Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: F5v11M7NA6U2TRqOWZOLu0V3CISlmClCPzyr1xWLotY=
Subject key identifier: C9:F8:D4:D5:49:A3:76:56:E0:B0:67:F7:6F:DF:21:B6:ED:66:2C:11
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 01A0FF476A0847D8C5990377A6EF87D67B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 0938
Signing time: Sat 03 Oct 2026 01:01:05 +0000
Manifest this update: Sat 03 Oct 2026 01:01:05 +0000
Manifest next update: Sun 04 Oct 2026 01:01:05 +0000
Files and hashes: 1: uWNKx0IJVXvtTHYU4bkunZTjfuw.roa (hash: AUH4XmlqocQ9F/9lHvt0FvG+HzGfyUQaY0PdFUq9T4I=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: O9fYfyOtK7Vd8XsqawpmGlJbANIjMlKDkAx1ANhI9A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:47:6a:08:47:d8:c5:99:03:77:a6:ef:87:d6:7b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: Oct 3 01:01:05 2026 GMT
Not After : Oct 4 01:01:05 2026 GMT
Subject: CN=c9f8d4d549a37656e0b067f76fdf21b6ed662c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:87:58:56:d7:49:ae:9c:76:8a:24:b7:46:
3b:32:00:12:b6:97:84:53:53:a5:ef:41:6f:46:e3:
65:a1:dd:d4:93:d4:7d:e9:b9:58:58:1c:8e:a1:18:
f9:77:7d:05:2d:56:f4:db:fa:4c:f0:cd:e3:7d:38:
20:6b:07:8e:5b:86:a3:b4:37:a0:fa:58:4c:70:c5:
c2:35:ec:6e:20:79:a3:ce:b6:df:19:bc:96:7b:0e:
a3:3b:97:5a:66:5a:23:ca:87:07:db:ca:07:76:ad:
02:fb:75:63:07:37:c8:1a:84:37:9e:25:8a:aa:fb:
a3:32:68:c4:e3:12:65:ce:23:02:c9:b6:1a:08:9d:
b1:92:00:06:71:4a:70:fd:7f:7b:da:60:71:66:bf:
36:3e:31:48:f9:24:0c:a6:07:7b:80:c3:7d:c3:b0:
c1:ce:fd:82:e6:76:1f:56:f9:35:86:23:81:65:d5:
05:ea:05:22:f0:4c:03:08:7f:70:41:6d:1c:e5:4f:
76:4d:81:a6:c4:19:8e:2f:60:ac:25:54:6f:73:ad:
3a:35:1f:6e:1e:57:71:b3:54:63:28:99:15:55:99:
06:b2:fd:8b:f2:06:9c:1e:7c:d1:ba:61:7a:73:26:
19:f0:7a:fd:04:fc:48:01:60:5b:db:75:a3:a2:6d:
31:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F8:D4:D5:49:A3:76:56:E0:B0:67:F7:6F:DF:21:B6:ED:66:2C:11
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9d:ce:2b:6d:be:e6:3a:fa:34:ec:5f:ba:62:ab:42:d9:c9:
3a:f1:7e:18:39:66:8f:bb:f9:7b:bd:75:be:1e:5e:87:c4:d3:
06:c5:42:59:12:e9:e4:e1:65:b4:32:51:0d:78:05:dc:d8:4d:
db:30:cd:55:ec:29:12:0a:e4:29:bd:ec:1b:56:8f:0d:ea:51:
dc:07:10:41:66:b0:47:86:17:32:c1:02:1d:06:fa:58:ba:dc:
b8:8b:4b:8d:fb:26:a8:25:8e:21:1f:17:46:10:84:fb:1c:2c:
7f:0e:0a:05:ba:da:ee:c1:c9:00:cf:25:49:6f:37:41:f5:46:
73:0d:38:fc:7b:e7:1c:9f:14:26:90:99:b3:20:4d:87:4c:2d:
c6:a6:5a:9c:41:2b:0b:6b:c8:b9:1f:f1:75:a7:a7:07:9a:9f:
0c:ba:36:7d:36:9f:8f:cb:0d:ee:aa:e3:e4:0a:ee:a8:01:af:
8b:d3:48:d3:d9:3f:17:e7:d1:f2:38:b7:57:17:ae:d5:a3:12:
73:36:b5:f2:a7:08:16:be:80:6a:13:4d:51:64:87:d2:d6:0b:
cf:7e:d5:a0:8d:27:03:42:4a:bc:cf:23:f4:df:88:6e:45:cc:
04:54:9e:fb:a0:04:09:c5:1f:13:9c:85:09:3d:90:e7:52:de:
40:a0:cf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:39:12 2026 by rpki-client