Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: hxxS5Vt2Xq0QGBVQC+Sodc+3RnZ/bGPZL/TYNcSF1oA=
Subject key identifier: C4:F3:57:9E:26:3D:74:5A:FF:C8:20:1E:29:59:73:2F:D8:1F:73:F7
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 01A0DB3B03DA2A42954168D3C4F8162DF7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 17DF
Signing time: Sat 26 Sep 2026 01:01:12 +0000
Manifest this update: Sat 26 Sep 2026 01:01:12 +0000
Manifest next update: Sun 27 Sep 2026 01:01:12 +0000
Files and hashes: 1: UTl2oEnM6aCF2kpB7Ff9DjUy06E.roa (hash: 0Pi09oTT2Bs/Jp2BUgsBTNW54DORQjFSQtJ6rpxdYR0=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: 66fjiHzckLDuDQZPNCdaFwx58ad8f6UedBxFZc3xUkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:03:da:2a:42:95:41:68:d3:c4:f8:16:2d:f7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Sep 26 01:01:12 2026 GMT
Not After : Sep 27 01:01:12 2026 GMT
Subject: CN=c4f3579e263d745affc8201e2959732fd81f73f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:59:0b:b3:4e:f0:c4:ce:69:23:10:df:48:
de:2c:f0:c2:9d:eb:fc:fc:36:65:73:49:eb:bf:61:
19:ad:f6:2b:d7:18:3a:10:57:9c:36:91:ff:ba:b6:
ec:3b:b6:9b:86:3c:74:cf:4d:4a:33:bb:1b:2a:7b:
22:75:b9:7a:92:76:ae:c7:83:33:7c:30:6b:2c:eb:
31:fe:f4:dd:87:3b:76:77:2e:e6:df:ac:62:2d:33:
56:b8:5c:37:65:0c:fa:eb:22:7f:50:64:0f:79:ed:
ab:1e:c8:79:4c:9c:80:a6:83:ea:09:93:90:0c:76:
e0:5b:a2:37:17:81:34:6e:87:97:3e:f5:a5:86:dc:
ef:0b:84:ce:34:4c:fc:37:6e:83:a2:92:fd:b3:2b:
6a:5d:de:3a:5d:87:59:0b:06:c7:68:56:66:0f:12:
f1:6d:d9:b3:97:a6:c3:30:73:50:77:08:88:87:b5:
a5:df:26:02:8d:e5:a8:14:b6:50:7d:57:4c:fe:b5:
08:be:6b:f6:6a:a3:0f:71:85:de:da:2d:0c:29:94:
a1:11:56:0c:3a:cf:6a:fc:75:5c:66:ae:a3:30:2d:
57:6a:be:88:e2:dc:a1:37:a7:79:41:e1:52:ce:4c:
54:c5:0b:fa:9c:64:74:e1:75:d5:4f:61:8d:8e:1d:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F3:57:9E:26:3D:74:5A:FF:C8:20:1E:29:59:73:2F:D8:1F:73:F7
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bb:11:93:20:ce:09:06:dd:db:35:54:2f:2f:8a:fc:e9:16:
8f:a8:29:d8:a5:9c:63:09:64:98:da:47:51:b7:2e:79:64:38:
b8:8c:4d:7d:7a:ff:34:92:67:9c:76:f2:27:b6:c8:b1:e4:bb:
43:e3:48:ef:dd:06:2e:d0:b1:44:51:b4:a0:42:21:81:70:51:
97:eb:1c:6c:d4:92:30:03:5f:59:3a:89:39:b9:17:ec:5e:20:
d3:fa:21:b3:19:9b:cb:c5:43:60:69:0b:42:c4:1c:57:6e:2a:
06:99:fd:ce:a1:e6:13:9a:b1:bf:e8:b4:20:d7:55:a2:b1:0a:
6a:e7:5b:07:86:31:20:93:e1:d5:8d:c7:f0:3d:66:7d:6d:eb:
e0:9e:07:2d:37:46:fb:fd:ec:84:ef:59:65:77:d9:db:ab:c6:
74:5f:86:ae:10:a9:da:ab:46:7d:04:c8:b7:f3:9b:7e:ba:99:
cc:ff:d5:6d:56:d4:8d:ac:23:97:41:24:e9:73:91:73:c4:d1:
4a:47:9d:d5:35:e2:45:bb:fc:ae:22:78:80:5a:0f:c3:9d:b9:
8b:bb:5c:b3:f4:1e:5f:0f:6b:51:30:09:ba:35:0e:fc:59:d5:
1f:85:c0:13:49:a0:a8:da:62:84:d2:80:69:36:42:6b:9d:21:
d1:8f:a0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:17:51 2026 by rpki-client