Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: eaRVzfSGZBh4VMD4Ck32as+QVcTk3NI1ipJOHsICPFE=
Subject key identifier: DC:CD:F4:9F:3D:4C:F5:D9:79:8E:13:AC:46:9B:A7:FF:B1:F1:B1:0D
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 01A0F756B354CBDC8AAB184E94A31DC2DBA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 1A84
Signing time: Thu 01 Oct 2026 12:00:49 +0000
Manifest this update: Thu 01 Oct 2026 12:00:49 +0000
Manifest next update: Fri 02 Oct 2026 12:00:49 +0000
Files and hashes: 1: 0GfPX1iH-4jrdeocNq_6rEuAOsw.roa (hash: ZXWqDRXmQQYRidDZbFeir8xCY/Br5x9u3HuJDCrOxDI=)
2: E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa (hash: Uscjfda3vNy/cunwHUUok4ph0ZEvFOV3pV/NuXcyZJ4=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: gmZHtAAF/NxGqUVigTfFLgh57ZEUXOupc/LS1lxsUA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:56:b3:54:cb:dc:8a:ab:18:4e:94:a3:1d:c2:db:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Oct 1 12:00:49 2026 GMT
Not After : Oct 2 12:00:49 2026 GMT
Subject: CN=dccdf49f3d4cf5d9798e13ac469ba7ffb1f1b10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c4:f6:dc:2c:e2:00:22:86:2d:73:b4:cc:13:
ef:41:79:4e:96:a3:9d:90:58:55:ad:24:d5:b9:68:
4e:60:33:8b:d0:aa:69:ce:2e:06:66:e8:52:b1:b8:
80:fe:fc:ae:41:5d:03:4c:1c:8d:a1:16:ec:a2:1d:
80:d7:f0:34:72:b0:67:09:62:5e:27:dc:41:2d:f3:
2c:65:de:6c:d1:44:88:05:76:b7:e4:89:af:53:6f:
57:78:e8:4c:79:3a:8d:f8:bf:67:7f:b0:7f:b3:e5:
4c:97:b9:20:9b:ba:98:5f:e5:8d:d5:e8:10:4b:8a:
11:a9:ee:42:9e:e1:2d:ab:da:25:0b:47:9b:cb:04:
90:a9:cd:0f:27:c7:ab:99:04:fd:43:11:6a:ae:89:
df:0f:35:07:73:44:10:66:86:f5:38:9f:96:18:04:
02:f3:c9:83:44:db:83:d9:1b:df:38:f9:00:6f:12:
07:04:1f:0c:b6:6d:5e:b8:c0:86:b7:76:17:96:0e:
f9:38:32:7a:a4:44:b1:6c:cf:2d:a1:74:d0:b4:aa:
1b:0d:41:08:b8:fb:55:49:1c:8f:d7:a0:8b:4d:1f:
12:56:5e:fd:70:78:2b:63:fb:e5:7e:02:cc:35:6f:
e2:1b:4a:72:82:80:3a:3f:b2:8d:0b:73:a6:61:99:
83:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CD:F4:9F:3D:4C:F5:D9:79:8E:13:AC:46:9B:A7:FF:B1:F1:B1:0D
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fb:e3:08:32:fb:de:88:1e:f3:bc:d4:7b:a5:00:bf:9d:44:
1b:62:40:31:ac:ce:d0:4b:de:33:8d:a5:ac:80:4c:7b:e4:15:
64:f1:57:90:8f:1f:33:39:22:2a:b1:c6:ea:da:33:93:7e:e6:
27:ce:bf:ec:80:46:5f:b6:ed:06:57:19:ad:97:a4:41:a2:19:
41:f0:a2:93:f5:d0:eb:23:c8:45:77:92:18:3a:df:b3:ff:3c:
d2:4f:8d:70:01:34:2e:e6:0f:81:c3:fb:e8:6c:70:87:cc:ba:
1a:78:55:de:c3:1c:bb:1a:e1:c1:9c:5f:b6:61:23:a9:f8:78:
fb:02:87:05:ff:79:4c:7d:e5:6f:55:06:75:49:d9:0f:2f:09:
8f:7d:7b:ef:b1:d5:61:d5:11:34:9d:1d:fa:b9:06:33:62:6f:
5b:cd:e2:16:ec:97:47:fe:2f:c6:28:c7:0e:54:b0:60:82:1b:
cb:7a:bd:95:8f:d5:ad:80:da:2d:d5:82:e1:8a:58:63:8a:3f:
89:07:79:6a:00:d6:ce:7a:15:fe:3c:aa:bc:67:6e:07:c7:17:
be:51:8e:fd:ca:17:4b:c9:3c:9d:d9:e2:b0:d6:23:e5:d3:de:
58:b8:f9:34:ed:11:91:08:ed:73:c9:a6:f5:de:5d:b9:d3:e1:
c6:25:39:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:38:20 2026 by rpki-client