Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: Ckit5UtP9RTrKS8z4/NnMyEViIkGDxL1vWAahBlxoA0=
Subject key identifier: AF:AB:60:24:60:80:DF:16:7C:55:3E:F7:CA:0C:4D:9B:2B:1F:49:46
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 019FABD13A66E8BC4CD7AA64A5D316EF0EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 0D03
Signing time: Wed 29 Jul 2026 03:00:43 +0000
Manifest this update: Wed 29 Jul 2026 03:00:43 +0000
Manifest next update: Thu 30 Jul 2026 03:00:43 +0000
Files and hashes: 1: Hi_yIbXB_AqEZvECw_6A2niKbbY.roa (hash: V9KwW6TEefSi+Nbg4IOw24z7gPz8KPWyVOeCLVyS3EY=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: mMt8FYjLvisKbh9di/UsaR5yTKviJ7L6InZNRH9slgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:3a:66:e8:bc:4c:d7:aa:64:a5:d3:16:ef:0e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Jul 29 03:00:43 2026 GMT
Not After : Jul 30 03:00:43 2026 GMT
Subject: CN=afab60246080df167c553ef7ca0c4d9b2b1f4946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1f:76:ef:20:46:8c:99:d7:8e:c3:8c:98:2a:
ee:f4:c0:a1:f9:1b:14:84:a7:47:ca:5b:ea:e7:79:
28:b3:79:55:ea:22:ab:7b:e9:d5:0f:ed:9c:61:63:
98:b5:68:13:29:34:4c:36:fd:41:76:c8:7f:68:02:
25:f0:bb:a6:f0:40:d8:95:b0:f6:35:23:fc:6a:d0:
a9:f7:a1:a6:95:f6:84:98:cf:72:d5:39:7b:8d:1a:
4e:5c:b3:cb:59:9f:51:f3:59:a9:f7:3b:de:1f:1f:
d6:f8:d3:93:29:b3:20:33:1f:93:03:0b:2f:c3:a2:
a4:f0:38:3d:ef:07:5f:4b:e6:80:9e:99:8f:8e:b6:
ba:6b:c5:0b:a9:41:a5:f2:63:b8:d8:e7:53:d0:59:
1c:46:d9:3f:ad:3c:1f:18:a7:21:45:bf:d6:e1:04:
bc:ef:e5:76:dc:8a:d1:73:8d:35:13:62:3f:b8:dc:
a3:6e:a7:d1:ce:39:91:fb:4b:64:a2:33:23:17:6a:
ac:44:6b:63:f8:32:75:6d:f5:e3:2a:44:ba:f1:20:
ad:c0:86:ea:9a:25:19:eb:a7:f2:90:9c:cd:61:f8:
c6:f1:a5:f7:72:de:57:3a:29:7f:32:68:ee:56:f6:
57:bb:30:30:9a:72:8b:ab:63:db:95:1b:e4:b9:7e:
db:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AB:60:24:60:80:DF:16:7C:55:3E:F7:CA:0C:4D:9B:2B:1F:49:46
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e5:c2:c7:55:09:bd:ae:4c:95:d7:4b:bf:e5:35:2b:94:ae:
1b:ad:95:88:79:e2:0d:c3:ef:6b:c8:73:d8:48:e1:f2:d6:ee:
e7:4d:23:67:18:e7:b9:4c:0a:0c:79:f2:f4:df:bb:16:e0:91:
29:50:c4:08:a8:da:50:4f:2c:4b:ae:0b:8b:2e:08:76:16:bb:
19:29:e7:bf:29:bf:f4:13:0f:ea:a6:e2:32:e6:18:5d:fe:e4:
40:42:bb:d2:9e:37:54:e2:12:68:34:ff:53:e4:40:f6:1e:0e:
53:55:1e:2c:c2:15:8b:82:e0:7d:4b:c8:b2:79:be:0d:ff:4c:
37:f6:e6:47:71:08:14:6e:ab:64:19:a7:00:34:63:c3:6b:63:
79:2e:c3:72:7d:df:82:94:98:82:16:82:d2:dd:51:1a:69:bc:
c4:d2:e1:32:eb:2e:3d:9b:3b:6d:04:d5:ea:29:6b:e1:18:d8:
60:5a:75:f5:53:e1:8a:96:e7:ca:71:70:87:b4:bb:e9:9e:1a:
2f:bb:95:46:ae:3c:17:fb:69:88:97:77:a2:1e:38:06:8f:74:
a4:bf:75:b9:6a:6d:17:c0:a7:cc:b9:b5:0b:c0:bf:98:f8:ad:
b0:8f:68:ee:8e:5b:c7:44:4b:3b:3b:1d:ab:20:80:01:2c:e2:
eb:48:76:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:24:08 2026 by rpki-client