Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
File: xb-nGlET_tgkZHdsFDcVFMkhjvU.mft (raw, json)
Hash identifier: EAe1nHlF5zKLJwpWWrZZJj7IVyLYedj9ovmIFDHhV54=
Subject key identifier: 06:9A:0C:2E:E8:11:12:AA:5C:B1:88:C1:71:63:A3:28:06:54:EC:68
Authority key identifier: C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
Certificate issuer: /CN=c5bfa71a5113fed82464776c14371514c9218ef5
Certificate serial: 019FAB2C59137B06AFCDB511BC7B3BC8B18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
Manifest number: 0E0C
Signing time: Wed 29 Jul 2026 00:00:38 +0000
Manifest this update: Wed 29 Jul 2026 00:00:38 +0000
Manifest next update: Thu 30 Jul 2026 00:00:38 +0000
Files and hashes: 1: jBvSHulkiAFNZq-1Sz_1NBwC4gw.roa (hash: kIr3tsaXSv0n1HwqnJcooiylPmXgSiBfGD9CqML14GU=)
2: xb-nGlET_tgkZHdsFDcVFMkhjvU.crl (hash: cHfrGAo6Y+cEMyaRcz4v/7vIkYWysib4KwYu5Q9I6Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:59:13:7b:06:af:cd:b5:11:bc:7b:3b:c8:b1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bfa71a5113fed82464776c14371514c9218ef5
Validity
Not Before: Jul 29 00:00:38 2026 GMT
Not After : Jul 30 00:00:38 2026 GMT
Subject: CN=069a0c2ee81112aa5cb188c17163a3280654ec68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:99:b6:86:4c:d0:a9:da:ca:39:48:0f:7a:
cc:cd:ab:af:4f:d3:f8:d0:60:26:ca:da:7d:5d:4f:
ed:77:78:aa:bf:be:bc:49:5c:fe:12:64:d5:67:7e:
72:10:2b:12:b4:3a:27:96:d0:34:14:42:97:7f:ce:
b1:94:04:b8:38:b5:ee:6c:2b:9a:84:33:7e:92:73:
1f:35:2c:bb:3d:dc:fa:8c:8d:4e:14:c0:1a:2c:8d:
3a:22:7d:5b:91:40:11:50:4e:55:c4:ce:8a:27:94:
82:10:e3:2d:da:de:a3:06:22:5e:8a:e9:8f:58:e3:
2e:a0:de:6c:2a:21:5f:46:ed:2b:8f:e7:26:77:22:
7e:15:09:5b:32:26:6d:0b:fa:57:7d:64:58:20:85:
92:cc:74:5b:a9:97:36:a0:f2:e7:5a:11:54:a0:fb:
eb:79:b5:62:ae:56:bb:f7:14:f3:2b:66:50:37:5b:
14:91:dc:19:d6:3b:d7:74:47:12:de:b9:40:c1:a8:
ad:97:6c:89:4b:be:c6:86:77:9b:d2:f8:d0:ee:be:
33:82:81:4b:9f:b3:1c:d3:5d:99:8e:41:db:9f:4e:
2d:53:86:a9:40:08:9a:6d:8d:25:28:46:85:88:a3:
9d:1d:e0:5f:6e:3a:fa:17:fe:ed:ad:19:07:14:c3:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9A:0C:2E:E8:11:12:AA:5C:B1:88:C1:71:63:A3:28:06:54:EC:68
X509v3 Authority Key Identifier:
keyid:C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:aa:e2:7b:30:e1:1a:ba:a6:34:b5:3f:c7:e4:c4:7a:37:56:
c9:62:32:ae:47:85:a0:f4:e4:c7:58:6f:b7:47:a8:be:06:65:
1a:28:6a:c2:ff:c6:74:fa:03:0f:b8:79:67:93:67:78:c4:61:
a7:2a:01:3b:9a:1a:01:c1:23:15:e6:79:82:a7:c1:4f:9f:d3:
92:97:0e:99:34:01:c8:cb:35:23:47:d3:b7:62:fb:f9:91:bb:
d4:ab:c7:f5:95:55:b2:13:2b:5f:7f:e8:7d:5e:28:a5:e2:3b:
e6:32:f3:09:f0:06:7e:43:d2:f8:26:43:f5:a8:fb:34:e4:8f:
79:26:de:85:46:a0:74:aa:48:71:c3:26:d1:84:df:86:f6:3d:
6a:e1:5e:d9:32:f0:63:36:d0:99:a6:b7:df:bd:ac:46:54:bf:
33:9e:da:f3:7c:65:53:44:79:41:70:69:81:31:7b:63:09:0b:
70:af:95:31:4c:d7:9b:ef:d6:4c:72:4e:b5:89:b5:ad:e3:e1:
f6:de:a2:91:09:1a:5c:e1:6e:63:d8:d3:d3:53:70:02:0f:40:
87:16:4e:df:b5:18:34:4b:0d:4e:7c:b9:99:17:51:aa:e6:ea:
69:e3:af:11:1c:1c:75:08:1d:52:08:29:ce:8c:a6:79:92:17:
59:fb:21:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:10 2026 by rpki-client