Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
File: xU9qEXeCbFq2S9OvATiptXpLkeU.mft (raw, json)
Hash identifier: PDLyidqU17ss8emhjuwIHDDrC24WH31seo+L8JIq+OU=
Subject key identifier: B3:36:42:0E:39:67:DA:B5:3D:D4:62:4F:8B:FC:7C:21:49:3A:EF:D4
Authority key identifier: C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
Certificate issuer: /CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Certificate serial: 01A0C40DB514003BD896DAB17001C986F6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
Manifest number: 02F8
Signing time: Mon 21 Sep 2026 13:00:27 +0000
Manifest this update: Mon 21 Sep 2026 13:00:27 +0000
Manifest next update: Tue 22 Sep 2026 13:00:27 +0000
Files and hashes: 1: AAL-YY9GVuWqbLX5GG1k3ImctWA.roa (hash: dOcDqpARrTucPUNtlVinnlKcwBaTZo2MLnDCrG84YIw=)
2: xU9qEXeCbFq2S9OvATiptXpLkeU.crl (hash: C2gfS+wkHSsZuGDu51wfPeq19skgPqVyL5dJebYD5E8=)
3: x_VjdL15EqUB70pwRzrAehHyTNo.asa (hash: roR1zfTDox/ACVmuA2wDu2cHX32k232PLN3hkotoI04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:b5:14:00:3b:d8:96:da:b1:70:01:c9:86:f6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Validity
Not Before: Sep 21 13:00:27 2026 GMT
Not After : Sep 22 13:00:27 2026 GMT
Subject: CN=b336420e3967dab53dd4624f8bfc7c21493aefd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:60:55:79:2e:48:88:25:76:cc:c0:4d:bf:
47:0d:4b:37:0e:c4:2d:db:96:69:fc:5b:53:b4:de:
05:82:00:b0:79:03:34:d6:d3:80:59:64:1c:5f:8b:
26:5e:d6:69:bf:7d:e7:3d:63:a0:6b:76:f9:ad:37:
bb:bb:3b:20:9b:c4:bc:49:e6:9e:01:7e:44:c9:4d:
f9:e7:c8:ab:0a:f6:5a:00:94:34:9d:f2:35:41:89:
4d:9b:c3:d6:04:89:71:dd:a8:2c:d6:2e:ae:b4:b7:
b4:0e:fa:3c:46:27:fa:47:74:87:6a:8c:76:b3:ec:
56:19:37:79:e0:31:1e:e7:8e:3f:21:e2:14:4e:5a:
56:72:ad:25:2c:54:96:6b:e2:4f:23:9a:3a:77:29:
56:05:73:3a:c8:ff:b5:14:9c:5c:e0:f3:46:01:9c:
2c:fc:63:8e:57:29:06:31:20:50:b9:ad:3c:3e:0f:
82:23:2c:f3:25:c0:4d:c4:a8:09:8f:ea:53:17:c7:
ce:dd:4e:7a:4c:08:17:17:51:65:56:f0:35:68:85:
0d:b2:be:2a:be:ad:2e:db:9a:c2:7f:82:97:98:34:
7e:29:31:de:e0:9b:e8:4c:e2:db:a6:51:0d:30:74:
12:f1:cf:b3:7b:f3:0c:bb:f5:4a:ef:f1:b9:9a:e8:
ae:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:36:42:0E:39:67:DA:B5:3D:D4:62:4F:8B:FC:7C:21:49:3A:EF:D4
X509v3 Authority Key Identifier:
keyid:C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:57:35:d0:1a:21:8e:91:0f:d8:d4:40:f7:08:59:fb:af:75:
84:ab:a7:8d:34:14:8e:3b:f4:13:7c:94:b6:33:1f:fc:5d:82:
c5:11:06:c4:37:fa:88:56:10:23:f8:45:26:1c:b7:20:c9:a8:
7c:41:54:36:78:d6:a1:08:50:db:e6:d2:d4:8b:0c:12:d6:01:
15:60:2a:dd:6b:c0:d8:61:42:8b:9d:7b:fb:44:0c:68:6d:0e:
67:e1:d2:f1:3b:2f:f8:51:44:7c:ed:88:93:cd:14:fe:64:94:
3d:ed:7d:80:1f:c8:a5:30:d3:f7:e9:f5:ef:52:58:b4:ca:a2:
8f:f5:7a:44:52:90:4f:bf:08:89:69:a0:c7:cc:d1:13:8b:48:
50:f1:90:2c:b9:6f:6f:25:1b:b6:3b:0a:1a:9e:fc:62:ba:62:
5c:93:77:7d:4c:39:c8:45:fb:e7:53:41:41:b4:c3:af:e2:50:
bf:35:3e:f6:02:e1:d6:f5:48:ff:fa:fb:fe:81:48:93:1d:f2:
ee:c8:e8:c8:4b:de:f9:af:b2:c6:9e:fc:e4:c8:ae:75:bb:0e:
c7:b9:33:18:d0:9b:73:8c:f1:da:9f:39:5e:6a:b1:3f:99:88:
27:40:a3:69:19:03:5a:38:50:7b:6a:6a:ad:37:5f:91:ad:f4:
41:03:9c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:34:08 2026 by rpki-client