Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
File: xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft (raw, json)
Hash identifier: 1uhj0CV+HT9XZrLSLoL7j/6gFcVewHmwHew9XqNN8h4=
Subject key identifier: A6:81:F5:A5:E9:89:01:FD:44:8E:36:09:34:DB:2F:E6:1E:B7:A3:B9
Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
Certificate issuer: /CN=c59c41daf0092b703bc059ba1353f071ed12199b
Certificate serial: 01A0C17B4C0B7A053F13AA47A286F1C0B4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
Manifest number: 19F7
Signing time: Mon 21 Sep 2026 01:01:18 +0000
Manifest this update: Mon 21 Sep 2026 01:01:18 +0000
Manifest next update: Tue 22 Sep 2026 01:01:18 +0000
Files and hashes: 1: 8cS6Qj5MYE4B8boPnbZ2kcXbU-k.roa (hash: AKR29eJxFVsOMPaiI3uGdOD049mIqIl+nuPgud2mgtc=)
2: xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl (hash: 1GLXnca8wvzhwoK8oKOTAWx7KuNXgcNPG+8yCaslXVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7b:4c:0b:7a:05:3f:13:aa:47:a2:86:f1:c0:b4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b
Validity
Not Before: Sep 21 01:01:18 2026 GMT
Not After : Sep 22 01:01:18 2026 GMT
Subject: CN=a681f5a5e98901fd448e360934db2fe61eb7a3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:a7:6d:03:5b:ff:d2:cf:63:f7:0e:ab:cf:
a2:ee:e2:9a:2c:f2:d7:0a:96:a6:bd:1e:84:1a:8d:
de:50:fa:46:83:f5:07:3e:71:f5:69:a3:7f:39:82:
47:05:54:18:a7:cb:81:54:35:1c:c7:ac:b1:35:2a:
fb:63:c0:5f:60:06:a7:0a:4f:9c:92:2a:84:c3:76:
7f:cd:9f:a1:2a:9e:4b:9d:da:73:a3:f0:69:90:15:
80:19:b4:60:aa:e9:09:cd:ac:17:be:1a:4a:0a:a1:
94:70:74:f5:15:a2:ef:ef:79:9d:cb:e9:00:24:7d:
23:17:ab:f0:94:78:3c:49:8e:17:ba:d1:44:e5:ae:
04:9e:57:bc:be:c8:9a:e5:98:6d:61:95:62:95:11:
91:60:5b:05:f6:c3:cd:08:55:bd:b4:8b:5a:5f:c1:
52:6f:06:b4:81:4a:d4:ad:f4:e3:7a:c7:e3:b8:48:
a2:9d:7b:ad:29:e4:31:cf:44:b0:42:e8:92:54:7c:
e4:7e:3a:af:bd:ef:81:eb:96:2f:54:68:bd:95:af:
ce:2c:cf:38:f5:f2:47:b2:22:ea:a6:0c:db:d7:b3:
9d:1f:bb:ea:bd:b0:99:08:29:21:3a:93:fe:70:e7:
68:7d:d4:88:0c:d8:a0:f3:3d:53:af:04:68:f7:6c:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:81:F5:A5:E9:89:01:FD:44:8E:36:09:34:DB:2F:E6:1E:B7:A3:B9
X509v3 Authority Key Identifier:
keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e2:cc:b8:44:6c:98:71:fe:1c:20:2e:96:57:a3:ab:5b:a0:
db:73:d9:fa:5a:64:13:6f:22:b0:b6:a3:df:7e:43:9e:90:e9:
f5:00:2f:49:2a:aa:af:7e:26:9e:f3:cb:d0:19:7c:bf:bf:3a:
ec:fa:f4:9c:00:b6:46:69:85:53:4b:84:84:92:16:d2:95:a7:
50:dd:41:30:7d:0e:10:22:4c:6d:4b:2f:a1:49:62:9d:22:de:
cc:1d:fb:91:22:8a:04:ff:a6:88:7a:13:a0:04:0e:52:26:2d:
de:d3:bf:5a:34:e5:93:64:9c:78:21:2f:a0:d4:5e:c8:39:eb:
ac:09:7e:ac:b4:de:b4:de:ca:e7:7c:29:fa:68:6e:64:29:bb:
93:6c:0d:6a:9f:64:60:db:ee:a7:4d:50:6d:e5:2c:2e:c6:1e:
8a:d9:38:6b:a6:20:76:fe:b0:81:d8:51:64:16:be:3d:cd:86:
fa:83:8d:50:92:24:2b:c6:59:67:cd:03:12:5e:bd:cb:5d:f7:
3b:f5:14:a4:5b:46:5e:3a:c1:d6:57:5e:42:20:2f:83:c3:09:
19:0b:8e:a4:05:31:e0:76:14:7a:8f:0a:05:97:06:ad:58:e3:
1d:c9:e4:4a:af:ff:fa:7f:0e:06:d4:ca:d0:0a:cd:5e:8b:18:
ac:2b:94:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:31:01 2026 by rpki-client