Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
File: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json)
Hash identifier: bfDy98y9JyCe2lpHDhtqBDbuW90jQKLqml7t+eNWHRA=
Subject key identifier: D8:A0:FB:93:E6:F2:2C:31:84:DF:FA:CE:2A:6C:45:0D:AE:9F:3F:C7
Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Certificate issuer: /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Certificate serial: 01A0CD10E1C424B22FF55BAEFA653FAAB1F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
Manifest number: 064F
Signing time: Wed 23 Sep 2026 07:00:30 +0000
Manifest this update: Wed 23 Sep 2026 07:00:30 +0000
Manifest next update: Thu 24 Sep 2026 07:00:30 +0000
Files and hashes: 1: KzL1NrpF1fIv1UZ-w1843U42opY.roa (hash: e/MBTifLcIfwIpz3DnQOZZoxAp3TFvcIxij/7Ilh7dM=)
2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: oRvF5fGJ8wfgI2Abq6CGx5Ttv2rgWes/73sYdOhFK5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:e1:c4:24:b2:2f:f5:5b:ae:fa:65:3f:aa:b1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Validity
Not Before: Sep 23 07:00:30 2026 GMT
Not After : Sep 24 07:00:30 2026 GMT
Subject: CN=d8a0fb93e6f22c3184dfface2a6c450dae9f3fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:82:ae:68:2f:2b:18:d4:9f:9a:60:9f:c5:6b:
15:3e:05:50:68:b0:ee:b9:c7:1f:af:ae:8a:1f:e6:
6c:cd:e5:47:4d:aa:10:9e:19:e7:35:42:c6:2a:5f:
90:ba:23:a9:62:80:d2:f4:53:d1:26:77:61:05:34:
dc:30:1f:ae:74:d8:b5:d5:34:38:34:94:74:79:09:
4e:73:3e:72:d0:e7:a8:ac:3d:e5:b3:01:72:82:53:
c1:64:c4:40:cd:2d:61:f6:d4:77:3b:3a:26:f5:f7:
c2:c4:d5:6b:d0:6c:0a:50:dc:c4:4e:4f:e0:e1:f6:
8e:56:87:9c:68:62:45:94:59:93:8d:bb:ba:67:51:
44:44:b3:8e:e6:04:6a:35:f6:1c:2a:c2:88:6f:79:
48:eb:f3:51:0e:3c:a0:75:6d:43:df:9f:cb:3c:0f:
0a:67:5d:ab:aa:8d:2e:97:c0:d2:8c:16:2d:0c:a3:
19:1f:dd:20:22:6b:32:02:b9:2c:6f:fc:e2:78:9b:
43:2a:ee:f3:46:53:5d:74:df:8b:c1:06:ed:08:3f:
6c:e8:5b:f1:c5:3f:6b:ba:7e:b0:e4:c8:c6:04:bf:
a2:c3:11:20:fd:3e:73:0d:dd:b8:5a:eb:52:7c:68:
7f:c8:28:c2:9c:dc:31:78:56:9f:5a:e5:82:06:57:
d4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A0:FB:93:E6:F2:2C:31:84:DF:FA:CE:2A:6C:45:0D:AE:9F:3F:C7
X509v3 Authority Key Identifier:
keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d3:21:16:9e:80:61:29:66:a3:b7:07:27:5d:45:a7:c1:fd:
47:24:0e:25:3a:61:18:63:6c:d2:7b:03:fc:ca:4e:c1:9d:03:
c7:9c:4f:c6:53:4f:36:ad:63:6b:88:62:a3:d3:0f:90:a4:ab:
e3:db:4b:de:86:37:71:86:20:0f:bf:7b:0a:61:05:72:38:50:
9d:34:96:1e:e1:69:6d:35:7a:98:73:26:ef:e7:04:fc:69:cc:
02:76:dd:da:4d:13:53:3c:ed:2f:6e:fb:a0:91:d6:81:de:17:
a0:52:49:bf:4b:90:56:b1:f2:1a:6c:e3:93:5d:49:37:13:93:
b2:f9:ea:43:ca:0c:91:40:ee:01:fa:06:92:7e:5d:5f:2b:c4:
cc:bd:3c:34:a2:63:28:4c:44:af:16:37:ad:00:0a:de:ef:23:
0c:07:25:e7:e8:f7:87:e1:65:4a:7f:00:bf:ea:fa:d0:57:d7:
7b:95:7e:f4:74:02:56:48:65:b2:7e:3b:da:2a:a0:66:0f:df:
51:e3:e4:5c:bf:1c:b0:12:cb:42:99:2c:b0:1b:76:9d:6d:68:
23:c4:34:99:6c:e5:69:d2:2d:90:09:db:12:3d:27:0f:9e:38:
ca:2b:fb:8f:95:b4:52:03:35:2d:03:87:53:a0:c8:3c:42:ee:
36:b4:fd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:26:12 2026 by rpki-client