Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: ptBKkAbrdTt/DnyczCCMS7kGWORnNJgMXK8dvjpOgOg=
Subject key identifier: A8:79:45:F2:E4:95:B2:5F:20:68:63:39:31:33:53:39:50:05:FA:E8
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 019FA9E2D647138CC576588FA512CBF3A1AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 07CE
Signing time: Tue 28 Jul 2026 18:00:43 +0000
Manifest this update: Tue 28 Jul 2026 18:00:43 +0000
Manifest next update: Wed 29 Jul 2026 18:00:43 +0000
Files and hashes: 1: gW00o8n4Rs81BAgnMAtJNPDGHdU.roa (hash: SSNtGXPA/36/YiPMJlKvxQTbaar7XDaEXBXVj0gHR90=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: oWko5+R7vAxM48gtHT58ToJxZ0pC1imJRuBXa0/yIVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:d6:47:13:8c:c5:76:58:8f:a5:12:cb:f3:a1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Jul 28 18:00:43 2026 GMT
Not After : Jul 29 18:00:43 2026 GMT
Subject: CN=a87945f2e495b25f20686339313353395005fae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:e6:ba:31:b5:95:b1:14:b9:26:7c:22:ea:
48:75:fe:50:48:ca:7a:2b:9e:50:ef:48:80:69:d7:
c6:02:52:55:15:2d:03:c4:3c:33:89:5c:a4:c4:31:
2c:e1:76:a5:5f:80:6f:d2:d7:cc:d2:37:2e:92:ad:
ff:46:8d:2a:0e:d8:7f:a8:05:d8:b2:c1:81:d4:34:
d8:b6:a6:0f:6a:b3:ed:75:22:ce:7d:4a:e3:49:4e:
9f:8d:44:34:28:da:f9:74:95:18:aa:35:a1:cb:9a:
31:3a:34:d7:d3:e1:49:70:39:82:11:ed:d6:bb:d7:
2a:6e:61:41:c7:29:12:6b:67:6c:c4:e6:b9:21:5c:
c5:cb:86:d3:09:f1:a3:0d:f5:8d:8a:3b:fb:ca:0d:
fd:91:e4:a3:33:31:ca:da:f0:c8:c6:26:e5:25:be:
59:47:9b:ae:f3:b1:af:dd:cd:cc:b0:38:04:ca:50:
07:35:31:38:b2:cc:45:6e:aa:bb:d2:f4:c3:75:68:
e1:39:68:bb:25:b6:94:3d:aa:c6:d4:c3:37:11:03:
7d:49:12:b5:f6:a2:c4:7b:c8:d2:a3:73:82:89:be:
e3:41:ae:a3:4e:e0:79:a2:f5:de:2f:4a:43:64:26:
de:8d:00:b7:25:6a:17:aa:6b:2c:4c:48:4c:d4:79:
e1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:79:45:F2:E4:95:B2:5F:20:68:63:39:31:33:53:39:50:05:FA:E8
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:44:56:4d:06:84:84:0c:56:6f:6c:09:fd:07:a3:bf:be:e9:
80:50:04:1e:5c:55:39:0b:b7:6c:c3:bb:e2:79:38:ad:f2:ba:
70:4f:78:3c:77:02:7e:72:a6:1d:10:71:ff:f2:53:b5:32:11:
f7:21:a9:e3:df:1d:fd:35:19:79:79:05:52:f6:a4:78:c6:bc:
04:e6:e1:07:50:1a:bc:85:a8:e9:6b:4a:3b:dc:84:bd:e1:ef:
5a:4e:c6:1f:4b:9f:bd:fd:d7:b5:d3:a8:7e:f6:de:c5:70:88:
4e:01:4e:da:14:f8:46:0e:4e:fa:37:4b:e8:7b:70:42:be:df:
3f:89:b6:18:65:53:5e:24:aa:4a:64:14:d1:1a:54:e7:21:68:
a3:99:32:c7:4c:49:56:df:93:9c:f5:a1:f5:3e:80:cb:ab:c5:
08:0d:d8:95:ae:c1:79:53:5c:3f:ae:01:40:4f:9f:fb:cc:da:
13:0a:2d:e7:40:01:9c:44:38:f6:2b:61:9b:cf:a9:38:f7:a0:
3f:f8:eb:3a:67:24:9d:bd:d1:27:ae:a6:47:f1:79:74:b4:cd:
5e:05:b9:04:15:21:0e:67:e5:7c:83:d9:0e:18:e0:82:cb:71:
88:bb:0a:ed:02:db:82:58:1e:33:99:c8:80:43:d7:75:27:6d:
3d:79:34:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:26:26 2026 by rpki-client