Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
File: xU3YgoUsxFhrH-40wFAdXbfWDws.mft (raw, json)
Hash identifier: Aa8tOC+UeLdkiLtdjRQE1Rjkp0bABv5mk5tn7iMJtfg=
Subject key identifier: 9A:43:7A:15:EA:AF:9E:A3:C9:D1:B7:85:B0:9A:21:6B:28:DA:94:25
Authority key identifier: C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
Certificate issuer: /CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
Certificate serial: 019F9211C0864D5DAEB730E6F2EE46B39475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
Manifest number: 0B8B
Signing time: Fri 24 Jul 2026 03:01:04 +0000
Manifest this update: Fri 24 Jul 2026 03:01:04 +0000
Manifest next update: Sat 25 Jul 2026 03:01:04 +0000
Files and hashes: 1: 73qIjcwhVoNUSh6y8S9vmR-78LI.roa (hash: W2dcEwkCBgOixH5r0yINyyX7ud/0OMWWSsCwZ1EhRwo=)
2: xU3YgoUsxFhrH-40wFAdXbfWDws.crl (hash: J0R1pyJOhSAkSns0wvSQ1o/iFKjs2+tBgfOT0ledzA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:c0:86:4d:5d:ae:b7:30:e6:f2:ee:46:b3:94:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
Validity
Not Before: Jul 24 03:01:04 2026 GMT
Not After : Jul 25 03:01:04 2026 GMT
Subject: CN=9a437a15eaaf9ea3c9d1b785b09a216b28da9425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:7b:63:5f:4c:4d:67:a4:3a:a1:fb:0c:eb:
3e:16:0d:46:19:41:3f:cf:97:f5:a1:ff:b5:44:de:
5d:81:66:b0:db:05:dd:42:f2:4d:a3:c5:b3:a8:d8:
22:32:8c:17:2d:e7:99:8a:f6:76:82:d0:f5:24:71:
7b:47:b6:4c:ef:01:3a:5a:0e:66:87:7f:20:84:2a:
0d:10:0c:9d:67:6e:04:f0:69:9a:4d:46:19:3d:ad:
3f:be:18:2e:14:1d:e2:da:d7:33:76:d2:ef:98:cf:
3e:25:27:a1:74:f8:15:ce:02:e8:90:39:37:bf:d0:
6f:57:ec:fd:9e:d9:81:84:23:a3:44:ab:2e:3f:24:
a5:97:6e:ce:22:2f:ce:27:6a:69:97:97:f6:a8:3f:
05:a3:5b:6a:32:98:4c:38:1a:fa:36:e5:ee:1b:e4:
bf:e0:eb:86:19:d0:56:47:fe:64:2d:35:c6:2b:ae:
57:e6:9e:53:8a:7b:f8:6a:fe:f5:f3:bc:32:a1:f1:
a6:13:dd:a8:af:d7:1b:f2:01:48:ef:eb:e3:df:0f:
f7:60:08:65:02:f5:de:56:d1:1d:72:7b:c1:94:bb:
3e:a7:66:e5:57:e2:28:76:e9:bf:77:9d:b8:80:3c:
a5:a1:91:f2:13:c9:56:18:82:16:d5:7e:c0:66:ad:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:43:7A:15:EA:AF:9E:A3:C9:D1:B7:85:B0:9A:21:6B:28:DA:94:25
X509v3 Authority Key Identifier:
keyid:C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e1:61:a0:04:6c:43:f0:ba:2e:c6:fd:81:cb:02:6d:05:3b:
3e:b4:93:96:91:83:5d:75:4a:0c:77:0f:74:d9:c8:7b:0f:f9:
d9:41:44:25:ca:60:14:31:94:f5:41:50:89:df:af:7c:88:13:
85:3e:6c:51:29:2e:0e:16:7a:79:5c:d9:d3:32:1a:f7:4c:d3:
df:e2:b5:b8:e3:74:19:b0:52:94:33:49:75:52:2e:fc:37:d9:
8d:77:19:e0:1a:f7:b5:bf:f2:8c:07:f2:de:11:54:08:4f:98:
d0:54:22:f3:1e:2c:c9:31:9b:22:66:21:02:5f:b0:c9:29:6b:
e9:17:f1:0a:0b:2a:58:b5:71:9c:59:9c:67:0a:73:8d:fc:a4:
68:bb:bc:7e:d8:0b:af:c9:e2:6a:1a:19:8c:e8:ed:cd:18:6c:
52:d5:da:cf:6a:ff:1c:b8:4e:55:77:fc:5a:b1:01:f4:ac:62:
c0:9c:d5:36:bf:a1:a4:1f:07:76:29:c7:c0:ef:61:cf:6c:ae:
2d:e5:cc:a0:e7:75:3e:d3:2c:25:f7:23:dc:23:ca:2b:e9:d9:
6a:c6:ab:a4:86:f8:32:96:dd:68:f9:e1:c5:8f:49:54:71:ba:
ff:d6:e2:20:0d:ec:3b:1d:2c:10:5f:9c:ba:d3:82:f5:9c:f1:
90:1e:26:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:26 2026 by rpki-client