Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.mft
File: _XG6v3rWzBDWx2Tz5WrkFcHEX6A.mft (raw, json)
Hash identifier: BDxJ1jj9T2dMkF+XMNoetrAl8XlRfI3sBnPEr6hO7HI=
Subject key identifier: A8:E9:67:57:D3:C0:A7:D0:14:63:AD:AF:C5:F5:91:47:E2:D8:7B:FE
Authority key identifier: FD:71:BA:BF:7A:D6:CC:10:D6:C7:64:F3:E5:6A:E4:15:C1:C4:5F:A0
Certificate issuer: /CN=fd71babf7ad6cc10d6c764f3e56ae415c1c45fa0
Certificate serial: 01A0F0E714C34601D573249C0D570AABEE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.mft
Manifest number: 59
Signing time: Wed 30 Sep 2026 06:01:11 +0000
Manifest this update: Wed 30 Sep 2026 06:01:11 +0000
Manifest next update: Thu 01 Oct 2026 06:01:11 +0000
Files and hashes: 1: ROLB9Mjn_CZgxTvW4BQk8AHfg6I.roa (hash: 2ep/pOW0R9I7zZ6fjDatO/bNW3VCn7ZijHQTLotnUyc=)
2: _XG6v3rWzBDWx2Tz5WrkFcHEX6A.crl (hash: xxHVUMCaunfen16SQELyIEWgJTGFIthuVr5szFqxLGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e7:14:c3:46:01:d5:73:24:9c:0d:57:0a:ab:ee:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd71babf7ad6cc10d6c764f3e56ae415c1c45fa0
Validity
Not Before: Sep 30 06:01:11 2026 GMT
Not After : Oct 1 06:01:11 2026 GMT
Subject: CN=a8e96757d3c0a7d01463adafc5f59147e2d87bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:5c:06:24:b7:57:11:f0:e7:d5:00:de:47:
95:a7:ed:b9:a9:e9:8f:7f:aa:b4:7a:cf:e7:ab:ee:
32:65:f0:f2:e0:4f:d3:9b:9b:51:3b:ad:35:69:86:
47:a6:d6:e9:33:c8:fb:38:7b:5b:26:d0:b4:f9:44:
d5:7c:92:42:ca:09:2a:e1:2d:53:97:61:75:c7:aa:
0b:42:d7:86:19:81:b3:43:ae:47:77:6a:56:78:ba:
09:8c:5e:bb:eb:22:30:9e:bb:e6:26:82:fc:4f:93:
b7:80:a5:0e:04:a6:ba:36:9f:70:9e:42:f7:c0:cd:
45:b2:3f:a8:c1:41:7e:e9:60:e7:bd:50:fe:b4:92:
27:30:8e:e3:be:b8:8a:0e:4e:11:cd:8e:fb:60:3d:
93:32:20:9b:86:78:d9:61:d5:dc:74:41:63:80:a0:
57:28:e4:11:97:8f:b1:e1:df:ab:05:46:8e:6c:cd:
ad:33:0e:0c:88:90:56:af:d2:4f:69:0e:e0:82:e0:
47:c4:ad:d7:68:26:4c:ea:b3:f0:b2:8b:db:d9:6c:
ae:f3:e3:12:f7:b8:0e:9a:7c:1e:db:95:f8:d1:b4:
67:d3:ad:ce:58:a3:06:82:16:b3:56:08:f7:df:00:
48:ac:69:ad:5b:ca:f7:8a:23:3e:53:8a:93:b4:45:
a5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E9:67:57:D3:C0:A7:D0:14:63:AD:AF:C5:F5:91:47:E2:D8:7B:FE
X509v3 Authority Key Identifier:
keyid:FD:71:BA:BF:7A:D6:CC:10:D6:C7:64:F3:E5:6A:E4:15:C1:C4:5F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:21:47:0a:95:ad:38:60:f8:10:d8:7f:b7:f8:52:f2:da:28:
09:b6:95:ea:93:0d:6f:73:b4:b0:7d:a3:dc:e0:68:a0:f5:f1:
f3:c0:1e:b9:38:43:57:50:cb:e0:ae:f9:b0:94:b9:6c:5d:86:
cb:aa:cc:33:e6:0b:ad:44:a6:b5:d2:c8:0f:5c:47:6a:05:0d:
e1:32:d3:39:3c:06:e4:d0:62:dc:a2:e5:35:e5:b0:ca:8f:d9:
d9:15:d1:05:b4:e2:ce:1b:30:61:ac:86:db:56:7b:5b:38:b5:
81:a6:bd:c5:28:32:17:61:42:72:c2:39:10:ce:1e:fd:b0:a0:
e3:68:5a:2d:e7:99:35:ec:bc:43:dd:08:48:4e:99:1b:bb:bf:
1c:22:e8:7c:ba:d6:b9:0d:f4:ca:bd:39:43:57:8f:80:41:65:
ce:ab:2c:d1:fd:6a:92:f4:03:8f:30:dc:bf:7c:8f:b9:19:c6:
fe:02:6f:3e:a6:74:bc:98:d6:d1:b1:c4:8d:3c:1a:c7:0c:20:
2b:d0:11:ff:8e:80:5a:90:4b:21:3a:d9:b0:ec:f6:56:eb:c9:
42:aa:73:2b:63:0e:b3:02:6b:b1:e9:26:db:c9:f9:bc:72:a2:
03:85:b2:b8:02:c9:a5:7c:3d:13:a0:27:11:03:a5:ca:c9:ef:
7b:6b:fd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:20:31 2026 by rpki-client