Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
File: xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json)
Hash identifier: SgPZXO9BxvAMRzRYusCDummQWw+P+KAfYo+knQnqF48=
Subject key identifier: 70:ED:CD:0B:A5:35:F3:00:FA:1B:93:D0:4B:31:BF:19:66:AE:88:8F
Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Certificate serial: 01A0C58DFBF6D255AAAC7227B4191B2995BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 20:00:11 +0000
Manifest this update: Mon 21 Sep 2026 20:00:11 +0000
Manifest next update: Tue 22 Sep 2026 20:00:11 +0000
Files and hashes: 1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: bmDBb2nwU762VAsnCTGshGYmz7eOxFMUzDQh6jE68n0=)
2: xsHwN39t7Lg_0JrvQJX-o8s4wJc.asa (hash: uUROjO5Wuy6f76sPTNQEiOJg9EZNcnwz3IXWyZD8TU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8d:fb:f6:d2:55:aa:ac:72:27:b4:19:1b:29:95:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Validity
Not Before: Sep 21 20:00:11 2026 GMT
Not After : Sep 22 20:00:11 2026 GMT
Subject: CN=70edcd0ba535f300fa1b93d04b31bf1966ae888f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:a6:4b:7d:f7:32:21:1c:1b:5c:26:2e:7a:
31:0a:a3:d0:ab:e3:85:1a:bf:07:b8:fc:10:c8:4e:
b6:2a:29:e7:dc:a3:43:96:7b:dd:b0:18:c3:b1:29:
fb:77:2b:8e:3c:1f:f9:e0:34:32:a9:de:e8:5a:d8:
79:fa:ae:bf:1a:11:eb:81:ec:c4:a6:d5:42:7c:d0:
7e:bf:90:78:23:c0:de:64:cd:da:e3:5b:9a:3c:18:
2e:cc:36:44:5d:01:e3:3d:b1:7d:5f:91:4f:88:2c:
ed:e4:8b:3a:f8:42:a3:db:32:2f:8a:38:06:0e:7b:
39:86:45:fc:53:37:68:5b:7e:e9:f3:dc:15:2e:96:
91:2b:2e:c6:f6:03:2d:87:c6:3b:b6:a4:8e:33:41:
45:49:a5:7a:ea:fe:cd:70:12:08:40:62:c2:42:3e:
fc:c6:5d:73:ea:2d:d9:99:66:71:a3:d9:16:1e:5c:
86:33:13:d5:ea:62:66:7a:6e:b5:3f:8e:8c:e9:f8:
9e:ec:27:65:f1:80:51:40:fe:4c:9e:a8:da:c8:e0:
d1:95:35:e4:b1:b3:95:42:99:22:5a:ec:19:13:b0:
cb:52:23:65:2c:c5:de:aa:3d:a9:36:b0:6a:9b:5a:
4d:5f:3a:0b:80:ac:12:26:d3:cc:6b:da:25:97:4c:
6b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:ED:CD:0B:A5:35:F3:00:FA:1B:93:D0:4B:31:BF:19:66:AE:88:8F
X509v3 Authority Key Identifier:
keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:34:08:9a:31:9a:08:01:6a:76:27:7e:2b:12:6c:c9:43:a6:
74:8b:1c:f2:71:82:84:0a:2e:73:2a:14:8a:76:be:86:0d:e2:
60:11:0f:f7:b8:ea:11:88:24:95:d4:12:0b:d8:61:81:9f:8b:
cf:5d:cc:a2:9f:7a:44:18:75:b8:9b:f6:cf:5b:fb:f2:32:f2:
94:83:ac:70:af:85:6d:e0:8e:ac:da:5e:d5:6d:14:ad:52:08:
d3:e7:ff:1f:c2:f2:95:7c:45:56:f7:09:c7:1e:24:7e:45:a6:
a9:7f:17:91:a1:5d:1e:87:c8:ac:23:12:eb:bd:b1:f8:90:20:
2f:b8:25:04:11:67:ce:b7:46:ca:93:98:18:7b:aa:b0:1c:f6:
34:3f:b1:bf:54:4c:c5:26:df:64:7c:bc:03:43:2c:0d:ee:e1:
d1:c7:2b:7c:ee:6a:fd:a0:be:4a:31:f8:ca:79:63:81:9c:92:
5b:f7:f7:f5:82:c0:d7:e9:db:b8:d2:5b:cd:98:c8:dd:8b:63:
9e:ed:3c:f9:aa:52:65:63:cb:60:76:e5:37:eb:b9:2f:0c:ca:
7e:6c:d3:79:49:7e:17:a3:dd:8f:45:01:95:1a:85:b5:9c:87:
85:55:b8:d1:bb:34:1d:cc:3d:bf:63:f4:61:13:fa:fa:35:d1:
55:04:c2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:54:34 2026 by rpki-client