Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier: B3ZqQ5ONLIaFxg+AjzVeLYyOle1q69sTi4a1S6kw+8Q=
Subject key identifier: 74:9A:38:9C:44:2E:DD:DA:6B:49:C3:E1:26:AA:F0:EB:9F:E6:32:30
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer: /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial: 01A0BCF913E2F961B389FB3E1DD525C0DF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number: 1521
Signing time: Sun 20 Sep 2026 04:00:35 +0000
Manifest this update: Sun 20 Sep 2026 04:00:35 +0000
Manifest next update: Mon 21 Sep 2026 04:00:35 +0000
Files and hashes: 1: 2GXp3bAaWM3wTgvjV8eCwVFexe4.asa (hash: hZQJ0WbwmhsDuDCzZWaSBDjdh67b2hIGAFsSqcCCZZ8=)
2: Q2eq3vQ27LdqIhXEwPYKtKFxrj8.roa (hash: w/CxsU35XsDW4qiiMK3VW7xr1QGFT3WBU9iNjApYbmk=)
3: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: 8KTNMnJpUGuZVosTQAhepbwTsgcCNQ1ufzMxijm/BHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:f9:13:e2:f9:61:b3:89:fb:3e:1d:d5:25:c0:df:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Validity
Not Before: Sep 20 04:00:35 2026 GMT
Not After : Sep 21 04:00:35 2026 GMT
Subject: CN=749a389c442eddda6b49c3e126aaf0eb9fe63230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:9a:22:ef:b4:ed:17:29:1a:3d:1c:ec:82:
0e:32:88:bf:89:b4:66:7b:83:5b:ef:d7:a0:b3:a7:
75:9f:a7:27:9e:b0:7b:39:d6:81:d7:69:7d:ac:ab:
90:b7:37:0c:0a:72:96:31:64:9b:25:5f:5b:db:f9:
d9:1d:ca:a9:c1:37:22:79:f9:ed:6d:e6:e2:9c:d7:
ed:39:65:b4:bc:c2:ce:ea:0c:61:fa:9e:cf:2d:3f:
a9:16:17:16:32:45:41:ec:e0:a9:2d:b2:65:2c:8b:
5c:df:62:a7:44:f7:ab:34:91:2a:2d:3f:03:d5:e9:
2a:e2:24:4a:08:7b:9b:cc:34:3e:b6:6e:25:f8:b2:
41:fe:8e:96:85:a0:18:3a:c8:0c:78:82:01:24:09:
8a:ea:95:af:ae:b1:1b:a7:ab:8e:f9:df:1d:50:86:
a7:12:10:2b:d6:3b:11:97:f9:0a:bc:ed:f6:4f:76:
b4:07:a9:1f:7a:0f:d4:ea:62:31:d3:e6:11:d7:a3:
80:fb:47:8b:e4:84:03:8b:eb:8f:d6:fe:f6:ad:b5:
5c:19:cc:58:ca:d2:e2:5f:2b:c1:26:ec:05:cd:01:
cc:32:35:fa:c7:ba:cd:64:e3:96:08:fd:79:c6:7e:
6a:fc:f9:c4:bf:17:96:d9:09:16:e5:a9:36:e2:d3:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9A:38:9C:44:2E:DD:DA:6B:49:C3:E1:26:AA:F0:EB:9F:E6:32:30
X509v3 Authority Key Identifier:
keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:16:b8:28:5c:86:ce:f3:84:8c:c6:49:9b:ca:bb:81:4b:00:
3c:54:f4:61:22:df:26:9a:f9:51:01:f9:d7:2b:fb:24:52:90:
d2:f9:30:4a:d7:49:a0:3b:be:65:d0:8e:ce:d1:51:49:12:e0:
bb:10:87:74:65:a9:77:77:40:ee:85:05:1d:c5:be:9b:0f:74:
17:84:b0:30:39:b8:b6:6c:68:de:d4:5b:81:84:5a:b4:41:08:
14:db:9e:f6:e1:92:e9:cb:41:ac:c5:83:e3:08:2d:6d:d5:02:
ed:09:a8:e4:3d:3f:59:3c:d2:57:3d:23:76:5b:d7:50:0a:b5:
7e:62:35:70:d7:65:bb:8b:27:b8:51:83:7f:78:15:ee:6a:25:
82:a2:57:b6:37:86:7d:ff:46:5b:47:a9:57:14:4f:e2:cf:55:
8b:81:3b:ed:c5:41:89:e9:2f:08:46:77:ea:27:50:d8:28:96:
07:b5:d9:78:4d:1c:97:65:bf:41:27:af:d8:d5:dc:29:8e:49:
82:aa:f8:2a:08:5e:10:ff:2d:77:ee:28:c3:a1:d2:ed:43:40:
28:9b:c8:24:1d:8f:7a:9d:3e:54:4b:87:dc:60:19:ff:e9:34:
a1:4c:f1:91:cd:6a:5f:09:23:8c:90:8e:6b:77:bf:87:f0:44:
c4:2d:2e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:42:24 2026 by rpki-client