Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File: xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier: 3LC+eH/Mm0ETb1hPNbtA32JSuw8eu6oiAYkHh8Bj7RA=
Subject key identifier: C1:31:32:13:A2:B0:31:2E:B9:EF:1E:86:45:DF:45:22:13:DA:4B:79
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial: 01A14BE2099FEFB7EE493684B95D55436A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number: 1AAF
Signing time: Sat 17 Oct 2026 22:01:07 +0000
Manifest this update: Sat 17 Oct 2026 22:01:07 +0000
Manifest next update: Sun 18 Oct 2026 22:01:07 +0000
Files and hashes: 1: SQgk14LJvQD58GJwhzmdHvEGMpA.roa (hash: 9nEhhW/HaWe0QsWNlFcb5L1Nm0I/W7PdcIHoewo3ZNU=)
2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: Aii1H6qeHX/FCIt+jOunW8jeWos+Vpkn7En8RlhFB18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:e2:09:9f:ef:b7:ee:49:36:84:b9:5d:55:43:6a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
Validity
Not Before: Oct 17 22:01:07 2026 GMT
Not After : Oct 18 22:01:07 2026 GMT
Subject: CN=c1313213a2b0312eb9ef1e8645df452213da4b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0e:95:61:b7:26:c0:70:25:9c:37:ae:e0:06:
a0:f4:f2:f0:99:fe:1d:92:d2:58:3e:f5:f2:9b:62:
b1:d9:c9:2c:17:3f:b7:74:75:dc:49:3f:d5:c6:f5:
f9:27:67:6a:af:a5:6c:b3:b6:1a:b7:50:3b:4a:a2:
47:dd:54:68:0e:8f:55:d5:3d:36:0e:13:8c:9b:09:
16:d3:b0:55:f0:85:71:9d:ae:93:d8:a7:60:3a:c7:
9b:f4:39:0a:ed:25:74:1e:97:ec:7b:db:8f:eb:96:
7d:0b:03:69:3b:6f:05:cb:db:f1:4f:db:93:87:63:
a8:a3:22:be:69:b2:7b:d2:ad:a2:d2:8a:ab:91:73:
7c:cc:3c:5f:4a:fb:58:d7:e6:73:3a:fe:63:76:a8:
a5:8f:96:d8:3d:80:f3:ee:c2:97:54:6d:dd:ae:85:
13:e7:82:e2:21:db:62:8f:ce:b6:b3:b0:d5:c0:f5:
c3:78:6f:ab:28:84:71:17:3f:e7:ed:23:c6:97:a1:
30:08:9d:99:6d:c1:47:c7:16:81:25:03:f4:0a:55:
d8:dd:02:7b:b9:b7:37:ac:91:f4:ef:80:2c:5a:8e:
2f:07:9c:0d:8c:56:d4:80:03:81:83:2c:80:5b:ca:
66:4e:69:e1:83:e8:29:6d:36:91:28:8d:f4:e1:d7:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:31:32:13:A2:B0:31:2E:B9:EF:1E:86:45:DF:45:22:13:DA:4B:79
X509v3 Authority Key Identifier:
keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bd:9e:7b:ec:1a:08:ca:da:13:db:d8:04:c5:ea:36:86:84:
bb:b5:e0:4b:c5:68:bb:e2:f8:88:3d:df:51:27:6c:ed:0c:04:
3c:a3:79:bc:71:5f:2d:8b:53:1d:9f:1b:96:f2:9c:09:42:fc:
7e:d5:2a:c8:1d:e4:63:f7:3c:a3:4a:53:59:f3:fe:c5:50:97:
4f:91:56:3a:ea:ad:ef:47:8f:40:a3:36:73:d8:09:02:b7:5c:
f8:0f:b9:6f:2f:fe:79:1f:bc:28:1e:b6:c8:63:1d:cb:9d:a7:
50:e6:24:25:42:e9:2b:47:08:7f:fe:ab:35:df:7d:97:30:21:
c2:f8:db:e9:0d:10:e4:e0:bd:0a:76:ab:e8:14:e4:7c:cd:47:
54:09:72:47:b2:89:81:2c:3f:27:ce:82:8c:4b:4a:5c:e4:f0:
20:75:4b:c1:cb:07:fc:ad:75:2a:3d:c0:96:c4:d7:8c:b5:81:
6e:ed:9e:58:42:82:5b:a5:ed:d6:be:5d:43:2a:bd:5a:a1:f2:
28:c3:cb:75:77:dc:25:ea:c9:c4:0e:ca:1d:0b:b5:a1:62:ea:
2a:b3:c7:69:fe:ab:2c:e7:8d:8b:1d:bf:66:06:d0:db:dd:a9:
f6:ff:88:01:68:0f:21:aa:32:5d:ed:67:6b:71:47:8b:3d:9b:
92:5e:84:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:23:32 2026 by rpki-client