Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier: dyg+mGpFhMCoz0ubnT7VYKf30tFKii2zX4l+cxjpX5o=
Subject key identifier: 0E:81:2F:8B:F0:65:2E:27:6A:C6:AC:EC:4A:11:33:83:4A:10:CC:87
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 01A0C36988917580048C7108AC265EE2AAC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 10:01:08 +0000
Manifest this update: Mon 21 Sep 2026 10:01:08 +0000
Manifest next update: Tue 22 Sep 2026 10:01:08 +0000
Files and hashes: 1: BQKL8EXCPvyOQg1ICU181HzsTLY.roa (hash: MQTZW+TVECgfYFhuLaoeF6hUd6ELHRAnYHxRk4WvfLE=)
2: FxY1RAn7Uc02QNfQHdB91asNvfo.roa (hash: XFxgE3CskWpWNCg7s6TQKuMZYsJq+2wXqoHIuIsrGSk=)
3: mvSatyfuo61e-RTaG2TAjXDZEec.roa (hash: Wd+3k5bQsb75PtYForkA7tIC7S5S2MMNM7YiFG0yOOs=)
4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: B1WrZUTHqZ9wK57Pj2obVcyVtp0RZPAndjFU5/5DZPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:88:91:75:80:04:8c:71:08:ac:26:5e:e2:aa:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Sep 21 10:01:08 2026 GMT
Not After : Sep 22 10:01:08 2026 GMT
Subject: CN=0e812f8bf0652e276ac6acec4a1133834a10cc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:70:4c:00:a0:33:3c:79:63:78:a2:93:ae:b4:
94:73:7c:ed:4d:23:4c:e6:ac:49:b3:6e:1e:29:75:
ba:85:b9:d9:2b:94:d1:91:79:de:3b:3f:22:23:da:
6d:a0:fa:36:a1:fa:f3:18:57:4b:36:b7:50:49:da:
43:d2:38:7d:11:ab:06:a6:71:72:94:d7:19:41:88:
28:a1:cc:b8:9e:2c:7b:1a:65:ae:cc:b2:77:43:e0:
1b:c6:a5:f4:b6:0d:c0:67:12:01:94:0d:d3:77:32:
d1:c2:2c:a1:cb:ea:f6:a1:11:e7:8c:1d:95:34:c8:
45:0c:cc:44:95:4e:9a:74:d0:41:bd:d0:4a:a4:d2:
d2:ee:d5:26:71:46:7b:78:ed:a4:b0:59:95:82:b1:
68:43:ed:a6:46:ec:7b:28:0c:47:39:27:14:97:38:
2c:e7:a6:2e:47:f2:e2:10:ec:b5:43:ff:33:9c:da:
1e:2d:5c:aa:ea:d3:dd:c0:70:01:14:8b:1d:65:8a:
34:a9:a9:bc:50:28:d4:4f:bf:8a:84:9c:7a:b5:52:
15:bb:4c:65:c5:19:1f:33:19:12:6c:d7:c2:41:92:
c1:6b:e6:52:39:f4:a9:5c:70:5d:47:76:b8:27:57:
22:06:1e:1b:e5:e0:dc:34:cb:7d:2c:ae:94:36:bd:
1c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:81:2F:8B:F0:65:2E:27:6A:C6:AC:EC:4A:11:33:83:4A:10:CC:87
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:70:3e:99:e4:7b:a7:1d:d3:81:fd:2f:59:89:d1:e9:8d:14:
90:85:38:4e:c6:d0:9a:6b:9b:1b:5f:06:21:b1:ec:0e:a7:d3:
b4:50:57:f7:49:42:b2:31:4f:59:ce:5c:20:74:84:be:00:62:
dc:50:9b:67:c3:c1:69:e5:0a:87:e0:b8:e4:f3:4d:0e:e7:2b:
88:fd:45:68:6b:71:ab:d9:b9:11:4a:5b:3e:5a:b9:e2:25:2b:
3c:59:2e:06:00:54:a7:d0:cc:2e:6e:a9:a1:5d:85:7f:63:6a:
fe:94:82:6d:1d:89:91:6b:58:83:cd:15:53:8d:9e:8a:75:ab:
aa:89:61:ae:ea:5b:3b:8f:2d:b9:14:38:7b:5e:e4:a4:51:41:
68:3d:af:55:c1:00:ad:ba:64:31:56:80:6c:a4:a4:a1:16:52:
6f:b3:68:a6:a3:2d:a2:45:ce:c6:20:89:14:a5:48:27:52:e2:
67:7a:d7:a0:11:69:a8:a5:1b:64:4a:c8:d8:06:1d:c9:53:33:
e1:9b:37:94:b1:78:82:d2:76:b0:8c:df:35:7f:28:65:91:e8:
ae:c7:e3:4e:f7:f3:8d:99:26:15:41:e9:e2:dd:c7:ff:bf:10:
3a:94:d0:01:a2:8f:b2:e3:e8:bd:13:a4:ed:64:26:26:6b:07:
f8:45:e1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:43:33 2026 by rpki-client