Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: Bfgh/4m5khTufoWZKHGdQcYBV3t3bvUzBaYBlaglshk=
Subject key identifier: B7:14:48:3A:AB:A6:20:25:21:DB:48:DB:35:10:A2:F7:2E:5A:2D:37
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 01A0E5F57361C5C17EA3B76116EDB1294552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 1A0B
Signing time: Mon 28 Sep 2026 03:01:03 +0000
Manifest this update: Mon 28 Sep 2026 03:01:03 +0000
Manifest next update: Tue 29 Sep 2026 03:01:03 +0000
Files and hashes: 1: AorOXJjA6o7VIXG2KhmRn45N0UY.roa (hash: opct1yXiFy361tzWw8bb0wIPcRKu5irJGelwFQC/fvQ=)
2: ErvwJYNq58NBwdxg4NllytvGu58.roa (hash: L/oQiFOQUaagNx6+74y64js5tlg2OsPgxLI2bOEuDOs=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: 5Yt9F10hNU13maxehsfE3kq6Xf3W5VoPNycNVtZUYt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:f5:73:61:c5:c1:7e:a3:b7:61:16:ed:b1:29:45:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Sep 28 03:01:03 2026 GMT
Not After : Sep 29 03:01:03 2026 GMT
Subject: CN=b714483aaba6202521db48db3510a2f72e5a2d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ee:b3:20:57:14:fb:e0:54:e2:bc:bd:8d:91:
03:8f:ea:89:dd:2c:28:55:a9:2d:9f:fc:d8:20:92:
f5:5b:e2:41:07:63:db:9b:d8:06:9e:11:78:f4:13:
59:a0:e0:46:47:99:9c:17:57:64:12:7a:6b:2d:6f:
06:f7:9f:c9:24:df:4e:a7:3e:e6:a5:fd:63:1a:0b:
f6:ba:99:15:0d:fc:8e:b8:51:d8:e9:25:32:4f:e7:
1e:da:45:db:71:1b:64:79:b6:4f:28:c7:f1:69:4b:
63:c3:58:d9:5b:c1:f1:5f:ba:cb:94:3c:e0:e7:14:
0e:24:54:b6:99:a6:b6:6a:33:09:44:b2:cd:81:61:
4e:41:83:1b:67:df:26:25:91:54:f0:a8:4d:e6:a9:
81:4d:80:d7:61:8c:17:ad:d7:9f:a2:95:0e:86:60:
a3:49:b4:ad:63:d7:2f:56:4e:0a:ff:85:20:82:02:
8b:3c:c0:1c:2a:b5:de:e1:6a:ba:c5:57:00:85:87:
59:07:bf:12:68:66:fe:7e:81:39:41:9e:f8:f9:55:
21:c0:c7:91:69:8c:ee:7f:75:b1:dd:34:2b:0a:39:
14:2e:8f:64:e1:97:2c:33:e9:5f:cd:7c:54:05:1b:
ee:5c:f1:d7:9c:5d:79:46:07:27:1a:3f:da:59:68:
f3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:14:48:3A:AB:A6:20:25:21:DB:48:DB:35:10:A2:F7:2E:5A:2D:37
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:14:46:9f:51:5f:26:f2:2e:19:ea:f0:b7:37:16:56:48:27:
b9:ae:c4:f9:42:71:ea:46:27:5c:c7:cf:4e:f0:9a:98:d7:da:
86:7a:99:cc:db:db:c5:96:34:49:f9:b2:c7:c0:18:6f:b0:62:
df:0c:33:26:96:b0:06:e7:e1:89:03:25:3e:ab:b1:ca:cc:77:
98:ea:a6:42:bb:c3:1d:5e:ca:89:b1:90:2a:70:db:5e:f9:80:
81:5c:fb:8f:da:04:09:95:e3:bb:20:73:70:ab:60:10:8c:f6:
c5:d1:f6:28:85:4b:42:a9:ce:97:1d:40:77:7e:ed:05:66:25:
8a:d8:53:83:3c:40:31:86:eb:09:c1:ba:59:c5:98:58:8c:7a:
c5:7b:d6:41:e5:42:eb:11:d5:51:a1:72:dc:10:78:fa:95:c2:
43:e5:f1:04:a1:3e:07:da:72:72:24:af:3e:e5:ca:dd:f3:f6:
8e:79:b7:0f:32:e4:c3:b0:64:6c:cf:38:7f:33:72:20:fc:10:
d4:cd:c9:8d:9d:4c:2b:f8:70:fa:35:43:78:9c:16:15:c0:b1:
91:79:a1:93:31:c9:14:43:6a:bb:93:d2:bf:6d:04:46:1a:e9:
ea:41:ae:b1:71:08:25:46:68:0c:a2:60:9e:63:86:0e:79:c2:
7a:7e:d4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:02:05 2026 by rpki-client