Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
File: xM-i_E8u6evIO-eTZrCulNHyv8c.mft (raw, json)
Hash identifier: Y0Z2SNOmRGareCwzdlF3tCQCB4XyQ1q6gZIAWcUCBks=
Subject key identifier: 8F:D6:1C:E3:B8:F3:FE:55:E5:35:41:6E:74:04:E2:F6:99:DE:7D:5C
Authority key identifier: C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
Certificate issuer: /CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Certificate serial: 019F90FEF47F90599C8CEC7E226055BCC4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
Manifest number: 0A25
Signing time: Thu 23 Jul 2026 22:00:55 +0000
Manifest this update: Thu 23 Jul 2026 22:00:55 +0000
Manifest next update: Fri 24 Jul 2026 22:00:55 +0000
Files and hashes: 1: F30FN8U3Xj87k2Z9DAG1GB_A31Q.roa (hash: pnPZQBEXHi+ImRZ6WCYxFeNcDY9y0/l3lR4zkQuuaVQ=)
2: xM-i_E8u6evIO-eTZrCulNHyv8c.crl (hash: QuHCykR6El8gWKT23s4W8LdqdNwqKUMMH5akJL6H0xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:f4:7f:90:59:9c:8c:ec:7e:22:60:55:bc:c4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Validity
Not Before: Jul 23 22:00:55 2026 GMT
Not After : Jul 24 22:00:55 2026 GMT
Subject: CN=8fd61ce3b8f3fe55e535416e7404e2f699de7d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e8:a8:2a:0b:8f:0b:f1:44:58:e2:f1:db:22:
34:02:d3:97:f0:9c:f4:54:3d:bc:f4:c1:9f:81:4a:
0d:02:cc:25:e7:9c:93:bc:51:aa:7e:70:a3:44:2a:
ff:d4:bf:8c:3b:d5:b3:de:53:22:86:e5:65:8a:c3:
d3:6d:f6:c7:b0:61:7b:d6:55:ef:56:c1:3c:ee:e6:
4c:56:b9:76:0d:b2:02:c5:e7:5c:49:da:3a:99:66:
02:bd:85:44:79:eb:29:df:30:63:14:83:a2:59:76:
45:c4:18:2a:ea:65:99:12:a6:22:34:0f:78:9f:9d:
36:d0:bf:fc:bb:ee:45:6b:c7:78:e2:7e:17:b2:2e:
eb:b8:1e:6a:66:8f:87:71:e9:a9:25:7d:2d:cd:1a:
02:03:18:b2:b4:52:49:fc:02:56:de:69:0a:b0:05:
58:d1:2b:32:67:4f:cc:98:79:02:63:b8:23:3f:5a:
1d:a1:56:a2:1a:81:78:48:52:ff:e0:ed:11:25:40:
52:29:47:0c:74:9b:92:15:0b:e9:67:93:bd:55:e9:
4d:a2:ff:78:c7:d0:64:24:47:dc:03:50:42:d7:32:
93:fa:e4:e1:ff:bc:c3:c8:ae:b9:ea:1e:4f:78:c4:
2f:de:75:47:1d:9f:a8:8a:66:d2:16:a1:8c:49:93:
e9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D6:1C:E3:B8:F3:FE:55:E5:35:41:6E:74:04:E2:F6:99:DE:7D:5C
X509v3 Authority Key Identifier:
keyid:C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b0:9e:60:f1:cc:2c:e5:ab:4a:ef:39:25:c9:7b:b0:72:6c:
03:b7:58:fc:c1:2e:c5:04:07:97:bd:49:56:36:00:e8:e0:38:
4b:be:a9:34:c7:58:1a:45:74:04:a3:28:17:07:8c:c8:cf:27:
b3:fe:8b:12:e7:83:73:50:20:bb:ed:90:4b:f5:d6:4c:7d:64:
39:4c:af:a1:27:3b:26:ad:ad:7e:44:fa:ca:e1:4b:48:14:c7:
f9:66:11:28:8b:59:d4:df:5c:d2:74:06:81:c7:96:bc:3b:55:
bf:9f:d4:2d:67:78:26:2a:ec:0f:78:30:80:35:da:3f:b6:c6:
af:d9:80:db:ec:49:df:cc:bf:05:96:21:65:a4:9d:8a:a7:0a:
3b:f3:3f:b2:21:29:b1:71:54:08:91:52:f6:17:ec:c6:c7:3f:
32:4e:b7:27:b6:19:c8:66:40:01:54:80:f5:da:8a:cd:5b:84:
50:27:4d:9e:21:18:72:ba:5e:c8:78:6c:83:2b:c5:48:cf:03:
b0:de:75:a5:79:19:72:bc:59:55:6a:e4:c0:e1:38:2b:6d:52:
d3:d7:dc:1e:7d:97:a6:6f:57:98:3f:c9:a8:bc:62:50:a9:ad:
55:53:de:eb:a7:36:f2:c4:54:4a:c8:35:10:23:99:3d:57:22:
79:0e:68:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:03 2026 by rpki-client