Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
File: xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json)
Hash identifier: hRtnuwe2dIHik5KT1bx2aKAjcS/DNCiCwgC7AcL9OJs=
Subject key identifier: 0A:5C:46:D5:56:83:4C:D7:E9:28:46:09:C3:A3:E5:9A:BF:F4:98:C5
Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
Certificate issuer: /CN=c7208a8b85bcb807cad64138543263acb204448b
Certificate serial: 019E1DFE3414B0E92A80DBB417742E266528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
Manifest number: 08F3
Signing time: Tue 12 May 2026 21:00:59 +0000
Manifest this update: Tue 12 May 2026 21:00:59 +0000
Manifest next update: Wed 13 May 2026 21:00:59 +0000
Files and hashes: 1: RgWi-aprHOGj2N0T2_M-Cs4Yuhc.roa (hash: FwSEX5ZWPDMp7ATa85IYHEA7kyGOC21zknxdskogO04=)
2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: ebPeEmf8ku11WFGxaPHBSbB5eZ2Xpqc2ioaQSjWpWfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:34:14:b0:e9:2a:80:db:b4:17:74:2e:26:65:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b
Validity
Not Before: May 12 21:00:59 2026 GMT
Not After : May 13 21:00:59 2026 GMT
Subject: CN=0a5c46d556834cd7e9284609c3a3e59abff498c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:52:8f:1d:a6:fb:b5:27:c9:b9:3a:f9:85:c7:
68:00:0e:bd:a2:33:ec:0c:3a:c1:ad:ba:59:86:d8:
e6:55:7b:5f:58:14:e5:6e:6c:a1:e5:17:67:3a:27:
61:bd:66:ac:cd:c2:ae:fe:4f:55:e8:6c:2e:97:89:
c1:8b:9e:bc:ac:bb:ef:32:5f:7e:7c:4b:23:86:bc:
32:a0:36:f5:c4:66:d1:23:16:73:e0:bc:cc:9f:47:
42:d1:ed:49:0f:8f:2e:cb:07:c8:14:16:23:52:de:
57:a2:94:ff:2e:47:ab:b0:86:ca:c1:34:b0:a9:e4:
74:7f:9f:ae:15:97:cf:95:3e:d6:61:66:be:28:8a:
86:d3:d2:44:1d:da:08:88:d3:e7:87:52:41:01:da:
37:ec:1c:cd:a1:2e:e0:51:87:20:75:e6:ac:80:85:
5f:1b:fb:16:3b:7b:fb:c4:7e:3b:dd:d0:59:35:33:
5e:4e:b2:b9:09:55:ed:1c:b7:48:9f:26:8a:6b:c5:
9b:c8:0a:29:78:49:c1:c3:65:d8:0e:c2:f4:a4:09:
11:7b:be:d3:df:7f:3a:fe:79:9f:3e:08:4c:bf:35:
c6:be:1d:ae:1e:c4:d5:87:8f:5d:ef:f8:3e:4b:2c:
2a:1c:70:5f:df:ab:e1:8e:73:8a:d0:fa:4e:cd:ef:
19:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5C:46:D5:56:83:4C:D7:E9:28:46:09:C3:A3:E5:9A:BF:F4:98:C5
X509v3 Authority Key Identifier:
keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:57:62:b6:8c:2c:9c:a9:57:fe:5c:f8:e3:36:d1:6d:c2:88:
0a:0f:87:a3:89:bb:9e:b0:bd:97:a4:f8:f3:3e:32:b7:5f:7e:
eb:6d:52:bf:77:b2:56:41:9b:4f:69:bd:45:95:69:7b:14:cd:
6e:14:92:18:21:4e:12:c5:c1:21:dd:05:66:57:d6:be:4f:dd:
fa:6f:87:b5:4a:55:0f:10:ce:07:32:2e:9c:16:29:6f:c4:d3:
17:e0:c0:d1:bc:06:76:d9:aa:e9:76:bd:3a:de:ec:5e:11:02:
c0:16:9f:08:db:f2:39:ce:3f:1b:2a:64:80:71:ad:54:a9:74:
6f:03:08:e0:14:d7:ae:e4:64:e8:59:a4:45:49:29:c0:3d:da:
08:36:85:f2:ed:44:64:7f:d2:76:5e:0d:89:ac:9e:ec:ea:bc:
dd:02:25:3d:91:bb:51:6a:fb:6d:c5:02:3f:8e:c3:10:d6:3e:
f3:9f:95:55:f0:0a:c9:1b:a7:7e:de:02:58:bb:17:65:0b:a4:
d4:e3:65:5a:84:4a:c0:b6:ba:0c:bd:33:20:3a:b4:66:0c:36:
e3:46:3f:f9:d7:e5:42:d4:69:60:77:88:71:8e:40:80:6d:9c:
d0:0c:ca:95:96:cf:c3:f9:04:ff:d6:6f:ec:f0:5e:9d:c9:46:
3f:87:eb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:48 2026 by rpki-client