Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: ccVnvWnXRFaKaBowCnSCKGfIiWrn6wfZTGq4a02U2Dw=
Subject key identifier: 18:D3:46:28:A4:85:FE:07:24:50:B7:45:2F:02:73:3D:FB:7B:CC:E6
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 01A0D9BB391474A8B42F29AC826A2056D4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 18:02:00 +0000
Manifest this update: Fri 25 Sep 2026 18:02:00 +0000
Manifest next update: Sat 26 Sep 2026 18:02:00 +0000
Files and hashes: 1: pl4G0drpVsiUnTNv0aNJRxAq40Y.roa (hash: TIrmY5F1mz/rcq5o0AaF7KuNyHFmI5rxVVBApqp6+Ig=)
2: uCT5qS0TatwLKR2syBgBgC34NYE.roa (hash: 6Pav0LB8Y/JGRbLI7vMShFMSStiFyP+H+ECIrWK519s=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: BzuPTs1VcIHbzpRR820tTgeTbhXbB6cJEEDy40gCg3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:39:14:74:a8:b4:2f:29:ac:82:6a:20:56:d4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Sep 25 18:02:00 2026 GMT
Not After : Sep 26 18:02:00 2026 GMT
Subject: CN=18d34628a485fe072450b7452f02733dfb7bcce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bf:59:2f:ea:b7:88:b4:e0:3c:08:0c:aa:73:
c5:f4:b4:a9:6b:5b:a7:71:08:ef:11:c2:72:26:b3:
38:30:14:3e:3f:bf:75:05:d9:9f:b0:4b:28:98:d6:
2a:3f:82:89:ec:70:a9:4a:b7:3a:29:22:78:67:ce:
ec:4f:d2:b2:86:46:ce:48:33:d1:d0:cd:ec:01:34:
15:de:e9:ba:18:d4:d9:50:ab:d5:ce:fe:bb:e8:25:
d7:57:af:fb:c9:46:6f:0a:04:5d:54:99:bb:66:b0:
48:59:f1:af:a7:7b:c5:60:fb:9f:db:23:2a:d3:13:
3a:be:0b:9b:37:d4:ec:f0:83:72:2d:17:a2:91:b7:
1b:20:80:41:75:26:64:da:c4:76:4c:1a:7d:d2:ea:
11:e9:0e:55:bc:ce:a5:36:86:36:6e:73:90:be:69:
45:a9:c2:cf:5e:70:36:0a:ed:21:91:c3:ce:3f:cf:
3b:7b:5f:4d:6d:4c:f7:9b:1f:d2:c3:5a:59:50:0a:
99:56:ef:1c:80:da:62:db:b6:4b:13:77:c7:c0:1a:
40:36:ab:59:b7:eb:4d:1e:98:b6:d7:41:01:3a:28:
17:97:2d:5a:52:89:d6:d9:10:7a:1e:60:ef:e4:30:
e8:66:f7:c2:9c:07:d5:ee:9d:2c:1e:01:6e:8f:21:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D3:46:28:A4:85:FE:07:24:50:B7:45:2F:02:73:3D:FB:7B:CC:E6
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e1:61:c7:7e:a6:16:c0:e5:64:39:b3:11:b6:bc:38:da:14:
56:eb:4e:66:4b:aa:d0:c0:df:52:b1:c2:9f:b7:d5:e7:5c:ed:
6f:5f:b8:2a:f3:52:10:df:05:27:e5:c5:50:b5:ce:3b:4c:d0:
39:cd:56:b1:95:ea:8c:9a:d5:c0:a8:73:ec:aa:e2:8b:a6:d1:
14:55:1d:01:b7:59:fb:50:29:9b:e0:8b:3e:ca:20:73:60:a2:
0f:fe:12:d5:4d:f8:61:73:1e:07:fd:b3:12:58:9f:d3:81:6c:
82:21:73:82:4d:3b:99:6c:76:47:29:76:32:ad:ef:7c:03:a8:
0d:cc:62:fa:5e:93:f1:31:6c:19:9b:ba:b7:7d:e6:3b:8b:23:
80:33:76:a4:d3:f8:2a:48:58:43:02:ce:8b:f2:a1:4b:50:46:
be:83:cd:b0:d1:1b:0c:9d:e8:cb:30:c1:85:67:ee:88:fd:6d:
92:0c:b7:e9:59:47:86:3a:49:a7:f2:1b:11:37:cb:5b:7a:e4:
bf:fd:75:93:93:6b:4f:2e:1e:9f:16:ce:8d:0a:c8:fc:c1:79:
e1:fa:d0:47:78:da:e4:03:5d:0e:85:93:7b:42:91:7b:b6:86:
25:30:e1:2a:1c:61:70:92:2e:b0:e9:21:08:28:bb:6a:8d:b2:
58:d5:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:00:23 2026 by rpki-client