Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
File: x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft (raw, json)
Hash identifier: iPVAnRWI1cDf8C5KFp+cNQPrisTzkvxG1Oq0bl19EFM=
Subject key identifier: AA:F0:29:5D:17:32:45:7E:F8:0B:65:34:7F:94:9E:9E:EF:56:A1:02
Authority key identifier: C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A
Certificate issuer: /CN=c7cba981ce58a10edd2c99801e043ad804a85f9a
Certificate serial: 019E1F7F59824E376608B2BCE2E3BC57B0C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
Manifest number: 0190
Signing time: Wed 13 May 2026 04:01:40 +0000
Manifest this update: Wed 13 May 2026 04:01:40 +0000
Manifest next update: Thu 14 May 2026 04:01:40 +0000
Files and hashes: 1: w-oyu6Dt2pR1vO2yb74Z1MeDHhc.roa (hash: 3NZ9tfleTSDXUKf2CN0AIsezDYvSZLjibOtJobFnX+M=)
2: x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl (hash: brxtU4KCwCc4KCfQKni2NLcUnzk17kVytAucU57y7DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:59:82:4e:37:66:08:b2:bc:e2:e3:bc:57:b0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7cba981ce58a10edd2c99801e043ad804a85f9a
Validity
Not Before: May 13 04:01:40 2026 GMT
Not After : May 14 04:01:40 2026 GMT
Subject: CN=aaf0295d1732457ef80b65347f949e9eef56a102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d4:95:a3:9a:88:6f:1a:22:29:ff:1a:7e:a5:
b3:a9:94:a1:f2:d7:0d:c8:b7:1d:de:42:3c:b9:8f:
f9:a4:e0:71:0e:dd:49:39:67:ee:d1:64:32:0a:d4:
4c:86:2b:18:e2:15:13:0c:c6:97:76:08:68:78:96:
6b:52:ff:ea:15:d9:67:96:45:0a:37:4d:62:aa:e2:
d4:85:f3:a7:11:6a:8c:87:52:90:9f:e8:43:97:75:
d2:e6:13:bc:a4:23:de:d8:24:5c:11:08:d9:ed:e1:
5c:7c:7c:9f:4b:05:f5:12:50:15:0c:25:f8:6c:df:
db:23:e2:52:4a:7f:a7:3a:08:f8:37:16:94:4e:5c:
8f:d8:2c:20:85:ad:ff:e8:ce:1b:73:a2:d2:2a:b5:
07:e2:23:d1:ea:65:0a:df:63:9f:13:df:6b:37:21:
46:78:d7:21:d8:5e:8b:0d:af:5f:f5:18:b5:d4:62:
5d:b0:a6:c6:9f:f4:c2:4d:9e:35:07:59:6a:c0:87:
1d:2c:3f:0b:a1:45:f3:b0:da:40:7f:bc:cb:74:dd:
55:ad:cb:72:3d:ae:64:2d:65:9a:3c:a9:49:42:d4:
fb:6a:a1:bb:a1:d0:8b:46:a3:d1:31:5d:dc:8f:f9:
10:b5:c8:5a:c5:23:ca:0b:af:2e:30:53:b4:85:36:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F0:29:5D:17:32:45:7E:F8:0B:65:34:7F:94:9E:9E:EF:56:A1:02
X509v3 Authority Key Identifier:
keyid:C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:38:64:2a:08:ba:f2:ef:39:c9:9e:1c:2d:a5:d9:9e:32:2e:
f7:75:b6:29:2f:bd:95:27:15:c0:7d:8b:d5:58:d9:2e:66:cd:
72:a4:3b:f6:79:7e:3e:07:dc:95:08:7c:9d:13:53:9f:97:94:
6a:25:ff:58:4a:cd:65:b7:31:e5:d3:7b:9f:91:17:10:35:63:
d8:54:8c:6c:b4:37:af:90:b5:82:87:36:47:3f:ea:9a:3b:72:
02:91:21:11:c5:fd:2b:b0:3b:c3:17:16:dd:a5:01:11:b8:4d:
19:26:dd:2b:59:79:8e:54:cb:65:c9:5c:94:95:0d:7f:db:04:
82:1c:3d:21:6a:e3:e3:20:cd:ed:d8:e2:b2:b4:fb:07:3e:0e:
05:5d:8f:a0:73:15:58:26:2a:3e:95:b0:2d:90:71:4f:eb:9b:
e8:8c:8e:06:aa:9e:8a:ec:78:15:e9:e6:45:24:f5:bf:b8:6a:
e8:29:e2:72:03:fd:ec:d7:25:e7:23:ec:f2:4e:8d:98:91:ba:
95:98:6b:54:07:03:db:21:6c:80:08:70:96:d9:7d:81:fc:d1:
c7:68:87:4a:53:35:b1:05:d6:da:2e:ba:78:09:69:56:ad:a9:
46:76:dc:99:7b:bd:00:e5:4c:36:67:d7:52:21:5b:93:67:2f:
f2:43:ed:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:53:29 2026 by rpki-client