Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
File: xTG2PRGmzC0c5p4TEch6waanBzM.mft (raw, json)
Hash identifier: Bk66A+XPtyO4nP73u+qkXZBIi58aJGhG3GnS7zdZFF4=
Subject key identifier: E8:CF:95:75:2B:E8:98:AF:9B:C3:9E:83:2A:91:47:72:C4:68:C7:2E
Authority key identifier: C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
Certificate issuer: /CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Certificate serial: 01A0C3D6E0AA9BBD7B273E6603DE20A742FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
Manifest number: 12EA
Signing time: Mon 21 Sep 2026 12:00:34 +0000
Manifest this update: Mon 21 Sep 2026 12:00:34 +0000
Manifest next update: Tue 22 Sep 2026 12:00:34 +0000
Files and hashes: 1: WGUKVj-vf2RKGeE0tMRbU2IE_NQ.roa (hash: tHeLPtV3EhtYhN1tkXzaqoA9I1M0f8QKiOJp3r6uMxQ=)
2: xTG2PRGmzC0c5p4TEch6waanBzM.crl (hash: W5f+HrWuQ4Yiqbi2x0Wdvs+FaokuNNutr4rsHZdg1m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:e0:aa:9b:bd:7b:27:3e:66:03:de:20:a7:42:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Validity
Not Before: Sep 21 12:00:34 2026 GMT
Not After : Sep 22 12:00:34 2026 GMT
Subject: CN=e8cf95752be898af9bc39e832a914772c468c72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6a:56:d8:46:d0:d6:a0:1e:43:c1:20:31:5d:
70:2b:30:f4:24:22:f4:61:cf:a6:30:1d:91:6d:77:
91:f2:2e:02:20:61:e5:9c:2a:64:b5:ae:db:07:29:
41:6c:24:ce:7a:5c:b3:38:93:fd:9d:ac:cf:b8:c9:
99:be:c9:df:9b:7e:dd:d4:b6:6c:dd:f2:f7:d5:cb:
5f:9f:d2:c9:b1:c7:cb:47:f7:88:4e:99:26:11:da:
dd:ec:57:c8:ab:da:5d:59:f3:7d:6f:34:35:53:eb:
a4:e5:71:25:de:98:5f:c5:d2:5c:50:ee:d7:c9:41:
a6:79:dc:93:89:86:25:de:f6:51:33:d4:c2:c2:c2:
56:5a:b7:95:14:87:08:2d:f0:ab:72:29:4b:ac:d3:
42:27:b9:b4:3d:b9:5a:ac:1c:2f:aa:a8:69:38:b2:
d2:a0:cf:22:f8:b0:d5:4e:ff:7f:0b:b7:f0:ef:dd:
51:1f:9e:42:dc:14:7a:23:1b:0e:7b:b3:f5:18:70:
60:60:55:f8:cf:ac:96:b4:d8:86:c5:76:9f:bf:15:
63:a4:ef:95:89:cc:18:88:00:45:b0:0e:1a:87:3d:
c7:29:33:f5:e3:97:23:a1:ca:d2:60:8a:f1:3c:c8:
8b:de:e4:70:4d:4a:62:2d:40:ac:4f:c5:8b:41:df:
3d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CF:95:75:2B:E8:98:AF:9B:C3:9E:83:2A:91:47:72:C4:68:C7:2E
X509v3 Authority Key Identifier:
keyid:C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:46:a5:e2:a2:c7:f6:6c:57:22:84:4f:b7:f6:cf:c2:54:94:
2d:21:5b:a5:84:57:f1:29:96:fa:90:54:a1:5d:db:cf:f4:4f:
97:99:52:de:37:ee:9a:79:a5:da:89:fd:07:2b:af:49:d7:fe:
60:07:e7:8d:82:e4:25:d4:27:04:e2:9d:97:1a:fa:fb:1c:9a:
b6:a4:b7:8f:9a:ee:e7:9c:c9:6d:b1:de:6f:4e:1e:d6:08:ca:
2a:f2:b6:9a:b6:44:cd:9e:8d:bf:80:32:4a:e6:d7:05:58:24:
e7:50:cf:8b:52:ca:c5:e5:0c:8b:bb:70:e0:ce:bc:b1:19:53:
8a:58:72:0a:60:1b:1b:10:0a:bb:c4:ca:2f:c7:90:29:b7:70:
0f:79:2e:04:d2:75:f9:b1:82:f5:54:27:fe:b6:b4:11:c7:3b:
53:84:db:86:df:3b:71:bc:1a:5a:41:27:fd:62:c2:fa:a2:8f:
e9:e6:e1:8e:dd:94:e0:a4:e0:c4:58:90:31:6a:73:34:1a:41:
2c:54:2d:0d:e6:0a:9f:b9:b2:96:b3:4f:a5:a6:35:4d:9b:a9:
aa:cc:d7:7e:dc:02:a9:e2:98:69:e7:7b:96:8d:05:cb:d7:22:
6d:20:46:b0:4f:6e:59:53:84:0e:13:b0:03:bf:06:17:97:95:
4e:ed:dd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:29:15 2026 by rpki-client