Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: UCJXJ2GmO+VRBKKaXywVMW/FGx92NZGgqXDSitmi4b4=
Subject key identifier: 1A:BC:D9:6C:A5:8F:D1:CF:7C:02:5E:19:98:AF:23:3E:C1:9D:96:4C
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 01A0E9D237B429B95AA57398342817AD4E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 1A0D
Signing time: Mon 28 Sep 2026 21:01:03 +0000
Manifest this update: Mon 28 Sep 2026 21:01:03 +0000
Manifest next update: Tue 29 Sep 2026 21:01:03 +0000
Files and hashes: 1: AorOXJjA6o7VIXG2KhmRn45N0UY.roa (hash: opct1yXiFy361tzWw8bb0wIPcRKu5irJGelwFQC/fvQ=)
2: ErvwJYNq58NBwdxg4NllytvGu58.roa (hash: L/oQiFOQUaagNx6+74y64js5tlg2OsPgxLI2bOEuDOs=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: g1WX164eQrJq4ZM3JcGARlY52znPznvVuk0iZ1nr03o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:d2:37:b4:29:b9:5a:a5:73:98:34:28:17:ad:4e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Sep 28 21:01:03 2026 GMT
Not After : Sep 29 21:01:03 2026 GMT
Subject: CN=1abcd96ca58fd1cf7c025e1998af233ec19d964c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:d8:63:84:97:5d:32:22:c0:3b:87:f9:d7:
86:fa:3d:99:da:e2:2b:61:aa:f3:4e:a1:b2:b9:bd:
c9:50:f9:6b:a5:f7:8b:b6:e6:43:0a:f7:0e:8e:0d:
e1:07:21:ba:da:d7:21:ce:2e:5d:5d:6e:f9:e7:2f:
eb:07:5b:4c:73:18:44:2b:71:71:85:0c:9e:1c:7a:
c4:25:2a:fe:76:75:5a:bd:cc:e6:2e:60:d2:60:28:
36:09:1b:87:03:e7:5e:84:72:ab:12:8f:88:56:89:
b5:05:e2:e6:ae:20:2a:05:bc:3e:f2:ea:04:14:07:
f7:d6:7c:2c:d5:58:ad:63:42:b4:44:51:11:c8:2e:
28:f6:6a:eb:0b:5e:e2:cd:7d:5c:e7:f1:ca:f8:f0:
d2:35:c4:0b:e1:a0:90:23:c8:d4:29:39:aa:ed:82:
90:5c:47:f7:83:a8:25:23:b2:ed:d3:7b:76:e4:b2:
8f:cd:c7:f6:f3:30:c2:4b:d8:ca:98:6b:d8:14:26:
97:dc:82:6e:5a:12:ea:d0:f4:5b:3f:7e:1a:25:2a:
c9:6e:b9:9b:ba:c3:8d:09:97:65:19:aa:fb:42:b3:
58:16:77:a0:42:13:f9:47:3e:0e:54:76:73:31:9c:
15:01:92:a1:fa:55:2e:57:26:c2:fe:35:04:d3:f2:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BC:D9:6C:A5:8F:D1:CF:7C:02:5E:19:98:AF:23:3E:C1:9D:96:4C
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ff:82:c8:71:21:1e:0c:ba:1d:98:12:98:78:e2:10:83:57:
b3:2c:ed:51:60:a0:7e:89:fa:5b:36:2c:ee:53:bf:d4:a2:c3:
07:26:42:f4:31:17:70:48:bd:e6:e0:d5:24:d7:77:d8:89:4b:
16:a8:8b:1b:c6:1c:fb:32:40:6a:09:46:8e:4c:1e:ab:ed:47:
d3:8c:6e:eb:ad:90:3f:ba:97:69:8a:b6:1d:96:b7:02:1e:a8:
23:ca:c4:11:ed:ea:60:00:be:27:0d:37:45:20:76:6c:bc:36:
78:50:e0:94:ae:2e:90:2e:99:32:12:21:9f:38:1c:d6:bc:e9:
06:41:ac:e4:65:1a:9f:c2:c7:6e:f0:20:a9:87:6a:4a:0f:04:
2e:e3:a6:a6:a4:ed:b9:91:8d:07:d2:92:36:03:88:bf:47:e0:
b2:dd:2d:16:32:19:d4:b2:ca:0b:5b:8b:51:0d:bf:91:fd:3b:
85:8e:6c:9e:72:bd:6b:30:40:14:c4:d9:8b:0e:2f:e2:c7:b1:
0b:4b:79:9d:53:3b:7e:94:5c:8e:ea:88:86:92:84:2d:cc:e1:
d7:2f:c7:86:29:e2:e8:1e:db:d9:5d:41:a4:5e:9d:4d:f7:d0:
03:9f:a3:ea:ba:f6:6c:ca:b0:18:bd:91:bd:67:0b:18:f6:db:
3a:55:55:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:37:14 2026 by rpki-client