Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: XXJwLqysmBn9B0FeVVbXdWhTy+fuIytNGb0c9OvaqqA=
Subject key identifier: 7E:4D:8B:15:D6:BC:A7:84:7B:78:A3:B4:0D:85:F5:0A:C7:ED:4A:96
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 01A0DEAA32AA36D673C92082D08B360C8C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 1A7E
Signing time: Sat 26 Sep 2026 17:01:31 +0000
Manifest this update: Sat 26 Sep 2026 17:01:31 +0000
Manifest next update: Sun 27 Sep 2026 17:01:31 +0000
Files and hashes: 1: Kd-PJMG0I6gP3eU-IVUAKt_gccg.roa (hash: guDscC6GtnjjQhv/AcT64xIdqM0iuOGm1U4WIDOTt8E=)
2: lSFi-1eTKmeoYvO7iogn6X4tIpU.roa (hash: //ICRxBUp7hn0Q5ceoMLISlFLfZ4l/LvL7doeO/ruS0=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: o6F95r+q2nPUgMhUQCG84Uj3awl8J4gvEdUU2LwEAT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:aa:32:aa:36:d6:73:c9:20:82:d0:8b:36:0c:8c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Sep 26 17:01:31 2026 GMT
Not After : Sep 27 17:01:31 2026 GMT
Subject: CN=7e4d8b15d6bca7847b78a3b40d85f50ac7ed4a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4e:8a:1b:b2:50:7c:c6:9d:ce:77:9b:4a:13:
88:67:85:1c:3c:ea:72:0a:2c:f8:2c:e0:0d:bd:d1:
af:c2:fd:03:f5:b1:1c:87:a3:44:35:4e:68:84:22:
9f:5a:53:48:52:5a:33:c2:66:98:b4:db:c6:3c:90:
16:21:e8:1e:73:e7:07:07:4b:0f:3c:21:83:ba:57:
93:77:6a:1c:6f:25:c4:d9:b6:b5:36:cc:c0:f2:61:
6c:b9:84:16:9c:7b:61:8c:f8:e6:2e:22:97:24:78:
44:f1:5e:d2:dc:b0:a5:a6:fd:9a:1a:5f:1c:9c:ba:
8c:21:76:b6:16:b3:3a:31:03:2e:19:82:69:af:22:
46:fb:f9:cc:2f:af:c4:25:5e:b5:a2:cc:f5:3f:0e:
8f:ec:fe:19:8e:dd:53:a3:d5:11:d1:8b:22:2b:c8:
a9:fa:f0:e8:d9:55:2e:99:08:c5:da:49:59:28:47:
8e:a2:53:80:6b:0a:a5:54:15:43:f5:24:ca:c6:a1:
d6:b6:83:60:70:f8:61:f5:bf:db:7d:6f:42:fd:86:
d1:79:d2:48:92:89:5f:4a:f2:6e:95:d8:bb:98:d9:
4d:5a:9c:d0:ad:91:0d:b5:03:bb:09:14:9e:02:a6:
03:ef:4b:5e:d9:99:de:eb:44:3b:9d:22:6e:e5:8d:
ff:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4D:8B:15:D6:BC:A7:84:7B:78:A3:B4:0D:85:F5:0A:C7:ED:4A:96
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:03:01:5b:b9:b0:42:68:b5:7b:54:05:61:73:35:d5:cf:59:
77:5c:56:34:da:a5:7b:52:2f:07:91:8c:06:6b:93:4a:aa:3d:
c0:87:68:81:a9:a1:7a:0d:16:b8:ed:a1:5f:af:7e:98:35:4d:
e4:0d:74:3d:0b:4a:cd:7b:cf:b1:22:c0:27:49:1e:b8:90:72:
7c:93:59:ad:71:1d:6d:54:8f:d6:6d:c5:a0:97:ba:ab:3c:ea:
9e:da:40:18:5f:6f:fa:f5:e4:78:b2:50:84:82:e9:5e:01:b3:
f2:ff:42:2e:49:27:ce:11:8d:6a:fd:5e:50:92:86:69:46:92:
82:43:36:bc:5e:1a:53:1f:7d:a9:75:fd:51:fb:3f:e2:d9:39:
c0:31:67:86:12:9e:86:5b:a5:72:70:55:01:9d:c3:89:5c:8c:
a9:7d:d5:02:b5:aa:79:00:d4:78:ab:76:d3:47:cc:6b:0c:f1:
1d:16:56:e2:be:e2:24:e5:00:97:cd:5b:c3:40:9f:c2:12:76:
7f:9a:8c:b8:f0:bc:3e:37:84:95:1c:4e:ce:21:79:43:0f:9a:
3d:78:c5:f4:de:dc:25:7a:db:29:e2:32:72:23:c5:bc:8e:bc:
33:c3:4b:1e:31:3e:cf:73:03:c3:10:37:53:70:a9:5d:f3:d4:
dc:d3:1a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:27:02 2026 by rpki-client