Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
File: xDt0aX74sFcJ99OU0f4pUeidXFU.mft (raw, json)
Hash identifier: FcZnDweMEcm0aHX1hAdJLWUjIp5cQ3UsC+3Bs9xXzQQ=
Subject key identifier: CF:E4:FF:51:53:67:EB:81:F5:FE:DA:1F:2D:B4:8B:09:2F:7A:04:52
Authority key identifier: C4:3B:74:69:7E:F8:B0:57:09:F7:D3:94:D1:FE:29:51:E8:9D:5C:55
Certificate issuer: /CN=c43b74697ef8b05709f7d394d1fe2951e89d5c55
Certificate serial: 019F8ED9B6062B826708810EE87664867B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
Manifest number: EF
Signing time: Thu 23 Jul 2026 12:01:00 +0000
Manifest this update: Thu 23 Jul 2026 12:01:00 +0000
Manifest next update: Fri 24 Jul 2026 12:01:00 +0000
Files and hashes: 1: cdK-ddxQ6uw5AVK3VADEiG5b7xU.roa (hash: kzD188j7ogf+ogrfaYMQ1BaJogJz8brxVXslH2Z+iS8=)
2: xDt0aX74sFcJ99OU0f4pUeidXFU.crl (hash: WufFd9OO36zD4bd/HYEyKftviLPPFNyspqKu7gm3VLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:b6:06:2b:82:67:08:81:0e:e8:76:64:86:7b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43b74697ef8b05709f7d394d1fe2951e89d5c55
Validity
Not Before: Jul 23 12:01:00 2026 GMT
Not After : Jul 24 12:01:00 2026 GMT
Subject: CN=cfe4ff515367eb81f5feda1f2db48b092f7a0452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:6a:65:0a:3a:f3:08:d4:05:d0:06:cb:ac:
31:9c:b2:00:b2:fc:50:f1:32:14:3c:5a:be:b3:0f:
53:71:c4:d6:36:0f:9a:a0:02:17:cb:65:af:8d:c9:
69:bd:3a:e4:81:e0:02:38:78:70:7f:56:b7:a7:71:
34:e0:47:ae:6a:74:e4:f4:55:ee:c9:f8:26:20:33:
ca:c7:dc:bc:48:52:56:26:98:ab:cd:f2:75:06:2d:
ea:0f:71:43:ba:3f:3e:1a:49:3e:4f:72:0d:96:9c:
0f:c8:0d:bc:e5:55:68:27:a8:0b:c8:bb:a6:f7:0e:
5b:4a:f3:cf:f6:fe:f4:e2:65:be:02:d2:03:ce:f6:
11:43:e0:b8:51:2f:34:09:a1:f9:9c:54:8d:1f:f2:
f9:d0:e3:f1:98:62:20:bf:2a:7a:3e:f8:df:9d:77:
19:b0:d6:68:4d:e1:8c:ae:e2:0a:ed:e1:da:e8:31:
2e:4e:9b:09:12:40:81:a2:eb:1b:3d:7b:d9:c9:64:
68:b5:86:bb:7e:3d:de:b9:98:88:98:f6:3c:11:a9:
4d:f2:3b:10:f0:64:a2:e9:71:e4:ca:24:45:d0:c1:
2f:b8:a9:c8:f8:90:10:d8:e4:9f:d6:ba:60:ab:67:
17:69:d1:46:72:07:b3:05:c1:0d:85:80:2f:d2:72:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E4:FF:51:53:67:EB:81:F5:FE:DA:1F:2D:B4:8B:09:2F:7A:04:52
X509v3 Authority Key Identifier:
keyid:C4:3B:74:69:7E:F8:B0:57:09:F7:D3:94:D1:FE:29:51:E8:9D:5C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:00:9d:08:ce:24:7b:d6:52:20:bd:87:a4:7e:09:9c:c0:21:
0c:54:dc:c4:fd:48:8f:6f:c1:e6:27:e7:1a:51:63:47:0d:34:
87:a9:18:35:34:47:c9:2c:1e:83:fe:68:ff:94:6d:71:60:9c:
32:fb:58:86:63:5f:bc:cb:f4:9d:a6:13:5d:0a:a0:3d:80:b6:
7d:90:85:0d:4f:f4:9a:09:17:25:6c:5e:4b:94:b6:5e:c1:c6:
74:51:62:af:ec:c0:16:16:25:c5:87:ce:9e:bb:7c:55:c9:02:
44:d3:52:b0:5a:80:f0:cc:1f:a7:45:17:12:eb:12:fc:1d:5e:
71:d8:07:b2:63:30:94:42:31:1d:91:48:6a:9e:66:9a:37:00:
2f:7e:95:80:8b:96:e2:56:d5:a9:ef:f2:48:f8:d0:45:40:7f:
14:3e:67:12:9a:5d:cd:9f:5c:53:a1:1e:6a:1d:2d:d5:ef:8e:
6d:09:83:e3:b6:a8:a1:c9:4d:2c:bc:6b:88:b6:31:d2:dd:e4:
2d:26:f1:2f:cf:1e:24:b3:93:3c:a6:e0:5f:f4:7a:8f:09:cd:
65:08:83:a3:f7:e2:55:39:81:ac:db:ea:1d:b7:26:9a:88:e2:
03:3f:0e:06:41:64:34:19:9f:1b:6c:0f:5c:08:50:94:82:7a:
20:e9:93:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:11 2026 by rpki-client