Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier: t/CQPTjdzH0yFl+hAd2CUbEEH5PJMqz0+ptvT99bPnQ=
Subject key identifier: 9B:72:74:2D:A7:70:6F:6D:BC:AE:61:52:A7:6E:EC:24:C0:16:8C:B9
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial: 01A0D916D785ACF263632AC5477F53D921E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number: 1239
Signing time: Fri 25 Sep 2026 15:02:27 +0000
Manifest this update: Fri 25 Sep 2026 15:02:27 +0000
Manifest next update: Sat 26 Sep 2026 15:02:27 +0000
Files and hashes: 1: XfPxNqw04f4ysUNycil0EQofl1M.roa (hash: JClRzQorRQbXDP0L/PC7A7JxisEaLLPV1aRUiLTnBv8=)
2: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: hOsljCs86wgL2E+G3y3OOqmsZhkTgkpx82ePMO9B5Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:16:d7:85:ac:f2:63:63:2a:c5:47:7f:53:d9:21:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Validity
Not Before: Sep 25 15:02:27 2026 GMT
Not After : Sep 26 15:02:27 2026 GMT
Subject: CN=9b72742da7706f6dbcae6152a76eec24c0168cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:b0:b5:ad:96:aa:9b:41:2a:a1:94:8f:00:
17:d5:d8:61:bb:96:56:03:cf:dd:b8:d0:1b:1c:55:
0f:3e:bc:42:d1:20:67:2c:89:73:f9:51:8d:4d:42:
f3:b5:33:bc:25:99:a8:1b:69:7b:85:ca:35:90:55:
f5:9d:4c:b6:2c:d8:41:a9:21:64:1e:02:4c:d1:9b:
95:a4:dd:f2:29:80:a0:aa:cb:4c:a3:d2:57:86:4d:
4a:f1:a3:de:81:b8:2f:2d:6c:bf:78:47:84:bc:20:
01:62:07:d0:7c:5e:8b:81:cc:96:2b:da:65:e4:ba:
83:c5:09:68:b9:56:87:c1:4e:e0:52:d9:93:39:4e:
39:73:de:c9:29:d4:98:97:5b:3f:31:58:c8:40:07:
c4:0e:e0:a1:d1:b9:6c:d0:8c:dc:cd:34:2d:c1:3d:
b5:f4:24:10:91:f2:59:aa:6b:e3:7a:e2:62:92:ea:
a9:9a:32:ce:99:c5:b4:e5:fa:83:b5:d0:0a:d8:34:
e9:f9:4b:95:90:11:5a:42:f1:aa:08:32:8c:e2:4d:
09:0c:7a:15:ff:b7:98:8b:b0:01:1c:a3:ef:af:fd:
58:58:95:7c:ec:50:72:6d:09:9d:e8:77:32:fd:8d:
8a:79:b5:f3:ae:4a:29:22:7a:7f:4f:89:8f:cb:e1:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:72:74:2D:A7:70:6F:6D:BC:AE:61:52:A7:6E:EC:24:C0:16:8C:B9
X509v3 Authority Key Identifier:
keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2c:27:de:85:f9:ec:08:7c:40:3c:70:54:d6:bd:ff:62:9c:
f6:08:39:96:1d:d2:9b:91:d3:8f:90:b3:bf:88:3e:91:bc:29:
84:df:af:0d:22:71:ab:f4:0e:f0:76:78:1e:71:a1:10:01:29:
e3:90:ec:e0:a6:ee:43:54:e5:bb:f2:ca:ad:28:b0:8d:03:f2:
8a:53:3b:2c:ff:ca:3e:39:56:e4:56:ce:91:ae:9f:ec:d9:9f:
50:09:b3:ed:b8:5d:34:ee:8e:33:54:1c:eb:8d:ba:0b:d1:6b:
6a:4e:d6:4d:b7:ea:29:9c:d2:b7:12:ed:92:bd:dd:5e:c4:ad:
41:e2:45:4b:22:3a:9d:ca:f8:db:78:e2:17:2d:fe:90:66:34:
e0:82:58:d6:7b:86:71:e3:62:87:55:e8:92:6e:15:24:19:1d:
09:8a:9f:d6:85:8b:2c:0f:f5:c3:75:37:63:12:c7:fe:44:d7:
c4:8d:f5:b7:97:3c:63:d7:0a:26:00:83:2b:3e:35:58:fe:3f:
67:2d:63:4e:44:09:41:55:5f:b2:6c:a8:5b:26:0a:a6:3d:b3:
98:d2:39:06:8b:07:fc:85:d5:b1:5c:84:2a:4e:c9:40:42:c9:
56:34:56:e3:13:65:f0:84:2a:2a:34:a9:16:f3:6c:81:7f:d3:
b9:56:6c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:46:23 2026 by rpki-client