Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File: xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier: qwUpI7tjV/6lDo3mLjFd5/go7DPYlEjZxINovtPS/Pk=
Subject key identifier: E5:38:04:9B:A2:5B:9B:5A:C6:87:FE:F6:0A:D4:FE:E3:1E:0A:D5:C9
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 01A0EB8A73E895940FA19AE1FCE5510B1F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number: 1A7D
Signing time: Tue 29 Sep 2026 05:01:54 +0000
Manifest this update: Tue 29 Sep 2026 05:01:54 +0000
Manifest next update: Wed 30 Sep 2026 05:01:54 +0000
Files and hashes: 1: LS6g_qbOyr5L3M2tEJSHcqYLaGo.roa (hash: pmKUoQElX3xSvG0E8J7HtZYFqjVisgOfWkSTHkEuCRA=)
2: p_1zOjE7RDNIPM-9ijPLsTD4cC4.roa (hash: XKWGoP/7AKlCb/UQ1yCnmOl4XCSltYQxcpO0+1gE4vE=)
3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: MC6Zs/NgYlCj5uEdyz80s4XavOSq6guGuF3RibfUWrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:73:e8:95:94:0f:a1:9a:e1:fc:e5:51:0b:1f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Sep 29 05:01:54 2026 GMT
Not After : Sep 30 05:01:54 2026 GMT
Subject: CN=e538049ba25b9b5ac687fef60ad4fee31e0ad5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bf:dc:59:d6:07:0f:2f:f4:20:7d:6f:cc:25:
f0:ec:da:8d:df:19:08:59:a1:1d:a8:2d:83:0c:92:
f7:58:99:e0:b1:7b:4e:9f:95:66:9e:82:f2:85:c9:
de:27:50:cb:00:26:3a:4e:fe:8a:35:8b:2b:38:6b:
f3:2d:3a:58:58:78:b9:22:11:ea:f9:59:8e:cc:8e:
3a:0c:37:f5:e8:ff:f6:68:14:c0:45:62:bb:24:cf:
6d:f6:c1:88:5c:07:c6:fe:84:38:ef:a8:37:00:10:
ea:a0:37:c2:e7:31:40:9b:aa:59:d4:c4:b9:d5:9a:
d1:fd:16:60:6c:37:0a:f4:40:21:e8:3b:25:ef:6b:
f0:e1:5b:6c:d5:93:3c:ec:9a:eb:68:10:bb:3b:c6:
2a:bf:c0:47:89:e5:62:9e:ef:5a:25:0f:35:69:d7:
40:60:ff:35:69:1e:4c:13:96:2e:d8:e7:09:53:ae:
1b:54:e6:c8:df:a2:09:d0:d9:e9:1c:c7:df:f2:b2:
17:95:56:7b:74:8a:42:12:0b:84:9e:99:b8:37:1a:
33:e5:41:4e:eb:b4:d6:d6:eb:71:d1:fd:cd:a0:ed:
9f:4f:cb:e9:2f:fe:8f:84:e6:8a:fa:c6:0c:20:b4:
2e:51:ec:b7:9f:5f:d4:10:17:28:b4:fa:ca:1c:0f:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:38:04:9B:A2:5B:9B:5A:C6:87:FE:F6:0A:D4:FE:E3:1E:0A:D5:C9
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:32:be:f0:85:bd:8d:29:b6:18:83:51:97:c7:87:1f:d6:06:
3d:b4:51:a6:61:94:1b:60:70:b9:a6:e7:4c:df:c0:dd:1c:62:
d8:76:8f:80:03:df:8c:47:58:f0:8d:de:3c:40:3e:33:32:cc:
86:84:5c:1e:d7:09:57:fb:54:0b:42:b8:64:6d:97:7f:62:4c:
19:7a:8d:c4:ad:ca:4f:ec:af:7d:50:cc:18:29:c4:15:9a:96:
5c:9e:8e:b4:d5:8b:99:95:56:8c:94:8b:7f:02:40:cb:e4:d7:
82:3a:e7:f7:6a:70:d3:e0:ec:ea:f4:57:f1:3a:8d:98:ec:c0:
76:82:88:81:fa:5e:7c:a6:36:6f:76:b0:76:2d:a6:97:3f:dc:
6c:f2:00:f6:41:98:ff:fd:d1:4d:bb:e8:03:2b:a1:09:9c:a6:
4f:62:76:ab:5f:9c:15:9c:f2:6f:aa:65:79:3e:ea:ad:3e:f5:
a9:a7:81:90:7f:ef:8e:ab:3c:d0:8c:33:a9:bd:77:21:37:c4:
17:14:3a:83:3b:61:b2:3e:8f:88:2c:be:8c:62:6e:a1:5e:d2:
de:fa:55:2e:db:6e:95:8b:1d:60:a5:5c:0a:51:44:0a:8d:7e:
38:8a:ca:07:da:ef:bc:7c:c0:d7:ac:88:fc:39:27:f1:ca:24:
55:01:73:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:59:46 2026 by rpki-client