Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File: x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier: TaNNCAX56OfKQp2nOyGU/x2dkSVmXQk4UlPkBeRD8zQ=
Subject key identifier: BF:8C:FF:37:47:22:6A:AF:61:90:71:A0:D9:F4:B5:CD:AE:A3:3D:84
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 019E205A85869FFE90A11D4659540CC09347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number: 1550
Signing time: Wed 13 May 2026 08:01:03 +0000
Manifest this update: Wed 13 May 2026 08:01:03 +0000
Manifest next update: Thu 14 May 2026 08:01:03 +0000
Files and hashes: 1: VVO2x6L7LFTZsVY_zaZrcjz-CLU.roa (hash: mrQRCF7HAxobAPy4OykpZkTQroOOHVdF+aZo6ajUous=)
2: XSKluvUTTgVd2egTpJ08l-exvKw.roa (hash: k4WvTC/++ULE/2LzyeolM06KPsDEfc4ZDC8+guSUNtQ=)
3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: P7QMWXf0Tq8D0B3LkNaxdISpxntbgTCeUjXXmkLYMqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:85:86:9f:fe:90:a1:1d:46:59:54:0c:c0:93:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: May 13 08:01:03 2026 GMT
Not After : May 14 08:01:03 2026 GMT
Subject: CN=bf8cff3747226aaf619071a0d9f4b5cdaea33d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:68:67:26:3e:a6:55:52:44:ac:60:08:a0:
2e:7a:26:84:cd:c0:31:f0:97:6d:1c:7e:84:0c:c9:
70:0c:83:75:a3:53:20:22:48:6e:4e:28:a2:e5:04:
b9:a7:91:0c:ad:bc:8a:3a:7b:b2:14:d5:66:d0:69:
97:42:f1:0c:31:c8:1f:a9:30:f1:1e:dd:89:10:5c:
db:b3:2e:99:71:83:94:b2:2a:47:10:52:36:5b:7c:
e5:55:7a:53:7d:ff:67:93:6b:5e:b9:be:73:61:d4:
ba:7a:79:b5:cd:9a:2f:fa:49:3a:c6:28:3d:7a:e8:
01:3c:af:47:a8:bd:82:17:d1:06:b2:0f:b7:2d:40:
bc:52:88:0c:ac:dd:af:a7:e0:c6:6e:f4:6f:cf:56:
bb:62:a2:fb:7f:5a:f6:19:db:2d:7d:f3:79:29:db:
dd:c0:e8:3a:04:74:fe:9c:9c:b2:9a:74:e5:6e:e7:
f9:46:4f:dd:58:c0:90:4e:58:66:cf:2d:3f:b4:04:
4b:f9:7a:ca:6c:15:2d:27:be:74:3b:8b:cc:fc:30:
6b:a2:9d:e6:32:55:83:92:96:d3:f3:98:05:0c:68:
15:77:a0:76:4f:a9:72:1a:99:43:d4:2d:20:01:87:
09:40:fe:c0:ea:9e:d1:e3:e1:ec:7f:47:77:e8:96:
a3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8C:FF:37:47:22:6A:AF:61:90:71:A0:D9:F4:B5:CD:AE:A3:3D:84
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e8:84:82:39:be:0e:5d:d5:ea:a0:aa:37:c5:e6:38:de:cd:
22:87:c5:21:a3:68:fe:5c:95:23:1d:0d:7a:4f:ff:fb:f5:2f:
36:fb:81:de:c7:36:62:70:4c:3f:24:7e:a0:fb:09:33:0f:96:
04:a6:93:7c:ca:c2:27:da:34:d6:78:f5:23:39:92:67:bf:61:
b5:8d:ef:69:12:1b:c4:32:d2:b0:92:2d:7b:fc:fb:1c:e9:74:
a8:cf:9c:71:c2:36:d9:25:c4:d5:50:22:c8:b9:68:07:5d:b9:
9d:b9:64:9e:39:38:77:26:2d:48:af:71:7a:63:a0:d9:59:c7:
3e:7d:79:12:76:7e:e6:cd:02:97:10:57:ca:5c:a2:28:68:72:
61:29:df:53:8c:1e:0f:75:f3:c9:76:54:18:ed:6d:90:f3:6d:
9f:96:87:fe:b3:46:bc:f7:19:74:da:89:e9:75:a0:f4:5d:24:
c8:39:0c:7d:a5:32:8d:6e:e6:ec:66:eb:0f:32:5e:25:96:3f:
b7:cd:a4:cd:50:a6:7e:d0:29:6e:98:81:2c:14:39:da:3f:c2:
24:00:ed:d8:8a:55:aa:ba:d3:e4:03:28:7c:43:e8:5e:97:d9:
85:37:e8:3f:76:72:0a:f6:91:34:e4:b1:ec:09:3d:22:a2:f4:
13:98:92:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:45 2026 by rpki-client