Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: v43Vz4sby7S+Y5utqtF4O3+13eBDnZwhQ+6XxwyBoLQ=
Subject key identifier: 85:88:07:9C:07:60:EB:3B:63:7C:0F:51:A3:F4:80:B8:BB:9E:2E:43
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 01A0DCBB9F36E189BEB82A7148D5337465BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 08:01:18 +0000
Manifest this update: Sat 26 Sep 2026 08:01:18 +0000
Manifest next update: Sun 27 Sep 2026 08:01:18 +0000
Files and hashes: 1: 8bjq5CLAkMYnJtGthdYrockLCPY.roa (hash: eDG4zg9ilYUKjh0gJA5+ITJl6INuXH1V6df209hapIs=)
2: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: 3zWkqzzkmDXtIKM/l8Zx+obnlEzX5ZN3aNIfEBs6kys=)
3: y6q-4aOfHflX0pozAnd7z21SiEw.roa (hash: BNrcMKA3+AgY/9eYfHPZuG3AM/va4c4zSTiZb/uHiLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:9f:36:e1:89:be:b8:2a:71:48:d5:33:74:65:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Sep 26 08:01:18 2026 GMT
Not After : Sep 27 08:01:18 2026 GMT
Subject: CN=8588079c0760eb3b637c0f51a3f480b8bb9e2e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:fe:1d:ab:f1:9d:30:07:5b:ff:37:60:95:
c1:76:80:45:01:cb:1f:92:21:97:f4:73:3b:13:e1:
78:ec:f1:a8:73:69:57:9a:cf:ed:1c:55:04:8e:6b:
f5:19:b6:76:7f:5b:01:fb:df:dd:02:a3:51:af:5a:
22:93:c0:35:ce:8d:60:1b:ff:c1:96:b1:e3:76:5e:
b1:37:12:ca:a2:33:bb:14:dc:24:ca:45:9b:fb:61:
83:0c:0f:bb:8a:3b:1e:79:e6:d6:10:09:9a:60:fe:
7e:09:d8:59:c9:d4:c7:78:65:0f:ed:72:f5:61:77:
1b:45:78:bc:30:d1:ed:92:af:27:10:1f:e8:18:84:
59:01:c5:fe:9e:d0:2d:18:50:09:ac:99:9c:d1:63:
ff:88:20:1f:63:37:38:2d:6b:80:42:19:6f:eb:ec:
11:86:3a:fb:8d:08:c6:d6:fa:03:11:5c:52:1a:fe:
3c:61:64:c5:99:e1:ad:14:11:e8:33:24:d7:10:cc:
8f:19:4f:63:4c:0a:87:aa:42:36:5a:80:b5:ff:bc:
1b:69:65:2b:6b:d5:40:fa:4c:80:da:4a:9c:6b:81:
f5:23:df:3d:a0:75:00:98:6b:e2:4f:af:31:04:7e:
d6:22:48:5d:f0:d2:90:35:45:c4:87:c6:c8:a4:37:
39:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:88:07:9C:07:60:EB:3B:63:7C:0F:51:A3:F4:80:B8:BB:9E:2E:43
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:e3:4b:29:4d:59:27:5d:9f:1e:4e:db:97:b7:4c:da:94:69:
6f:61:b4:a6:36:e0:61:d3:79:e0:49:f1:86:17:52:31:47:c3:
71:8b:29:bd:65:09:9b:ca:3b:1d:3b:9d:50:ef:43:46:1d:69:
b7:a0:62:9d:09:9b:19:2f:21:0d:94:82:3c:bb:ef:d1:bc:49:
57:98:df:e1:51:49:91:20:11:b1:7c:aa:32:72:84:3e:1e:af:
b1:b5:38:af:3b:3b:95:10:66:bc:8b:10:6c:73:b1:ec:16:2d:
11:7c:39:28:d7:07:aa:21:70:d2:c5:43:87:d9:83:44:06:99:
a2:a3:35:d6:1f:58:a0:a9:28:8a:30:26:11:cd:c6:2d:6e:03:
07:da:ee:08:c0:35:65:0f:05:b1:1f:c6:30:84:bb:21:d7:3b:
21:1d:8a:ef:1c:a2:62:65:ac:44:2f:0e:82:e8:88:ec:93:35:
fc:c8:07:2f:09:01:7a:d9:1f:9f:5e:1b:fd:f4:71:fe:ce:9b:
6c:13:75:6f:3d:ac:f0:8c:d0:47:e6:7f:0e:22:63:61:04:41:
80:10:e4:73:7c:61:bd:83:a4:c0:12:f6:a7:d0:b1:ce:f4:c1:
fa:8e:95:d7:77:07:55:c6:11:de:36:47:67:07:f9:14:e1:bb:
e6:86:e1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:07:58 2026 by rpki-client