Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: PPkGjjfvYYr0jfjCDGONGnL51mHZI/KJUa5M+Uy4hXI=
Subject key identifier: F4:4E:93:B2:0E:82:B4:FE:2D:E3:AE:C0:6A:E9:59:1A:03:14:E2:BA
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 019FA9E2E20CCA5681EB7975303160D7BE2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 1970
Signing time: Tue 28 Jul 2026 18:00:46 +0000
Manifest this update: Tue 28 Jul 2026 18:00:46 +0000
Manifest next update: Wed 29 Jul 2026 18:00:46 +0000
Files and hashes: 1: mTuVuiw3HM2pBIheqITWSq5I3n0.roa (hash: Ipl/v3cZkycb4zTv5tbg7JdjHKPt6S5to0wny64/QVQ=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: z0SjcifVI3+XegNR6lHUDyXZ0GoMFwmjlGUaagni86M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:e2:0c:ca:56:81:eb:79:75:30:31:60:d7:be:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Jul 28 18:00:46 2026 GMT
Not After : Jul 29 18:00:46 2026 GMT
Subject: CN=f44e93b20e82b4fe2de3aec06ae9591a0314e2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:99:a5:e6:ad:b7:e9:bf:62:8b:61:b8:3b:67:
54:b7:6b:73:73:7a:6c:63:5d:40:c6:2b:b7:52:79:
71:39:6a:3d:7d:0e:c0:c5:a8:ed:55:1b:0f:29:18:
24:d5:08:9d:0e:6a:d4:79:df:88:45:f0:3d:12:bd:
03:2c:e5:ea:71:e9:81:1e:40:fb:40:f8:83:9d:aa:
f4:7e:88:3f:b3:52:1f:63:9c:e1:62:bb:39:db:b8:
99:c8:91:5b:b8:ab:34:32:e2:33:42:b1:a6:be:65:
9f:2e:eb:95:ca:9d:98:e2:03:2d:24:6b:89:33:e7:
bf:b2:86:07:eb:b2:d7:22:24:16:2d:c9:72:37:24:
f5:dc:de:43:59:39:ea:f5:d8:c2:a3:61:62:c3:af:
04:3b:3b:63:ca:97:a6:d1:c2:ef:38:22:92:0a:93:
68:84:8c:33:45:5c:f4:fa:9b:95:e7:c2:2d:3d:eb:
06:1d:95:90:26:57:02:b7:46:74:a8:00:ed:09:91:
f6:09:87:3d:65:b8:6b:d0:33:68:05:02:31:f5:2b:
01:c3:2f:5b:b0:06:c2:b8:e8:2e:b0:57:bc:77:d3:
b5:31:2b:44:c4:25:b4:00:de:58:19:f8:eb:46:06:
f3:8c:6d:22:11:8c:29:93:90:79:7f:21:b0:d7:2f:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4E:93:B2:0E:82:B4:FE:2D:E3:AE:C0:6A:E9:59:1A:03:14:E2:BA
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9d:56:d4:54:94:7c:94:9e:d6:a5:0c:28:58:d3:80:04:41:
7c:1b:8d:eb:ac:ef:ed:2b:2e:2f:1a:4f:c1:84:49:63:3c:3a:
c1:30:69:3c:60:8d:60:0f:a7:b2:2a:2e:63:20:e2:8d:0d:a9:
6e:31:51:ac:a4:44:dc:0c:79:de:50:9d:9a:0f:27:a2:d5:c2:
ce:48:56:43:4b:59:b6:8e:fd:9c:ea:31:97:34:a1:be:ff:60:
c4:cf:de:5e:b5:2b:15:2a:3c:00:b3:66:81:18:85:48:94:c5:
e6:25:5a:c4:49:62:32:2e:c6:b5:72:bf:d8:ba:e7:48:2b:b3:
2a:39:3a:da:5e:c0:bc:8a:6b:31:80:53:25:3a:3c:57:d9:86:
5e:2f:de:eb:cc:ed:88:be:24:d5:d7:ee:bd:c1:96:09:5a:ad:
cf:f6:83:8a:a0:5e:9b:a0:d5:8e:88:ac:32:62:92:73:10:ee:
2e:b9:dc:bb:aa:db:e8:66:e2:7e:4b:85:5d:61:ca:c8:e8:af:
8d:68:a8:40:43:11:e7:bf:7a:94:12:85:d4:fe:80:35:5f:b5:
f7:52:5e:56:13:d5:ba:d9:6f:1e:f1:24:9e:fe:9d:7f:3e:51:
90:f4:d6:d5:e2:5f:a7:d7:08:8a:b6:70:b2:a6:d4:72:bf:07:
a7:03:48:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:14:42 2026 by rpki-client