Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier: JH96T6Ily1CG/YS2rCWvmfJOcuS3uRZHW3GWDDb44OU=
Subject key identifier: C2:D8:BE:A8:BE:4C:2E:B0:4D:61:1B:1D:5E:52:B8:D9:FA:42:A3:CD
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 01A0DC1740987286E63C4B01813B0149C97D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number: 09B0
Signing time: Sat 26 Sep 2026 05:01:46 +0000
Manifest this update: Sat 26 Sep 2026 05:01:46 +0000
Manifest next update: Sun 27 Sep 2026 05:01:46 +0000
Files and hashes: 1: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: xxmpyHhjo6pXU/nbzXh01Z4ykZeRKPRlPDj1HrP1Te4=)
2: yPfyngOSudI1ySWIfQxdWtyiNIs.roa (hash: 5dFd12MxUEVgWmbdpshfSJRZnDjbazIniCXkVZMmEDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:40:98:72:86:e6:3c:4b:01:81:3b:01:49:c9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: Sep 26 05:01:46 2026 GMT
Not After : Sep 27 05:01:46 2026 GMT
Subject: CN=c2d8bea8be4c2eb04d611b1d5e52b8d9fa42a3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:bb:93:56:04:62:b5:b6:54:ea:98:2c:f8:
78:16:50:76:42:64:5a:ed:ac:22:1c:26:6a:36:e2:
8b:eb:9d:58:4d:10:1e:22:32:41:3f:c2:5d:eb:f1:
37:7d:aa:00:b1:d4:34:65:d1:d1:8b:ab:28:9f:6b:
6f:8a:9a:38:c6:c6:47:b8:a6:3e:01:a4:75:2a:1d:
9e:81:8e:e0:4a:d4:bb:77:e6:fa:1c:d4:14:d5:85:
28:ac:44:65:44:ea:45:5d:0d:21:28:40:eb:38:68:
78:d7:11:14:8b:46:1d:da:4c:3a:c7:92:61:6d:a4:
c8:96:9a:b7:a1:3c:d0:0e:3e:02:27:25:d0:d7:a0:
01:a6:3d:c4:0c:c1:f0:17:00:7f:2a:ab:ca:c9:48:
e0:4f:a7:9e:2b:e5:38:c0:3b:93:31:1a:ed:10:37:
a7:c2:3e:57:7e:7d:5a:01:ab:4a:88:ec:ed:cf:be:
86:11:3b:58:69:51:be:1c:69:96:f9:57:0a:d2:01:
f2:55:90:ab:33:0c:dd:b0:c2:c7:90:5f:9b:21:de:
2f:bd:c1:df:6a:0b:5d:d3:90:e2:ed:ea:d6:15:c6:
a8:b8:ba:4a:3a:ed:45:29:a3:bf:e7:c8:e4:5e:1a:
ae:8c:04:a9:c6:0f:60:75:18:0c:0a:c8:68:18:56:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:BE:A8:BE:4C:2E:B0:4D:61:1B:1D:5E:52:B8:D9:FA:42:A3:CD
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:79:15:04:ba:ea:cb:67:c4:96:33:d1:53:07:c6:57:9b:21:
a4:83:24:b2:19:20:30:fd:27:38:f9:34:af:3c:e5:06:0b:24:
57:9e:b2:66:ed:a1:b5:c8:69:45:fe:d5:d3:df:ef:d4:aa:bc:
ab:75:0f:88:b9:65:21:13:3c:90:45:5c:ba:8d:71:ed:be:e9:
ff:0b:b2:ae:d8:c2:02:b1:44:85:9f:6f:2e:05:8e:88:80:6c:
dd:1b:f8:74:e8:0f:a8:89:80:a5:01:14:e8:9e:88:3d:cc:55:
72:71:b4:02:0b:a4:0a:e9:ca:e5:23:3f:fb:fb:48:a6:48:0c:
52:aa:b3:a9:1b:47:26:26:67:32:c7:ac:be:15:84:8a:48:1d:
8e:85:49:d5:d5:2e:dd:c8:74:9d:44:c7:cf:ee:8c:6b:be:a3:
08:0c:d4:fc:0a:29:a1:73:9a:30:4c:8e:74:7a:c6:1f:2b:c8:
8f:e7:23:68:c1:5f:be:aa:ca:f2:58:7b:3d:89:0b:c3:61:42:
29:a1:f7:a4:d3:39:c3:08:19:d4:9a:41:2c:56:64:73:8d:67:
d5:73:e0:3a:77:15:80:af:9e:15:19:bd:8d:60:c5:97:ee:0b:
55:1d:90:d1:b0:e0:8f:f0:14:fa:18:a3:59:d0:3b:2b:84:87:
36:42:c2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:39:14 2026 by rpki-client