Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File: xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier: GSA0kpJtPaPp49WHXLNRqGsX/skync2bwVSgH34ypdY=
Subject key identifier: 18:C4:C3:8B:F4:E0:7C:32:BD:95:2F:9C:C9:37:2F:40:39:EF:BA:3B
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 01A0C47B77CF6F965D75FAF939F287D1AA30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number: 1A86
Signing time: Mon 21 Sep 2026 15:00:20 +0000
Manifest this update: Mon 21 Sep 2026 15:00:20 +0000
Manifest next update: Tue 22 Sep 2026 15:00:20 +0000
Files and hashes: 1: EvezJV6Vs9jqKeUbJVzpq1KiVDU.roa (hash: 2svyQKGgqn/3aPQxfvJ2sTwJRY+qNPgcGyhkMpZSELI=)
2: NCLucTkvi3guFUx3Unodz7qu3f8.roa (hash: XS6lokDQlSUVgmf31X4rX8+KGasUvIdfEySA8Treukc=)
3: _wgviRVG1K_5o-U9fJ7o7ZJk_RE.roa (hash: 8X8kwr6+94gamc2uAWENoz4y3O77vpqIsVr/rcSuqCo=)
4: ezXML66PH_53DvtrZpee7wJgcq8.roa (hash: 8PYXc5RxO1awIA2fhoLa9kTXnH71YLw1uLcJ1CNtRqs=)
5: h5hIPsJLhskffy-sowI0XWx6XlE.roa (hash: SZZgcDO6xitZpi8SqVoNBovZysldQ3yiUtrtfkP4Ct8=)
6: tqRuH8AtUL10GIVamWVHWz8fxNg.roa (hash: RZkT6lVI+WQmmrPn0pAsOsM6VyHGnWPmG3xanKfDovc=)
7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: 7QOrwvXniRvnVQS/ZHjFDVpacqhUIFtNE/9kwFnEtF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:77:cf:6f:96:5d:75:fa:f9:39:f2:87:d1:aa:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Sep 21 15:00:20 2026 GMT
Not After : Sep 22 15:00:20 2026 GMT
Subject: CN=18c4c38bf4e07c32bd952f9cc9372f4039efba3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:ef:69:2a:a2:bc:47:cc:3b:41:cd:d8:0f:
63:c0:e8:f2:d8:dd:62:0a:05:ba:41:9f:57:19:e0:
23:0a:e0:5a:83:fe:ce:18:3d:8b:ee:17:8c:2e:23:
62:28:a3:db:2a:c1:77:e1:fd:fe:10:f8:15:1c:da:
e1:1d:16:be:ce:91:5c:05:2d:34:f7:bc:e8:0f:9a:
4b:99:1c:2a:e9:a8:3b:6c:ea:19:8d:77:b7:58:7f:
80:13:9f:61:c3:7e:b4:1c:c5:37:4d:01:4a:c1:90:
29:c0:a6:61:7b:06:74:e7:e6:de:8c:5e:ee:7e:81:
48:4e:03:bb:cf:14:dc:9f:73:b8:49:c0:47:15:71:
6b:01:45:58:be:d7:cb:42:c2:96:a2:c7:31:4e:8f:
74:ac:ed:a0:ae:b5:63:c0:de:e6:3e:83:0a:57:4b:
44:d6:c0:7e:2e:8e:78:32:1c:2b:4e:a2:bf:1f:3f:
9b:40:68:eb:0d:9f:e5:3f:ab:9f:0f:a5:ca:9c:80:
6a:d5:b2:47:75:0d:4d:a9:dd:ae:49:63:50:a1:45:
0a:5b:a4:fb:d7:79:6d:c0:67:2f:c9:73:c1:3c:4a:
c7:71:cf:53:1e:5c:e2:c8:da:89:6a:f0:d0:fd:72:
b5:77:06:e8:b5:fe:0e:20:6c:fd:ca:a7:bf:db:2a:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C4:C3:8B:F4:E0:7C:32:BD:95:2F:9C:C9:37:2F:40:39:EF:BA:3B
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f5:92:99:fb:d5:fe:a4:e4:21:4a:7c:eb:22:ef:f3:b9:19:
2e:60:bb:3f:5f:38:35:1d:f9:cb:e7:5b:2f:7d:01:12:14:ec:
1e:58:3a:9b:ba:55:69:e1:00:7d:0f:1b:ce:4b:c3:2a:d0:1c:
bb:f9:94:4c:6d:bb:76:8d:29:60:57:a5:f7:cc:49:30:38:19:
a4:cc:02:eb:13:56:a2:fc:06:a8:fc:a0:86:a8:ec:a3:33:ee:
5c:cc:d2:1e:d3:e6:18:4e:9c:4b:6b:c3:77:78:b8:c2:e5:a1:
25:e1:9c:b7:60:da:c9:74:16:19:5e:52:6d:87:eb:b7:61:02:
a3:bb:2a:8b:cc:de:8c:51:da:8d:8b:d5:24:41:75:7a:32:22:
c1:dd:a9:e9:84:42:12:34:f9:a7:c5:4a:b0:a4:0c:54:24:94:
80:a1:b6:58:ec:b6:c8:b6:fe:32:dd:90:b6:15:e3:cc:42:cb:
3c:de:c0:c3:f8:93:1c:b6:32:02:07:a9:7d:3f:be:50:67:93:
c5:df:82:e9:31:92:36:1e:d1:0a:37:a2:df:db:93:c8:17:46:
08:6d:38:17:56:e6:b7:85:89:05:19:07:27:bd:a4:26:92:59:
9e:b2:fb:f0:5c:3b:4f:2e:5e:7a:b2:23:2c:73:1b:86:c1:a1:
7f:8f:f5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:42:51 2026 by rpki-client