Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
File: xx85HWDhoTnMxCsXoyqVNj31z7A.mft (raw, json)
Hash identifier: 6h4jHzF7KQZckCTOuIq7QGLHw/BAmIotK0jQjKeaInI=
Subject key identifier: 91:CA:14:DD:F3:39:FB:90:4E:C8:FD:26:61:0E:3E:4D:A6:D5:2F:32
Authority key identifier: C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
Certificate issuer: /CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Certificate serial: 019E1FB55ED942650953BDFCBDD26EFA7875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
Manifest number: 0225
Signing time: Wed 13 May 2026 05:00:40 +0000
Manifest this update: Wed 13 May 2026 05:00:40 +0000
Manifest next update: Thu 14 May 2026 05:00:40 +0000
Files and hashes: 1: 5Ac1xGg2xzacy1Elgpwm7Fl9gOY.roa (hash: VWmcJPkpnJaJdz3GW3aT+bj0R6mJFxMSWGrX3LD0Zyk=)
2: xx85HWDhoTnMxCsXoyqVNj31z7A.crl (hash: IQ307PYbStqwl5/iCTZcaMiDqs7ex9XuvKlIC1NPXIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:5e:d9:42:65:09:53:bd:fc:bd:d2:6e:fa:78:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Validity
Not Before: May 13 05:00:40 2026 GMT
Not After : May 14 05:00:40 2026 GMT
Subject: CN=91ca14ddf339fb904ec8fd26610e3e4da6d52f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:4e:a9:ba:0f:33:b1:46:0d:00:f0:60:bd:
d4:8d:ae:1e:d8:88:e4:06:ea:4b:b9:3b:c5:ee:f3:
a0:9a:46:0d:71:96:60:5d:10:e7:93:d2:8a:ab:f7:
bf:e1:e1:e8:89:d4:17:2c:4b:3d:12:73:ed:d8:06:
b3:a8:ce:e2:eb:99:b1:1c:4c:5b:39:af:b0:e3:46:
36:2e:19:46:62:3c:b6:89:e9:25:62:55:f2:18:14:
db:2a:a4:fc:2c:56:f6:1b:e4:ce:45:64:9a:72:77:
7b:20:9d:8d:56:90:8f:91:72:88:ac:d9:8d:30:b0:
27:7d:48:e1:03:7e:8c:67:55:b3:95:ca:56:c1:cc:
db:53:d8:13:25:c7:37:47:02:26:8b:1a:68:a1:c6:
97:6d:ef:87:31:db:f6:a5:08:32:7d:c7:a5:d4:f4:
5b:77:ee:17:b8:bf:eb:b5:8f:33:19:b3:7b:7b:bb:
8f:6a:0f:47:0d:cb:11:89:22:7c:57:5d:1f:6b:20:
29:97:7d:5b:6c:50:f3:ec:aa:33:9f:b2:53:c1:79:
ac:29:fd:7f:49:a2:0b:4a:7a:6e:1b:38:19:04:c2:
be:cc:66:56:d9:9c:ce:39:67:f7:b9:ee:f0:71:d4:
5e:1b:7d:7d:b3:1c:d2:a9:f1:c0:02:35:d0:0c:af:
a4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CA:14:DD:F3:39:FB:90:4E:C8:FD:26:61:0E:3E:4D:A6:D5:2F:32
X509v3 Authority Key Identifier:
keyid:C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:07:e1:74:a1:5b:0d:4c:41:0e:9e:68:eb:65:9d:90:ba:21:
43:1e:bd:35:b1:dd:9d:18:23:bb:cd:40:3e:5b:9d:5d:03:ae:
b4:49:a7:11:75:05:23:2a:a7:4b:1b:fa:b5:0a:30:e1:d6:55:
68:4b:c1:0f:67:32:13:c2:37:d2:0d:b6:32:d9:22:ab:b0:93:
cf:7b:53:92:8b:90:84:43:21:2c:05:e6:48:fa:8a:b2:eb:14:
08:b1:ac:94:9e:8d:2f:d7:f5:1e:00:ef:ef:f4:e6:b9:cb:a1:
5f:0e:60:08:19:87:62:c5:85:37:f3:3e:4e:c8:9d:6b:e6:ea:
5b:38:51:6e:60:74:8d:3f:0e:16:19:e0:c8:b3:41:7f:57:aa:
16:ce:6c:5d:91:8d:0e:35:13:4b:bf:bb:bf:0d:e3:65:de:d4:
fd:a2:92:95:39:ab:b9:a7:8c:a6:6e:fc:6b:dd:7a:5b:b2:b7:
56:e5:32:82:f9:0f:1f:af:ef:37:eb:2d:28:34:05:07:2d:33:
f5:93:9d:fd:94:dc:07:f1:6c:fd:2d:f7:13:1d:90:93:cc:27:
71:b2:7f:0b:72:08:f5:84:a2:26:6a:c2:23:f3:24:66:e1:f1:
01:5d:e5:01:54:31:7f:7a:ac:4e:d1:cc:13:dc:4c:3e:0c:ba:
8b:75:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:11:46 2026 by rpki-client