a:5b:35:86:b7:b9:a1:e0:f9:01:2e:
cd:02:9e:40:33:64:f7:bf:01:61:2d:e3:0c:81:89:
aa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8C:DF:EC:57:C4:31:14:3C:13:47:BC:73:7D:A5:4E:B7:17:30:2F
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3b:b8:a9:5c:d0:77:f8:66:51:f0:d5:d6:39:43:03:9f:27:
c6:da:44:51:ea:05:cb:e2:58:9f:9a:50:f0:32:c4:1c:a1:e5:
85:55:c0:98:09:0a:eb:4e:08:fb:c2:ba:df:cf:3f:69:5c:3f:
7c:3f:84:90:b1:94:bc:14:3a:a8:3b:8a:ee:dd:d3:91:81:ad:
16:2a:6b:ab:dc:fb:1a:bc:0a:ae:39:0a:d4:65:15:ba:86:d7:
7b:e2:d0:04:14:5e:94:36:cd:83:48:6f:c1:7a:3d:b9:5c:9f:
69:e1:9b:09:79:28:ae:c4:75:cd:51:bd:b5:78:57:6a:71:33:
51:ca:88:c5:9f:94:c3:3b:08:a8:51:bd:ae:d8:56:b6:c3:e3:
7b:18:d1:e8:0c:88:96:36:7f:29:ca:cc:78:c9:e9:76:40:58:
4a:63:38:8a:46:34:59:4e:0f:8e:a6:a2:ee:d6:a2:e1:71:fa:
2d:40:ab:97:13:f4:e1:c2:0b:ea:2a:d3:d6:4f:14:ee:0d:77:
82:33:e3:7a:6e:c5:b6:d5:46:3b:86:13:1d:17:07:40:ac:3c:
ae:9c:c4:05:f6:81:8a:f7:81:a6:c2:21:b0:40:f5:21:f3:36:
c2:d4:25:df:e7:c9:65:bd:b9:b8:1f:85:ff:ec:76:ce:08:69:
40:60:a4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:53:56 2026 by rpki-client