Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: EjNCJfjkWEvF65rGvwyJcWLKA1RR9B6GVRqgWIZTyC8=
Subject key identifier: DD:AB:FA:0B:AD:DC:49:1A:48:0D:48:66:8C:FB:4E:0B:8D:68:9C:CC
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 01A0E551DB1CC54F183D541A2F36105D3504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 1A7B
Signing time: Mon 28 Sep 2026 00:02:21 +0000
Manifest this update: Mon 28 Sep 2026 00:02:21 +0000
Manifest next update: Tue 29 Sep 2026 00:02:21 +0000
Files and hashes: 1: YJVBg6yi8rhbBJuxWKJ7v5Xiat0.roa (hash: Hyd6ST+4DY0Ptd4aJ86bVxwbS75QcKsP6VrnesIx1WI=)
2: __9VedluN1sWd7ruf5_gxA1gv9U.roa (hash: 9+zLsshZreT9h4dF/gegkgeeA5ROS1Ql2Nv3i9Zy+8U=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: bxf4carGXYq6jK3tHeglKqsucDhL6ryxnKvxsjMqdH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:51:db:1c:c5:4f:18:3d:54:1a:2f:36:10:5d:35:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Sep 28 00:02:21 2026 GMT
Not After : Sep 29 00:02:21 2026 GMT
Subject: CN=ddabfa0baddc491a480d48668cfb4e0b8d689ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:30:b4:fa:ad:84:e3:ed:83:94:43:bd:01:43:
66:f7:f9:18:a9:b6:b9:c5:38:9c:9d:3e:1a:0e:e7:
ed:52:b5:ea:a6:10:d3:e3:0a:07:e4:12:be:3b:5f:
52:66:e2:64:29:3a:82:91:64:03:17:d5:54:cb:2f:
2f:e4:b9:fa:48:89:c6:a4:29:22:97:3e:58:72:56:
0a:41:49:80:a4:f3:d3:72:1d:54:c8:d9:89:a8:ec:
a2:76:8f:1d:c4:cd:04:0b:cb:e9:9f:7f:f1:38:14:
da:7b:5a:a4:75:6c:47:fa:6d:f5:dd:8c:07:dc:88:
a8:f1:7a:75:02:5e:93:a9:db:80:82:06:5e:02:28:
cc:83:3e:c8:e9:17:77:10:6b:ae:86:bb:c0:5b:2f:
84:bf:0d:37:02:6b:d3:bf:0d:e5:41:09:d3:0f:a1:
0f:f6:24:3f:15:16:91:2b:c6:d0:fb:34:ef:01:1f:
26:88:77:0a:7f:c8:a0:70:06:f8:05:6c:9a:43:e7:
c6:0d:6f:30:9e:13:42:3b:18:ee:9d:1a:b3:33:27:
50:ff:b1:5f:3e:f4:83:8b:05:46:62:6c:ea:75:91:
b6:c4:69:fb:9d:4a:c3:8d:1d:8a:f3:f2:93:e7:11:
d9:65:48:1a:57:70:ee:76:fc:bd:97:b8:a0:97:26:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AB:FA:0B:AD:DC:49:1A:48:0D:48:66:8C:FB:4E:0B:8D:68:9C:CC
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2d:f5:b4:77:b9:8c:be:df:c8:82:ad:45:ba:48:fe:49:40:
3a:a7:ff:4c:dd:72:1a:5a:47:b4:fd:55:6d:d5:41:31:6d:60:
1a:6d:32:ef:9f:29:44:c5:c7:a0:d4:77:cd:94:9d:f3:df:74:
b5:17:2f:98:6f:21:85:6c:83:cb:8c:0f:5a:8e:a0:99:67:25:
77:35:14:d6:41:3a:45:20:63:9e:d9:e9:e5:54:99:a9:1e:a4:
0e:aa:96:12:88:92:02:3e:fb:73:b2:62:be:b8:38:97:36:21:
53:bc:cd:30:89:18:b6:63:a7:2a:7f:91:ca:ae:5d:21:08:3a:
45:03:94:23:52:85:66:43:a1:c3:2b:88:41:ac:71:aa:c2:a7:
c3:10:36:d7:95:20:fd:49:94:b0:de:46:be:ea:83:86:64:06:
6c:17:bf:55:fc:02:68:3f:92:06:b4:0e:81:5b:30:5e:7c:6e:
d0:81:65:d7:b2:0a:45:54:17:da:a4:d0:50:b0:1f:0d:e6:00:
d6:02:1c:e9:4d:7a:13:54:d2:24:88:ad:7d:82:fe:ed:fc:5e:
59:82:84:b6:6d:ec:7b:b3:83:b0:b9:fa:ac:4e:62:0f:d3:7a:
3c:82:21:5c:a4:bf:e4:28:25:65:c1:20:37:bc:8a:bb:40:67:
a1:a2:e2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:17:41 2026 by rpki-client