Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier: GYh4gu0aEaQdIvaUHCfzmI0z5COxmY4/5510aJT45lU=
Subject key identifier: 1B:76:C2:8B:8A:3F:78:05:AA:BD:B8:68:D4:83:B0:FF:64:A1:EE:9E
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 01A0C9D9BCE6861D7F14BD14F040D7205D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number: 1A72
Signing time: Tue 22 Sep 2026 16:01:25 +0000
Manifest this update: Tue 22 Sep 2026 16:01:25 +0000
Manifest next update: Wed 23 Sep 2026 16:01:25 +0000
Files and hashes: 1: 3q5RWSGOxCn-4vQQtjRT8k1IAvA.roa (hash: MIWK18fPNJwt93Pk47XkLTue9uAHSbtiIrZzbMWjVSU=)
2: D7FIPfz-CzdgoxC2ZfO03Afc5XA.roa (hash: ez1YIU6Tx3muI0r5J6f9+6WO/D4t4YugqUqFYhktxYk=)
3: Dx0dpQ_AbPOHo68C5ZHoBOIeMpQ.roa (hash: JCGvmXb4UTtEBOFvTPRpl2liGZ4WCIfGLFxvNxNlUlQ=)
4: RnSc6gSUeDQDtCWXcClmqxy0TiY.roa (hash: +n8JNrN3miwL2GACthuyyp7bhT+soPbrQhQAhrWLdUU=)
5: UBa5jx_ljBddT4tcu2z4LiFhOrk.roa (hash: zIhepUpUWuaAk7nANePm+39a2QbrU+z3WqdtyUCFmrk=)
6: b68J68814HG70-IxOZC5l9IfQFw.roa (hash: 5V2eWlG8SHwx9mjWWlI/4oOe8kmHY5VMZdFbe9QXZ+A=)
7: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: lLo8HLEp4+s8PAZHqOrKjwvkp6zFsLOLEc6v1SINQuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:bc:e6:86:1d:7f:14:bd:14:f0:40:d7:20:5d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Sep 22 16:01:25 2026 GMT
Not After : Sep 23 16:01:25 2026 GMT
Subject: CN=1b76c28b8a3f7805aabdb868d483b0ff64a1ee9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:34:26:5c:cc:08:9d:ec:96:ed:e4:17:e9:
60:26:09:d1:12:4e:c1:28:0b:94:90:cc:f0:a4:c4:
8b:f2:ce:5a:14:31:8c:86:b6:5b:7b:cb:27:b7:01:
2a:52:cc:23:0b:14:50:cf:64:a7:46:05:01:09:5a:
8a:71:56:53:4b:53:10:34:b1:21:95:64:3e:77:24:
a8:84:8f:05:7b:c4:0d:d3:22:e5:b1:1e:9b:e2:62:
d9:49:28:12:23:b9:9c:03:47:1d:3a:89:16:8a:23:
34:31:49:2c:a0:93:db:d8:fd:49:1e:91:12:5b:10:
c7:6c:3d:77:75:8e:b1:70:15:09:05:d8:8d:a1:86:
8a:e3:d1:a3:d0:c7:95:fb:f4:c2:c8:a3:1e:0f:11:
13:a0:89:31:45:5f:b1:f7:b0:30:99:80:c8:d6:30:
82:2b:f6:a5:1d:3a:07:af:5f:ac:23:a8:2a:35:50:
19:24:5b:cc:d2:17:c4:d2:da:d1:8b:a9:3f:93:f2:
77:57:03:b6:fb:17:87:6d:20:e4:98:ae:84:69:f2:
c1:27:a6:65:41:31:4b:2c:e2:f9:ae:d0:1b:01:5e:
7f:97:5a:b4:8f:5f:d3:f8:bd:a5:fe:52:42:02:f5:
df:5c:2e:99:a4:25:ca:c4:8d:e6:41:6f:e2:db:fc:
33:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:76:C2:8B:8A:3F:78:05:AA:BD:B8:68:D4:83:B0:FF:64:A1:EE:9E
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d1:9c:bb:dc:f4:f2:27:85:9c:eb:f7:4d:f9:3a:bc:15:39:
e0:4c:ec:83:e7:33:bc:c0:e8:5f:aa:d7:68:f0:67:0e:b6:68:
f4:f7:7a:3a:c7:ec:64:d5:06:c9:90:52:8e:56:b9:75:ad:97:
ce:50:f7:81:e0:91:ac:c7:1b:8f:8b:60:28:d9:f7:bd:54:de:
7a:3e:33:09:c7:e1:6f:db:9c:68:4a:cb:8e:ec:ed:19:20:55:
30:1f:ad:b8:05:c9:36:21:0e:2a:50:71:30:6f:eb:fe:d1:8a:
73:b8:90:34:81:4d:2e:9b:3d:8a:f5:81:9e:93:d7:03:33:07:
06:ed:5f:6a:cb:1a:b4:e2:41:b5:a6:ce:97:3d:70:fe:e9:30:
fc:6e:f5:fa:8a:de:ca:79:f6:d8:23:c3:6b:00:0e:58:18:d0:
ac:34:c4:84:f3:8a:a7:db:2c:02:94:94:5d:31:56:8f:78:b5:
4a:58:4c:93:54:d0:75:4b:fb:84:9d:29:b0:f1:7d:02:f8:a7:
44:75:55:a1:0c:68:29:43:9e:8c:28:00:80:2f:5a:bb:79:87:
c0:a1:d8:bc:05:0d:39:dc:c2:86:0a:dd:bc:e3:35:42:3c:db:
ff:13:29:24:79:9f:d3:ef:c1:2d:13:91:ab:2a:f1:02:b9:ab:
eb:6d:ed:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:59:50 2026 by rpki-client