Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File: xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier: 4mU52lLdYiLRPPfnwC8pEvsAe+bmyW7npN2FHpklsV4=
Subject key identifier: 3D:67:D3:E8:EB:7D:CB:A1:E6:D7:1D:F5:AD:32:9B:FA:89:6F:B3:12
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial: 01A1404C28CFE9C0884EDD816C78B36D5E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number: 1AA9
Signing time: Thu 15 Oct 2026 16:01:35 +0000
Manifest this update: Thu 15 Oct 2026 16:01:35 +0000
Manifest next update: Fri 16 Oct 2026 16:01:35 +0000
Files and hashes: 1: SQgk14LJvQD58GJwhzmdHvEGMpA.roa (hash: 9nEhhW/HaWe0QsWNlFcb5L1Nm0I/W7PdcIHoewo3ZNU=)
2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: ewsQPVSBlJa9W/ci1bv18vDI3Nn3r+1prg89AUCoHbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4c:28:cf:e9:c0:88:4e:dd:81:6c:78:b3:6d:5e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
Validity
Not Before: Oct 15 16:01:35 2026 GMT
Not After : Oct 16 16:01:35 2026 GMT
Subject: CN=3d67d3e8eb7dcba1e6d71df5ad329bfa896fb312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:1b:99:c7:59:b0:c4:f4:45:b3:51:6e:3f:
83:98:53:63:43:97:fa:e5:c3:00:07:b9:ff:bf:2b:
ab:85:23:b6:17:d3:6c:bc:e6:42:9b:ab:1a:5a:42:
36:2c:ea:40:24:87:0b:78:fd:8e:55:30:ca:3f:88:
95:64:13:0e:e2:3e:0e:fc:f9:e5:1b:63:64:f2:47:
6e:98:76:39:17:b8:96:c4:7f:da:78:52:2a:a6:44:
4e:03:40:48:41:aa:e7:22:34:ae:84:66:62:4c:e2:
ba:94:38:99:ec:45:aa:78:06:1e:1e:72:cb:6c:b5:
3e:4e:17:57:c4:95:5a:dd:fd:0e:87:81:78:f7:68:
31:84:df:34:34:78:1a:07:d5:04:23:48:63:10:79:
d1:ea:0a:da:e9:cc:1a:76:11:ed:ed:1e:69:01:2c:
7c:ad:66:c0:17:e9:8b:37:8e:f2:96:31:48:0e:54:
94:ba:02:17:53:c7:25:67:41:d9:ab:2e:ad:cc:fc:
c7:1e:0a:ac:8e:29:59:50:aa:f1:28:16:83:8d:da:
4e:97:64:ed:98:e2:df:fb:d0:0f:ec:4f:fd:ab:cf:
be:9d:07:be:b6:29:cf:2f:13:4f:ca:6e:aa:0c:18:
ff:e3:49:3f:d3:8c:36:7d:41:b9:20:ab:0d:f3:d2:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:67:D3:E8:EB:7D:CB:A1:E6:D7:1D:F5:AD:32:9B:FA:89:6F:B3:12
X509v3 Authority Key Identifier:
keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:eb:a3:b8:16:b6:f1:16:2a:57:a2:4d:d9:7e:1d:14:84:6e:
91:0a:25:a0:fa:ef:d1:b6:a8:ce:8f:57:40:9c:9b:84:d6:65:
e3:05:41:0d:e1:ac:10:98:e4:d2:d2:2d:f2:34:36:18:9b:83:
e1:ca:ba:be:19:3f:13:e2:b4:20:54:85:27:ae:16:9c:a8:a4:
7e:d7:bb:5e:19:50:13:33:33:5b:67:ca:c7:c4:22:ff:78:31:
fe:13:fc:11:c7:30:85:9b:8f:98:ba:d8:ba:a2:79:a4:bc:a7:
dd:25:75:80:ee:0b:23:ec:e3:bb:0b:c0:23:82:29:74:03:96:
aa:90:88:e3:2e:b7:50:1e:a4:68:11:01:10:df:d7:f5:0b:e8:
90:7e:da:52:67:71:98:e7:91:c7:5e:2a:09:ba:21:88:9e:da:
a4:e1:9d:c5:58:d2:00:4b:d6:a1:67:95:81:72:90:39:89:e9:
ce:96:b2:7e:ef:3e:6c:d9:3e:23:f7:93:61:29:d7:c9:32:67:
d0:be:a7:7f:64:d6:cc:48:b5:08:81:33:e7:3e:9f:0e:0a:92:
48:48:a8:58:f0:7c:c5:e7:c9:a6:b3:d3:98:92:55:4e:98:10:
c1:9c:ca:80:c9:c3:7f:f8:62:f7:35:64:77:6c:12:6f:54:af:
3a:b1:a3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:58:21 2026 by rpki-client