Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
File: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft (raw, json)
Hash identifier: IZiPHNKN6g8MB8ovgVdiCYBFjjB1VGk5C9LUd1LH880=
Subject key identifier: BD:51:04:C5:5A:A2:62:AB:6B:7A:BA:EA:77:D0:D7:82:19:C8:6E:0E
Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f
Certificate serial: 019FAAF62DD20C3AFF5F922C44EF667DFC45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
Manifest number: 05E8
Signing time: Tue 28 Jul 2026 23:01:28 +0000
Manifest this update: Tue 28 Jul 2026 23:01:28 +0000
Manifest next update: Wed 29 Jul 2026 23:01:28 +0000
Files and hashes: 1: je_dZ3uZwgn_oNlxsf8-FTUq220.roa (hash: ypEWzWUb+UjYyAsZX+8LRu9EB7C2RkmFTCbcPYB408Y=)
2: pt1RHK2niClvZGTwHDZ-ZsdvbEk.roa (hash: /6TgV1nZB5u4zUl3iLf85GJmzgWJev9Zymtz9O1XUPc=)
3: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl (hash: IFNkKqHeXguzVMD9PLSYoucDpM3OlbmRGM9lUsq2m5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:2d:d2:0c:3a:ff:5f:92:2c:44:ef:66:7d:fc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f
Validity
Not Before: Jul 28 23:01:28 2026 GMT
Not After : Jul 29 23:01:28 2026 GMT
Subject: CN=bd5104c55aa262ab6b7abaea77d0d78219c86e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:ef:3a:1f:6b:3a:70:ca:d8:77:d3:d7:8c:
86:c7:e0:14:d1:a4:7f:ce:51:9f:f8:34:4a:7b:4e:
f5:7c:15:7d:4c:5d:63:dc:53:45:f3:0e:fc:dc:83:
b8:4d:5e:6c:c6:2c:34:d8:2a:16:0f:40:34:de:e4:
e4:fb:a6:66:f8:94:99:28:30:4c:53:ac:ee:6d:11:
3a:fa:ea:3f:09:ef:95:c1:8f:9d:1f:39:ea:53:2c:
f5:55:69:7a:0b:94:2b:97:d4:ac:d0:3e:bc:00:80:
52:f1:44:b1:a9:42:eb:c3:de:c6:7e:ee:6f:fb:e0:
96:55:a3:b4:7e:a1:3d:14:d2:de:05:59:72:0c:f5:
7d:8d:9e:4e:f0:ea:eb:5e:00:17:03:02:ee:ce:e3:
19:2e:e1:69:3f:61:cb:ef:33:23:ae:1d:9d:3e:0e:
2d:cd:2e:5a:dd:50:c0:34:17:5d:1f:a4:b2:45:26:
9b:60:09:12:3a:3f:a4:99:ca:a5:35:f5:eb:3c:91:
1c:5f:a3:08:29:bb:33:d9:e6:0e:a7:3e:01:24:23:
32:f4:4e:db:30:c1:b5:91:0f:1e:fd:be:08:55:ae:
e1:86:4e:f8:bb:ec:ff:81:c1:f2:f1:45:41:01:93:
f3:1a:53:cf:b9:62:10:15:cb:03:71:37:c0:29:4b:
b0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:51:04:C5:5A:A2:62:AB:6B:7A:BA:EA:77:D0:D7:82:19:C8:6E:0E
X509v3 Authority Key Identifier:
keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:12:c8:14:e1:72:7f:9c:83:0b:ed:a2:63:ce:f5:50:74:4b:
d8:bb:9b:8e:8f:97:9f:12:5e:66:39:66:2f:9c:5f:23:3c:ac:
49:0b:70:01:ee:fd:53:2f:73:d7:24:da:4e:a6:52:a6:51:be:
1d:c4:e9:14:0b:31:b9:7f:98:81:72:c4:4b:60:85:57:27:a8:
56:f0:59:26:96:ab:64:7e:00:ff:86:fd:09:d1:42:56:ae:e7:
c5:1d:60:c0:53:5b:b2:6f:1c:93:6b:3c:64:b6:1b:d2:ad:04:
61:cc:33:87:d1:3a:1b:e5:58:45:83:83:eb:33:59:6c:a9:d4:
2b:25:4c:88:7a:52:33:85:ef:21:88:1f:86:13:08:49:a3:8b:
9a:c4:f1:25:66:bd:fd:0b:bf:e3:67:14:ff:1b:7f:3d:db:42:
8a:07:72:6a:74:07:64:9a:50:1e:8c:94:8e:dd:a9:d2:68:30:
9d:6e:c3:85:3c:49:d7:26:fa:02:6d:65:0a:b7:3a:34:dd:c6:
22:76:c5:3d:70:1b:54:08:6d:97:05:e6:c4:c0:d5:36:d3:5f:
96:05:81:82:ab:63:89:22:b1:98:b1:de:ba:6b:3b:5e:6b:9a:
7f:53:57:c4:30:52:ac:73:17:fe:5a:4d:5c:41:02:0c:c7:2c:
d9:de:0f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:49:12 2026 by rpki-client