Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
File: _XjxP_qS8HTr5VfSotKa0Noz5dg.mft (raw, json)
Hash identifier: LQi7Yf3bcCC6moqD/AdsiY0B2Rgvc0BvP4M9RN2yqEQ=
Subject key identifier: F8:40:3B:19:E4:A7:B3:1B:73:2B:D0:F5:22:61:2E:FE:E8:CE:07:7E
Authority key identifier: FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
Certificate issuer: /CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Certificate serial: 019FAC07CE5F763BF1E779E8AA337D3B8FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
Manifest number: 0F2D
Signing time: Wed 29 Jul 2026 04:00:20 +0000
Manifest this update: Wed 29 Jul 2026 04:00:20 +0000
Manifest next update: Thu 30 Jul 2026 04:00:20 +0000
Files and hashes: 1: H7yvjO1PteMvFud2cVf980xvhOM.roa (hash: RhQsj0SDsU/JKqzjG9Bf/mkgnMQmL8vD/s9sreGOu30=)
2: _XjxP_qS8HTr5VfSotKa0Noz5dg.crl (hash: VT4UC/5aOb0V69gTiEm9D6WQO/DpsYmeCUycZYMyWrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:07:ce:5f:76:3b:f1:e7:79:e8:aa:33:7d:3b:8f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Validity
Not Before: Jul 29 04:00:20 2026 GMT
Not After : Jul 30 04:00:20 2026 GMT
Subject: CN=f8403b19e4a7b31b732bd0f522612efee8ce077e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2b:10:34:48:29:fa:03:ca:fa:0f:4b:5e:04:
cd:3f:ac:0c:cc:1b:d4:58:79:f6:aa:9c:74:57:6a:
5b:9d:30:60:65:34:51:a5:7e:26:97:27:51:8a:b2:
b1:b5:3e:33:f2:92:53:68:29:67:0d:b4:de:eb:d3:
ca:2a:6e:20:21:6c:48:f1:74:37:f4:9e:d2:96:f7:
3b:67:f1:bc:3f:12:b5:d1:ed:ea:bf:df:22:3b:ec:
d2:ab:65:23:2a:07:62:95:81:18:7f:4f:92:47:e4:
c3:bd:15:62:b9:19:44:7c:e2:13:a7:27:ac:0c:fd:
f3:e0:6c:57:c2:52:0a:38:c9:9b:9e:4a:b2:89:38:
6d:f1:46:83:14:4c:21:4d:48:11:2a:45:27:ac:9a:
9d:04:e2:d9:50:d1:69:23:33:cf:5f:6c:2a:ec:fa:
5a:67:bc:5a:5a:15:66:0f:91:2c:e8:2c:5c:df:ff:
07:02:9c:f5:e5:69:4d:c9:96:95:6f:d9:89:93:68:
81:62:d1:b3:6c:bf:0b:34:3e:9b:e6:23:2c:d3:bc:
93:4e:36:d9:82:4d:c0:5f:cd:68:2b:fc:b6:c5:c0:
f7:58:33:49:76:da:e6:fa:91:82:4f:e9:cb:ae:2c:
7c:6a:39:4f:ed:20:d4:86:af:a7:dd:b1:53:d5:b3:
90:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:40:3B:19:E4:A7:B3:1B:73:2B:D0:F5:22:61:2E:FE:E8:CE:07:7E
X509v3 Authority Key Identifier:
keyid:FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e2:ef:b5:38:1b:43:cf:98:ad:ae:92:30:6b:59:57:9c:35:
a3:b3:9b:91:25:59:e7:31:11:9c:e6:26:71:39:3d:58:e6:3d:
3f:ba:aa:b2:b8:a0:76:95:06:ab:57:9f:05:a8:4d:00:99:d9:
a2:89:d2:70:65:74:d0:22:d8:af:46:0a:51:73:46:de:a0:72:
b6:21:2a:55:bc:03:d6:db:e6:ca:39:9d:15:99:e5:6a:3b:ed:
88:e8:dd:b8:51:ae:70:f3:62:56:04:4e:3e:c7:2d:b0:23:9d:
41:1c:af:27:fa:b3:85:4b:d8:e2:e0:fd:fa:01:a3:7e:8b:09:
db:f8:cd:bd:62:3e:da:c7:02:f3:05:82:e6:be:fe:e0:81:7a:
e2:fc:ed:ce:ff:ba:ac:24:29:28:ed:d9:36:bf:17:35:3f:a1:
8f:fb:ea:12:34:f2:6b:0d:0b:41:f3:6a:b9:64:74:78:b5:81:
ab:bf:1c:0e:07:e7:a0:c8:42:d0:28:df:7d:fd:c9:b2:69:b6:
5b:9c:5c:4b:19:26:6f:d9:b5:43:c0:95:e1:3c:ad:5c:41:2c:
81:21:31:09:4d:aa:f9:12:f7:b1:3c:67:27:be:09:98:58:10:
96:79:c8:18:d2:92:90:a7:5d:27:15:5c:9f:d9:17:9f:45:b5:
44:f0:ba:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:38:06 2026 by rpki-client