Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier: H+a37jU8s7PFZEjfVSD5du2tvKqhMk+Yu2mAxu7tHSo=
Subject key identifier: 4D:27:16:33:A3:6C:32:61:6B:9E:ED:19:C2:8C:29:B2:0F:3F:7A:07
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer: /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial: 01A1AA8353B19CC927333267D66AAA9F6F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number: 159C
Signing time: Thu 05 Nov 2026 07:01:35 +0000
Manifest this update: Thu 05 Nov 2026 07:01:35 +0000
Manifest next update: Fri 06 Nov 2026 07:01:35 +0000
Files and hashes: 1: 2GXp3bAaWM3wTgvjV8eCwVFexe4.asa (hash: hZQJ0WbwmhsDuDCzZWaSBDjdh67b2hIGAFsSqcCCZZ8=)
2: Q2eq3vQ27LdqIhXEwPYKtKFxrj8.roa (hash: w/CxsU35XsDW4qiiMK3VW7xr1QGFT3WBU9iNjApYbmk=)
3: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: EzVtJBSeLbGRZeQCvwsOMxgRosUW8fsTyrchUjAlLcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:83:53:b1:9c:c9:27:33:32:67:d6:6a:aa:9f:6f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Validity
Not Before: Nov 5 07:01:35 2026 GMT
Not After : Nov 6 07:01:35 2026 GMT
Subject: CN=4d271633a36c32616b9eed19c28c29b20f3f7a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:8b:c0:24:4a:6e:ed:58:e7:36:e1:e2:a2:
32:2b:61:82:98:15:1f:41:17:bf:36:85:b0:c9:8a:
09:f8:20:4c:a6:b2:fb:6a:ba:43:59:ba:67:0a:e4:
15:6f:25:81:c7:0a:46:4c:8e:11:2a:cf:9c:66:9b:
03:9a:13:0f:1c:03:6f:e7:c5:9e:a9:62:66:2e:58:
a1:18:c0:a3:be:a6:cf:75:63:10:ff:92:f5:90:7b:
6f:b3:8c:92:22:5f:4e:be:ae:90:13:8d:c8:58:13:
b8:aa:fa:69:8d:e7:d0:51:64:f4:3e:f5:d2:5b:03:
bb:6e:b9:d1:29:4e:b0:fb:a3:38:6d:83:b3:23:e9:
18:ce:a2:67:aa:bb:df:77:ca:7a:50:85:db:5e:11:
35:89:32:a1:78:43:ea:f8:cc:2e:c4:a6:60:49:ee:
b7:74:57:40:93:fc:1c:7f:87:f4:b7:81:ad:62:6e:
f9:2c:d8:b6:2a:6e:ac:4c:5c:69:b3:51:5e:e5:8f:
a7:79:82:fa:8e:c8:55:46:32:7b:4a:e9:44:ca:d1:
85:c6:70:e6:74:40:41:b2:83:b2:b6:5e:56:ca:f0:
77:9e:ce:85:b8:80:b8:1d:45:d2:da:82:f8:84:2e:
ec:77:73:d6:56:cc:5c:03:dc:27:15:3b:2e:ae:5e:
1d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:27:16:33:A3:6C:32:61:6B:9E:ED:19:C2:8C:29:B2:0F:3F:7A:07
X509v3 Authority Key Identifier:
keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:90:76:48:87:62:32:f9:d9:4d:9c:12:1e:ab:39:d8:cf:a5:
ea:45:ba:6d:1b:6c:f6:45:f5:cd:80:77:ab:8e:5a:67:cf:05:
da:5e:e7:92:fd:16:7e:8a:79:96:97:e0:b9:1b:33:a1:15:dc:
1b:82:9b:4f:28:09:21:cd:58:4a:57:61:0f:27:35:30:03:06:
47:14:11:e8:51:09:65:c1:1b:4c:97:db:46:05:a9:88:66:86:
72:de:c2:95:ba:42:31:c0:46:72:e7:14:1e:2c:b3:5c:49:92:
c4:81:33:a6:15:83:12:d8:c1:14:cb:0f:11:76:76:a0:0f:fa:
99:53:f3:7a:89:b2:4d:a9:a4:6e:f1:64:d5:3e:8c:7f:05:d5:
e2:1e:2d:a6:a6:04:c4:f1:89:54:a1:0f:15:74:86:04:ca:bb:
54:3f:26:fe:05:9c:a9:34:b0:73:a2:21:40:07:dc:ff:8d:bd:
a7:55:f5:1c:5f:fa:44:ba:05:ca:e9:86:96:ab:2d:15:bb:2e:
4d:e8:ef:1e:58:c7:93:50:06:b9:c2:a8:1b:3a:c4:90:8e:ef:
2c:86:0e:39:74:69:5c:51:20:36:33:d6:0e:57:d0:07:89:74:
10:a4:56:bf:d0:1e:47:ba:10:15:1d:43:6b:19:15:67:20:10:
da:ac:00:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:26:35 2026 by rpki-client