Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
File: xx85HWDhoTnMxCsXoyqVNj31z7A.mft (raw, json)
Hash identifier: +F1lC9uNxvfK5hD8s9H98Vs4LqZQPAdOvgGEFBRaceA=
Subject key identifier: 62:9A:72:67:DA:70:24:82:50:4F:7D:21:97:47:54:17:AF:2F:EB:D2
Authority key identifier: C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
Certificate issuer: /CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Certificate serial: 019F946DBD1A16D12C492E6AD8802775035E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
Manifest number: 02E6
Signing time: Fri 24 Jul 2026 14:00:47 +0000
Manifest this update: Fri 24 Jul 2026 14:00:47 +0000
Manifest next update: Sat 25 Jul 2026 14:00:47 +0000
Files and hashes: 1: 5Ac1xGg2xzacy1Elgpwm7Fl9gOY.roa (hash: VWmcJPkpnJaJdz3GW3aT+bj0R6mJFxMSWGrX3LD0Zyk=)
2: xx85HWDhoTnMxCsXoyqVNj31z7A.crl (hash: S8FdcvBcj6LcNWyb9OKPSqDt1VBkrm6P7fek/n4YqV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:bd:1a:16:d1:2c:49:2e:6a:d8:80:27:75:03:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Validity
Not Before: Jul 24 14:00:47 2026 GMT
Not After : Jul 25 14:00:47 2026 GMT
Subject: CN=629a7267da702482504f7d2197475417af2febd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1d:e6:17:b8:d6:60:38:22:7f:08:82:74:9b:
e6:e1:59:a9:e2:42:a4:ae:da:c8:bf:fe:a5:72:cd:
21:09:23:4e:16:1b:ba:50:2f:55:73:9a:33:0f:73:
d8:4a:a2:a0:fe:bd:a9:99:b5:f4:9a:80:18:e3:85:
6e:e7:4f:c1:6f:48:ae:dc:cf:cb:dc:e0:df:8a:ad:
72:5c:f8:67:30:71:f6:33:34:1d:7e:b1:87:6d:68:
02:89:73:57:51:3f:29:0e:9f:2a:24:4a:d4:1f:db:
b9:0d:b4:9d:89:28:d2:8b:48:76:0f:7d:ec:13:7c:
c7:6d:89:52:91:3b:c9:fd:1c:df:3a:a8:9d:18:f9:
d7:de:d3:f6:95:1e:f5:52:2a:54:25:11:cd:e9:18:
90:e7:e8:93:02:b2:9e:c0:e7:66:05:9b:ff:a2:a2:
52:b9:25:59:b1:61:72:eb:69:fc:c9:a3:33:9e:b5:
04:53:1b:7b:da:46:5a:39:47:5c:64:30:a0:02:9f:
7a:61:03:15:e0:a7:8d:d1:3e:39:ad:f9:c1:ee:af:
61:31:7b:f6:e3:19:5f:a6:9d:05:08:34:ed:8c:d4:
7a:f0:65:64:0c:0a:fe:a3:b0:58:11:8d:af:c5:dc:
fd:d0:9a:09:6d:d3:c0:77:3c:f6:1c:f8:5d:b5:3d:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9A:72:67:DA:70:24:82:50:4F:7D:21:97:47:54:17:AF:2F:EB:D2
X509v3 Authority Key Identifier:
keyid:C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cc:b8:80:96:c8:9f:8d:5f:1e:0f:dc:ca:f4:cd:04:b7:fa:
56:0b:6e:f4:5a:50:94:c5:78:d6:f6:bb:f8:69:d8:af:36:75:
eb:1b:09:ce:d0:84:ce:31:9e:c7:97:6a:b3:bd:5b:23:f6:c5:
d7:55:c8:51:5d:79:6e:03:76:0a:89:b1:dc:db:40:e2:1f:96:
13:39:c1:c2:2a:ec:48:17:39:c0:37:94:cb:ae:3c:a5:60:f3:
a1:38:33:22:4d:d6:4a:35:20:c2:8a:aa:03:65:ab:fc:ab:de:
8a:94:22:aa:a0:a8:3d:16:42:31:56:38:92:4e:c3:b3:0f:7f:
38:d6:93:30:47:07:b6:3e:3a:a9:8e:e8:e6:be:a9:88:dc:e9:
38:7c:53:66:8e:ca:d6:7a:d3:5e:84:b0:ce:cc:69:83:2b:a1:
2d:53:ed:c9:e9:39:04:fe:9c:95:72:13:93:76:43:8d:39:b2:
5d:72:07:1a:6e:f7:37:79:fb:5e:e8:77:fb:74:84:ef:9b:c3:
a8:8d:08:51:1d:58:36:d7:85:34:09:71:22:ab:57:f7:21:58:
7f:a5:d6:55:39:e4:b7:7d:53:24:01:6a:c1:25:b1:e8:dc:7f:
a1:0a:39:95:05:8e:ee:69:14:0b:80:b9:c3:f8:db:a6:08:3e:
91:03:94:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:05:58 2026 by rpki-client