Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json)
Hash identifier: rpVi6N9Y1b1D3v8T6x5FTYJO7LN3VXIsSXo9YF1qrXI=
Subject key identifier: 8F:19:83:C9:DA:70:42:1F:0C:A1:8F:FB:9E:C6:A1:E6:A2:1C:EE:39
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 019FABD18AC833AB713F06FFFBB423C5E5CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
Manifest number: 0A27
Signing time: Wed 29 Jul 2026 03:01:04 +0000
Manifest this update: Wed 29 Jul 2026 03:01:04 +0000
Manifest next update: Thu 30 Jul 2026 03:01:04 +0000
Files and hashes: 1: 5Qm3w6W4KV4G70UEua6vpofuK3w.roa (hash: 7gjCA6HtXiqMWysrEHmsQXBLEFr30GX2eXmg9EbiYCA=)
2: mI3qnrq6SLm_VsmkKACilXewKTo.roa (hash: Q4wc/dtQ8g68gQZvC3Ka6nudxiroE6HA9EnDTB3krUA=)
3: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: jQW1y6N/HXDDywoK28zkb/pddt2DvV4lGJkqbHEyUgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:8a:c8:33:ab:71:3f:06:ff:fb:b4:23:c5:e5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Jul 29 03:01:04 2026 GMT
Not After : Jul 30 03:01:04 2026 GMT
Subject: CN=8f1983c9da70421f0ca18ffb9ec6a1e6a21cee39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:16:44:d6:70:30:71:1c:ed:21:b7:a1:23:cd:
a0:f3:5f:16:34:ac:3e:b7:e1:77:5b:28:95:4d:60:
21:67:e7:b9:bd:21:f9:07:d3:15:73:42:71:a4:25:
59:b0:5a:18:bf:f9:4c:ca:80:20:1e:7c:bf:56:0e:
4f:a8:06:4b:a5:91:cf:ec:58:ca:37:9f:1f:44:f1:
8e:44:2a:dd:8a:85:58:e0:32:b0:36:39:37:62:b4:
f7:ea:37:ba:4a:49:6b:81:32:93:fb:68:eb:67:1c:
22:3e:0f:20:5e:20:9c:0c:a0:26:89:3d:95:ba:6d:
ef:b3:33:ef:44:1a:2d:de:21:7a:f6:0a:95:1f:a6:
69:7d:3e:e5:77:d9:9d:42:17:62:53:bd:67:f9:b8:
65:ed:4c:4b:81:a1:92:78:ec:81:33:28:01:a3:7f:
2d:b4:0b:d4:c4:2a:c7:fb:2e:8f:f5:ba:bd:2b:be:
98:06:8c:2f:d1:93:51:b0:bf:de:9e:8b:c2:d5:c6:
08:fe:21:82:a9:8d:9c:27:ae:4c:33:8b:48:eb:c8:
eb:46:c5:c7:83:51:dd:2e:ce:b6:2d:75:4c:73:ed:
82:b0:05:ec:75:ac:02:da:b3:b3:82:15:a8:fd:26:
44:d9:12:f7:74:7e:22:7c:2f:5c:ee:01:e4:a3:f0:
1e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:19:83:C9:DA:70:42:1F:0C:A1:8F:FB:9E:C6:A1:E6:A2:1C:EE:39
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3b:ba:ba:4a:42:6d:8b:59:d7:bf:05:1a:f6:11:22:dc:e4:
3f:46:fe:ae:a5:7e:a0:c7:5e:ca:d3:d5:6a:f2:b6:6b:e0:5e:
96:fa:d4:a1:cd:62:b7:7e:80:4b:95:0d:81:dd:84:5e:85:25:
fc:da:d5:b4:d7:c2:4d:1a:46:ca:03:73:db:17:76:87:c4:c9:
49:d1:40:78:27:9c:0c:b5:ba:bd:7a:c6:8a:37:c6:88:98:9c:
66:fa:07:3e:64:9e:d9:cf:a8:7a:f1:8f:54:6a:cf:74:b8:7f:
c0:ee:4a:89:57:cf:7d:86:52:8e:d0:40:40:7c:b6:78:91:60:
37:90:b5:e1:70:e7:55:cf:92:5b:ba:e1:98:fa:fc:b2:13:bc:
3b:65:38:31:8e:97:71:50:42:93:51:d6:72:ed:4a:52:67:5d:
98:1c:ed:ba:c3:36:cd:a3:05:d0:d0:68:78:af:6a:ce:66:7a:
f4:22:92:46:a8:fe:7a:35:29:f0:4d:e3:ca:98:fd:d6:da:16:
4d:7a:c3:fc:ba:9f:16:13:40:56:de:e7:32:1c:b6:4c:39:55:
fd:96:db:a8:1d:3f:44:15:00:73:90:a9:9b:56:c0:ee:cd:71:
6c:92:ce:99:34:df:00:53:48:99:a8:cf:dd:45:0a:5a:73:77:
d8:65:09:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:14:28 2026 by rpki-client