Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
File: xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json)
Hash identifier: 4DvxQotfJybsa6S/7Pkg/D3KWTAO8t0nlukmuCX8+SU=
Subject key identifier: 4B:4D:CC:04:ED:DE:26:3E:A6:06:32:A4:1D:34:51:6D:6D:06:D2:65
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial: 019F9211D2E34913193B4894F2828F593853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
Manifest number: 0A6A
Signing time: Fri 24 Jul 2026 03:01:09 +0000
Manifest this update: Fri 24 Jul 2026 03:01:09 +0000
Manifest next update: Sat 25 Jul 2026 03:01:09 +0000
Files and hashes: 1: 4kyWrT9Xy1B7TLtNDP6HuPz-7hw.roa (hash: sWHWI8IzaliyTyKxy/NPSWlKi/bMUwx2CvIPkFk/56s=)
2: A_J1Iis85mInuYBjqNWnaY64Er4.roa (hash: KG2bwrYCBOkD3k9N+nA/ujMikD/ZloBG8hBsS2kc7cc=)
3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: iI/6cu0unqLEcxY8+dSUTmX8V7szdZ4tBPJvKSF2vrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:d2:e3:49:13:19:3b:48:94:f2:82:8f:59:38:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
Validity
Not Before: Jul 24 03:01:09 2026 GMT
Not After : Jul 25 03:01:09 2026 GMT
Subject: CN=4b4dcc04edde263ea60632a41d34516d6d06d265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:ba:ec:6d:6f:77:87:ad:f1:bc:94:f5:b4:
08:ee:86:4d:08:a4:4d:ac:4d:e3:f5:ee:ae:3e:e7:
b6:30:2f:a0:b9:50:da:0f:49:23:d0:83:97:aa:3d:
5a:e7:9d:00:f7:5f:69:22:a8:e3:5e:ff:b5:89:08:
d6:ae:3d:e0:d9:1e:ea:1b:f4:71:c8:bf:e1:37:61:
1b:76:4a:e4:19:8a:20:68:93:1d:3d:fc:cc:00:cf:
14:f1:f6:40:c4:8d:f4:69:ce:61:13:fd:ee:84:cd:
cb:22:0d:4d:a8:e7:3a:f0:ab:14:e1:65:5a:55:66:
7b:c3:55:38:f3:02:2c:b7:da:9b:04:49:ee:9e:ae:
a0:2f:4a:c3:d4:c7:a7:76:99:98:bc:bb:11:87:3b:
3c:8e:7b:e7:7d:d1:1a:ee:6b:8c:a0:fe:dc:b4:ea:
d1:97:d2:49:18:d9:f1:3a:29:a8:97:6f:5f:64:ae:
9a:04:dc:05:5f:66:91:45:9e:0f:53:97:02:76:f1:
a3:27:4c:7e:cb:b0:fc:49:96:f9:6d:25:05:2c:fa:
5b:39:71:68:15:d4:bf:55:15:a9:58:10:e0:f0:89:
fc:17:a6:6a:90:24:1f:f8:2c:15:28:8b:0a:99:c5:
57:15:76:c4:a3:a4:ed:26:c3:b6:e9:c6:39:c1:76:
2b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4D:CC:04:ED:DE:26:3E:A6:06:32:A4:1D:34:51:6D:6D:06:D2:65
X509v3 Authority Key Identifier:
keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:72:5a:b0:d1:4b:ef:fe:d8:67:63:1f:ff:13:2a:a3:fa:7c:
a0:de:e4:32:59:7f:b6:5f:cc:b4:3f:81:da:43:f3:32:da:1f:
76:99:44:c1:75:8c:f1:5c:f7:c9:1e:6c:3a:ce:bf:59:90:af:
09:e5:1b:06:30:de:13:ba:0c:7c:e0:6e:a7:e2:a7:83:05:f4:
92:bb:0b:38:7f:93:c0:e4:95:65:c6:13:87:ad:b8:95:6d:20:
80:72:58:b0:9b:5e:2e:1a:b8:b7:d4:4b:c6:8d:a1:90:14:ff:
41:0c:31:f4:79:b2:bb:a6:f2:ca:ea:72:8e:d4:db:b2:57:e1:
34:aa:d7:28:3d:97:2e:8e:cb:6f:2f:e7:f9:0f:82:b8:53:00:
57:8e:87:29:ad:88:66:e1:88:52:af:41:e9:23:05:31:0a:ac:
42:24:36:04:15:97:99:bf:aa:5d:8a:cb:72:25:3a:64:c2:08:
a6:ae:53:fd:01:95:9c:c3:f2:ae:7a:d2:8a:c6:68:33:70:63:
71:d7:3b:9c:e9:6b:ec:9e:79:cc:6f:e0:34:bb:a1:c1:80:56:
6b:2b:97:c9:61:14:1f:fe:f9:91:07:38:93:b7:b4:93:ad:93:
cf:c3:65:e0:58:b4:e0:b7:d9:03:5a:fc:3a:4f:fb:eb:ea:65:
95:64:70:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:46 2026 by rpki-client