Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier: k/lzjZdISteVbxVGdGwTjS/ggrcaXweJLLZYn6no+l8=
Subject key identifier: 03:7A:88:A2:E4:A7:EC:06:A2:62:E3:B7:BD:45:C3:1F:DD:70:CE:AF
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 01A0CDB6A4BBDC119FE97B3F6CD63287A75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number: 1A74
Signing time: Wed 23 Sep 2026 10:01:33 +0000
Manifest this update: Wed 23 Sep 2026 10:01:33 +0000
Manifest next update: Thu 24 Sep 2026 10:01:33 +0000
Files and hashes: 1: 3q5RWSGOxCn-4vQQtjRT8k1IAvA.roa (hash: MIWK18fPNJwt93Pk47XkLTue9uAHSbtiIrZzbMWjVSU=)
2: D7FIPfz-CzdgoxC2ZfO03Afc5XA.roa (hash: ez1YIU6Tx3muI0r5J6f9+6WO/D4t4YugqUqFYhktxYk=)
3: Dx0dpQ_AbPOHo68C5ZHoBOIeMpQ.roa (hash: JCGvmXb4UTtEBOFvTPRpl2liGZ4WCIfGLFxvNxNlUlQ=)
4: RnSc6gSUeDQDtCWXcClmqxy0TiY.roa (hash: +n8JNrN3miwL2GACthuyyp7bhT+soPbrQhQAhrWLdUU=)
5: UBa5jx_ljBddT4tcu2z4LiFhOrk.roa (hash: zIhepUpUWuaAk7nANePm+39a2QbrU+z3WqdtyUCFmrk=)
6: b68J68814HG70-IxOZC5l9IfQFw.roa (hash: 5V2eWlG8SHwx9mjWWlI/4oOe8kmHY5VMZdFbe9QXZ+A=)
7: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: LV0RhaqW9I5eil+O3gBJXRMkCtj9G9Q0JPxjUfDQyo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:a4:bb:dc:11:9f:e9:7b:3f:6c:d6:32:87:a7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Sep 23 10:01:33 2026 GMT
Not After : Sep 24 10:01:33 2026 GMT
Subject: CN=037a88a2e4a7ec06a262e3b7bd45c31fdd70ceaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:c0:f8:81:ba:f8:fa:d4:52:cd:ec:d3:c2:
40:dd:f7:db:97:4b:a7:7e:d6:63:96:59:bf:b9:17:
27:dc:12:b6:17:b6:29:b8:8c:7c:ce:e1:b9:c6:8f:
7b:21:0c:e0:3c:33:cf:62:82:87:8e:d3:9f:3c:16:
6a:56:92:0b:f4:c4:0c:7d:8b:bb:5c:40:1c:e0:aa:
30:ac:32:82:dd:54:8b:0b:04:b8:03:40:06:4d:87:
71:96:bf:cf:e2:93:20:9f:0a:7f:90:d1:60:fc:7b:
74:df:55:36:4e:78:b5:b5:a2:44:08:ea:06:ae:33:
81:c6:4f:8f:f0:de:8a:c4:f8:2d:6a:71:ee:f1:28:
fe:d9:a0:25:cf:6f:63:d1:f6:c9:9f:af:77:f1:57:
c5:05:b8:c8:eb:a0:b1:20:fc:a2:a0:00:11:e9:48:
dd:40:e8:23:54:e5:7f:ed:08:42:cf:26:0e:08:c3:
47:98:e8:b2:64:9e:de:53:14:9a:1d:54:b9:e5:ed:
88:00:7d:c7:b5:9f:74:f6:5c:03:b7:04:10:ed:f9:
91:22:1b:e7:18:ed:4e:1c:eb:6c:fa:e6:55:35:fd:
23:a4:ff:f7:39:4d:88:ed:df:da:92:78:27:67:cd:
a5:8f:63:53:1c:5a:14:54:7a:92:77:ad:d0:c6:b2:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7A:88:A2:E4:A7:EC:06:A2:62:E3:B7:BD:45:C3:1F:DD:70:CE:AF
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4f:22:1e:79:5f:b7:40:14:cb:4e:17:7e:77:85:5c:cd:24:
6e:f8:cc:46:90:f1:ec:68:fe:1d:48:50:12:2c:55:12:e5:65:
10:e4:b9:4d:2e:7d:9f:66:26:68:89:62:b7:11:1d:a6:e9:57:
99:8d:19:35:8f:aa:4f:bb:a0:2a:08:4b:01:45:28:f1:10:07:
2c:28:ae:3e:5c:b5:bf:87:e1:08:26:6a:ed:91:ae:bf:ac:ea:
7b:eb:cb:25:f9:7f:a5:94:09:6e:97:97:92:74:2d:87:4e:b5:
9f:cd:6b:1c:48:24:87:50:b2:68:56:f4:ea:74:7e:73:7b:4a:
48:fc:57:3b:5b:95:ea:5f:1c:bc:0f:b6:27:15:18:70:54:e2:
85:35:90:f8:70:c9:ad:aa:fb:a7:fd:c9:8c:1d:e2:d7:44:a8:
44:2e:4b:c9:f4:c3:da:e2:d3:a1:27:04:6c:2e:8e:2c:7d:d1:
19:d9:7b:d9:38:0c:ad:c5:c3:cd:b9:14:78:75:30:96:be:c0:
b8:d2:81:2b:2c:d2:77:19:2b:9d:d9:09:a7:0d:13:3c:06:f5:
a1:fe:1f:a8:3b:53:87:31:24:99:4c:b0:28:c7:6f:9b:69:3f:
79:3c:e9:c9:34:68:ed:f0:eb:ea:2f:dd:5e:57:6d:a2:48:d6:
f3:34:21:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:16:11 2026 by rpki-client