Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
File: xIzPWOSy4trdSoSDPAZ87iuXRek.mft (raw, json)
Hash identifier: HW1zdpMpnBAbN1/q3Y4H83PDsO56QLXWfr2u1vrVSBQ=
Subject key identifier: 40:6F:09:E2:D5:1F:A8:05:04:A6:23:44:6C:E7:91:83:41:9E:FA:84
Authority key identifier: C4:8C:CF:58:E4:B2:E2:DA:DD:4A:84:83:3C:06:7C:EE:2B:97:45:E9
Certificate issuer: /CN=c48ccf58e4b2e2dadd4a84833c067cee2b9745e9
Certificate serial: 01A0DE05950CEECF7D0DCB8068D344640108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
Manifest number: 0CA2
Signing time: Sat 26 Sep 2026 14:01:42 +0000
Manifest this update: Sat 26 Sep 2026 14:01:42 +0000
Manifest next update: Sun 27 Sep 2026 14:01:42 +0000
Files and hashes: 1: gew7CyhHuASbV9jBOKJxjZWPhoI.asa (hash: lgbjlGGTdX1VPPAtMEGO3nFaDYLeDx/a+Kuz01fFw18=)
2: xIzPWOSy4trdSoSDPAZ87iuXRek.crl (hash: 4VDPiXwRKMcu1pmlL1R+4xoUHLOWQS9G1GEmvIB/Uqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:95:0c:ee:cf:7d:0d:cb:80:68:d3:44:64:01:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48ccf58e4b2e2dadd4a84833c067cee2b9745e9
Validity
Not Before: Sep 26 14:01:42 2026 GMT
Not After : Sep 27 14:01:42 2026 GMT
Subject: CN=406f09e2d51fa80504a623446ce79183419efa84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f3:c7:b9:bc:3f:d8:c3:34:65:0e:66:e4:fc:
14:ea:51:30:68:dd:bd:04:3a:51:04:2b:70:87:53:
f7:b8:4d:f6:48:16:e6:4c:6e:fc:11:a5:93:76:ca:
8d:b7:78:f3:6b:46:ab:54:93:d2:b8:fe:ed:0d:42:
5d:e2:9f:de:98:54:52:1b:aa:e8:71:01:e5:71:26:
fd:9f:3d:88:ea:c9:31:d3:04:2c:11:04:26:f0:39:
56:d4:e2:fa:ed:cb:7a:41:71:32:61:83:11:fb:9c:
92:0d:b0:8b:e6:79:07:d8:9f:88:40:d4:66:5e:e9:
35:c9:95:80:54:4a:43:c0:24:ac:69:7f:3b:e2:78:
c0:1a:db:06:32:b0:fd:d9:14:c6:f4:f1:a7:f3:70:
84:d6:90:03:d7:1c:5e:b3:8a:b3:0b:1a:3c:ce:52:
e8:c3:da:6f:0e:31:6c:93:10:2d:f0:85:38:90:b5:
7b:3e:f6:f8:f3:7a:da:81:73:cb:ce:c3:37:2a:cb:
3b:ce:79:59:f6:03:cc:32:c3:21:4c:06:73:ea:89:
53:de:01:18:3a:29:d1:cd:c9:f9:36:67:a0:11:e0:
31:4d:5c:ff:4c:c3:e8:85:32:56:c3:e5:75:a6:b0:
7b:31:98:56:ac:06:54:ad:36:ed:69:56:91:4e:22:
50:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6F:09:E2:D5:1F:A8:05:04:A6:23:44:6C:E7:91:83:41:9E:FA:84
X509v3 Authority Key Identifier:
keyid:C4:8C:CF:58:E4:B2:E2:DA:DD:4A:84:83:3C:06:7C:EE:2B:97:45:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4a:5b:e4:e8:17:4b:9a:d6:71:d1:24:4d:c2:21:13:8c:b1:
45:61:95:d1:41:9d:ae:1d:ec:52:46:16:4d:86:55:a3:ce:c3:
19:b6:3e:48:3a:71:d1:39:75:70:73:6f:72:f2:0e:54:a2:8c:
5f:2a:a4:44:61:7e:b3:3f:f8:ad:83:9c:d5:ed:5c:c0:43:90:
5e:ba:93:b4:9f:46:5d:7c:30:d8:40:d8:f5:cc:24:8d:26:60:
40:ea:26:25:a5:48:35:17:9c:39:2e:ab:13:92:9c:42:b3:f0:
1f:c4:78:24:48:49:e8:c2:bc:1b:7b:87:95:cb:22:47:ad:61:
5f:79:d9:60:1c:b2:76:95:3f:b3:59:81:fc:25:06:74:5d:eb:
c9:b9:c1:14:60:69:6d:b7:93:ae:dc:7a:a8:48:a5:ca:6c:54:
2a:5b:13:3b:40:5c:4b:06:65:84:01:22:97:0a:e7:ac:15:88:
18:af:db:38:5f:2b:b3:86:74:f4:c2:ff:2e:f5:73:f7:9e:f1:
b1:23:7f:41:52:fd:cc:5d:c3:c1:30:a1:78:d4:d5:cc:8b:ed:
d0:66:9d:56:4f:0c:a3:f3:34:25:31:1f:d6:f0:39:01:ee:7a:
63:5a:16:5b:0e:db:5b:fe:d3:08:f0:83:80:35:8e:1b:5c:60:
c9:3c:47:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:01:29 2026 by rpki-client