Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
File: xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft (raw, json)
Hash identifier: 0JIhYKqLWi0d89oLj0ENkXrhy3tvjv8DAKKEUlWB1tY=
Subject key identifier: A2:DD:32:9D:F8:B2:00:1D:F4:14:10:88:33:53:E3:A3:C1:45:B3:D2
Authority key identifier: C4:3F:C6:B1:40:77:53:93:FC:33:69:AF:3D:0B:CE:20:C4:3E:5D:5B
Certificate issuer: /CN=c43fc6b140775393fc3369af3d0bce20c43e5d5b
Certificate serial: 01A0EC9CB8B8EA9F918758C065F7B2E78678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
Manifest number: AC
Signing time: Tue 29 Sep 2026 10:01:28 +0000
Manifest this update: Tue 29 Sep 2026 10:01:28 +0000
Manifest next update: Wed 30 Sep 2026 10:01:28 +0000
Files and hashes: 1: Wc_H_BQm_T1przFaClfQ_aiSbiQ.roa (hash: MkPhhtBoGp/lssKXEDwA7t5KV65sjPCdBtv5VeMIgt0=)
2: X1apZ7-7CuoQuH1lprwDvLaAj_o.roa (hash: bKHCrK9Bl7HPkt4FDfJna4GmZEpO2EsOS5LM/0L3EJs=)
3: xD_GsUB3U5P8M2mvPQvOIMQ-XVs.crl (hash: V3cvT6TLwuQ3M1TC8skmcqianVF5mM2TY5P43mHdkoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9c:b8:b8:ea:9f:91:87:58:c0:65:f7:b2:e7:86:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43fc6b140775393fc3369af3d0bce20c43e5d5b
Validity
Not Before: Sep 29 10:01:28 2026 GMT
Not After : Sep 30 10:01:28 2026 GMT
Subject: CN=a2dd329df8b2001df41410883353e3a3c145b3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a9:cc:dd:c6:36:3f:86:3a:45:57:b3:85:eb:
4c:16:15:61:51:fa:9d:db:2d:a0:55:3a:df:55:22:
b0:c0:21:57:6d:39:83:9c:62:e1:43:44:06:e5:de:
da:83:8b:d7:c3:d3:3d:99:ad:12:2f:d3:b7:db:1f:
dd:71:89:c7:b4:ed:f2:46:06:96:07:f0:69:58:5f:
f4:7d:4d:e3:b6:e1:d0:ef:b7:3d:91:23:c4:5e:22:
34:6d:3d:50:de:37:c4:02:24:5c:3b:17:63:87:c0:
48:88:a1:0d:5f:4b:f8:10:46:d7:e1:ef:c5:ee:83:
a4:d4:1f:20:6a:80:09:dc:da:92:ba:c3:80:67:41:
fb:e0:2e:28:97:db:e8:b2:e1:00:eb:6a:07:0d:81:
91:c6:e7:15:1a:2c:3e:61:ae:b0:ec:66:69:66:1f:
fe:9f:10:e6:e5:96:ac:35:33:31:cc:b0:54:bd:2f:
c6:55:14:8a:94:ad:a5:d2:ea:37:b6:f0:e7:09:ce:
4c:fc:92:71:df:2f:73:85:dc:d9:d7:77:b5:b5:c6:
29:c3:b5:5a:48:a8:65:ab:a0:7f:04:9b:98:74:9b:
8f:9a:7a:18:ff:e0:ec:e9:70:48:4d:ba:e7:c5:10:
98:cb:0d:8b:d2:fc:e3:f1:ee:e9:2f:93:b8:42:63:
24:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DD:32:9D:F8:B2:00:1D:F4:14:10:88:33:53:E3:A3:C1:45:B3:D2
X509v3 Authority Key Identifier:
keyid:C4:3F:C6:B1:40:77:53:93:FC:33:69:AF:3D:0B:CE:20:C4:3E:5D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ae:6d:16:bd:88:6a:dc:53:53:76:3a:f7:67:1f:85:ef:a4:
51:19:4c:39:18:ce:93:42:a5:04:6e:fc:3e:31:1e:ea:d5:6a:
7c:e7:57:23:35:3c:bb:52:39:d4:7a:2a:02:84:d3:c9:9c:32:
fe:49:91:a6:be:64:2f:59:e6:e1:ab:4b:59:8e:c2:14:ab:a3:
2e:92:c3:80:ce:49:87:10:7a:5e:a0:7a:79:56:85:94:e2:98:
19:c0:72:db:f2:3a:af:c8:3b:9d:cf:f3:df:05:d5:d5:ce:5f:
c8:f3:1c:93:5c:0e:28:14:58:34:d1:97:b6:39:44:8d:21:6a:
ec:e3:4b:cc:c5:83:17:23:09:d6:71:c7:ed:f5:e1:12:74:4b:
1f:65:de:e0:d4:4e:5f:ad:47:36:6c:fb:1c:b5:c8:b1:87:0d:
9d:5c:d1:4a:38:06:53:58:05:35:66:9c:84:15:05:f6:f8:29:
6c:00:ed:4e:90:17:d0:26:2f:c9:5b:40:6e:45:03:cc:55:c3:
f7:3c:61:07:bf:f8:fc:5b:ff:57:74:42:2c:87:8a:3b:58:7b:
50:fc:82:c5:81:6a:c9:6c:af:1b:7c:e6:e6:aa:1a:e4:cf:e1:
16:79:5f:de:1a:7c:1a:b6:33:44:ff:7f:40:e7:7d:b1:a1:bf:
8f:ce:8e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:00:50 2026 by rpki-client