Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
File: Xff7OeIB66Y00CA8TyjeWuB5Wog.mft (raw, json)
Hash identifier: DDnikBWWXPH2fz7byv+iX+GFpudJnC6VuYrQhMtQbbo=
Subject key identifier: 18:F7:22:F1:F1:3D:06:32:CE:F6:66:D7:B2:E4:64:31:FD:20:B2:6C
Authority key identifier: 5D:F7:FB:39:E2:01:EB:A6:34:D0:20:3C:4F:28:DE:5A:E0:79:5A:88
Certificate issuer: /CN=5df7fb39e201eba634d0203c4f28de5ae0795a88
Certificate serial: 01A0C7467BE7F9049E23D83EBE50A5AEA9C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
Manifest number: C6
Signing time: Tue 22 Sep 2026 04:01:20 +0000
Manifest this update: Tue 22 Sep 2026 04:01:20 +0000
Manifest next update: Wed 23 Sep 2026 04:01:20 +0000
Files and hashes: 1: VcA3UckODLoz1S7R5MoctsVXluU.roa (hash: RqMqQLgcmTKOOjU1HEo17gZOBmti+5lxR7MDDBpd4a8=)
2: Xff7OeIB66Y00CA8TyjeWuB5Wog.crl (hash: 2Hw6yrLF7bRAJYbk5PN2bVsDT2uJ0m4swN4QoDnxeiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:7b:e7:f9:04:9e:23:d8:3e:be:50:a5:ae:a9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df7fb39e201eba634d0203c4f28de5ae0795a88
Validity
Not Before: Sep 22 04:01:20 2026 GMT
Not After : Sep 23 04:01:20 2026 GMT
Subject: CN=18f722f1f13d0632cef666d7b2e46431fd20b26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:63:c4:7e:26:95:94:10:a5:43:a5:2d:e0:
b2:35:e6:7e:dd:4c:cc:48:87:27:e1:90:a5:40:2d:
a1:5c:3d:74:16:49:df:02:f2:a7:82:a4:7d:c8:94:
1a:23:fb:55:85:7b:6d:cc:f9:05:90:a2:3b:35:86:
b7:aa:e0:c5:b4:28:c9:f5:c7:4f:e7:26:c6:12:21:
9c:97:e5:c0:1b:87:f5:95:45:ef:5f:dd:7c:91:99:
1d:c0:ac:0b:6d:31:97:2a:0e:bf:32:7c:8f:41:40:
25:63:ce:b8:3d:9c:b8:40:18:e3:5a:9e:15:78:d6:
a7:f2:9c:b3:86:90:2b:01:3f:c0:1d:c3:4a:8c:88:
96:a5:ad:e0:53:95:79:11:f3:94:4b:31:a5:eb:ed:
72:3b:4a:bd:0b:8c:c9:be:a6:bc:7b:4b:7a:35:fe:
36:f5:3f:6f:ea:1e:bf:96:7d:ed:3a:2d:f4:f3:aa:
06:4f:0b:78:a7:90:6d:6b:46:ef:e7:69:4b:65:ac:
7c:cf:d7:f9:d9:63:e4:7b:a4:65:d0:0d:0d:ab:44:
96:2a:53:e8:18:8c:28:16:a0:c4:e3:70:b1:49:f9:
4c:1a:18:d9:83:26:d0:e7:bd:47:e1:7c:4d:dd:da:
28:92:7e:22:d5:72:3e:2a:d8:54:5b:a7:e3:83:38:
fb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F7:22:F1:F1:3D:06:32:CE:F6:66:D7:B2:E4:64:31:FD:20:B2:6C
X509v3 Authority Key Identifier:
keyid:5D:F7:FB:39:E2:01:EB:A6:34:D0:20:3C:4F:28:DE:5A:E0:79:5A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c4:ef:ab:22:22:f8:de:a5:68:03:f2:7d:3d:5e:0a:cd:80:
d9:85:9a:6d:88:4b:4b:2d:02:c0:c3:67:82:c7:8f:f8:7e:f3:
d0:a8:97:a7:e6:f9:19:da:a6:6f:a7:13:01:18:70:70:84:6f:
ab:98:a9:31:62:56:83:4b:45:62:d1:d0:e0:7d:e3:1b:d1:1b:
8d:17:b4:c4:7c:91:66:7e:c6:c5:f3:13:6f:c9:74:a7:c6:11:
9f:f7:8d:7f:66:7a:a2:54:cc:85:13:13:0b:94:e3:67:9a:de:
12:51:24:c5:9f:99:39:c7:0b:0b:ae:a0:df:2e:73:55:0e:e2:
2d:b8:d6:32:fd:09:d7:60:35:64:2a:44:33:19:00:4d:d4:7b:
e9:a6:b2:5a:d8:10:e7:76:1d:0d:f1:51:c9:bb:05:e2:0c:04:
09:7c:5b:a3:66:4d:a4:35:c7:33:27:cb:c7:5a:37:7b:22:3d:
1f:b0:09:05:4a:86:a9:96:93:ad:19:10:5d:57:f4:06:1e:b8:
0f:70:61:f4:36:07:93:6f:f7:7e:25:7d:e3:bd:1e:ed:08:a1:
7b:c2:ad:6e:51:b6:40:26:a7:1f:d6:d5:13:5b:36:20:ce:01:
f1:f6:53:77:a9:8c:12:7e:96:7a:cb:36:7b:4c:e8:2c:e5:85:
59:a8:3c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:02:19 2026 by rpki-client