Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
File: xnQBIsYDCziYVCPXx8Zo7y266Rw.mft (raw, json)
Hash identifier: 4hm1dsXyShpa5405ITL8AgvG2yRAlKji/aTk5/oyPPg=
Subject key identifier: 4D:09:EA:B7:5B:D8:F4:E7:AA:F1:84:15:CE:AA:11:67:C9:C7:EA:6E
Authority key identifier: C6:74:01:22:C6:03:0B:38:98:54:23:D7:C7:C6:68:EF:2D:BA:E9:1C
Certificate issuer: /CN=c6740122c6030b38985423d7c7c668ef2dbae91c
Certificate serial: 01A0BEB187E79D67F2B8860F549BB33E1C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 12:01:40 +0000
Manifest this update: Sun 20 Sep 2026 12:01:40 +0000
Manifest next update: Mon 21 Sep 2026 12:01:40 +0000
Files and hashes: 1: 60TOPVfsN5pgJZGd8in-8hmiCDQ.roa (hash: wz0fI5J0oyRKc9opLJ8t6/QjHmyjX9i2OHs+2QaT2hE=)
2: BGqJYKbvXZQ9-EfJqdZJcmAAnEg.roa (hash: qwCTOzoAcAD8dBvfuZm2kT8FIK+IVROmdCz+Tdiv4eY=)
3: IjL5CW9zeWcOtWHWu3HJVWlDRuQ.roa (hash: HqeQTODPPkmuOhSBibsyQNBnS1QebGdzSoSsvCtv9f0=)
4: IjYD_4iJnSpw60hSl6hLQ78-_Ak.roa (hash: I2O8TskpKH95NKy5gMH0QHO0yhDdq5oUwAlZ1jCSCf8=)
5: Mer11hQ15D-jrLouYRlyFBNsr9k.roa (hash: pFGvLBy0OAKz3OIzWOuN1/pjfeO7iP38PaUND1hqokk=)
6: ebSyejuxZjmc3dCqgBY87Hl9RjU.roa (hash: pq+UZYWSdr5GA1Ri1WMIM+xPCym7E3lqGvtGITBuoD0=)
7: xnQBIsYDCziYVCPXx8Zo7y266Rw.crl (hash: 4zA8RJoUqHmT9RchAmhtKZwI5GyixGUQtfGOhLQGSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b1:87:e7:9d:67:f2:b8:86:0f:54:9b:b3:3e:1c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6740122c6030b38985423d7c7c668ef2dbae91c
Validity
Not Before: Sep 20 12:01:40 2026 GMT
Not After : Sep 21 12:01:40 2026 GMT
Subject: CN=4d09eab75bd8f4e7aaf18415ceaa1167c9c7ea6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:6a:5d:bd:6c:8e:a7:75:3f:54:f0:20:37:
b4:d3:dd:9b:ee:7b:70:5c:08:6a:27:95:d8:51:6b:
0c:42:3b:70:0b:fa:81:da:a2:63:28:4c:64:53:6e:
dc:88:76:f0:e1:8c:c7:a6:41:92:60:85:e8:40:94:
ea:41:d9:15:3f:9f:b2:4f:7e:31:7e:07:5f:0f:cc:
8c:19:c8:d8:1b:59:2d:35:c4:6c:31:5a:7d:7e:69:
89:5b:24:a0:4a:cf:3b:13:bc:05:28:3e:3f:08:0e:
3f:aa:18:ed:36:3d:54:66:a3:7c:f7:da:48:45:7d:
a1:91:c8:2e:a8:db:bf:45:95:26:f3:3a:ed:c3:e5:
5c:fa:fb:9c:c4:df:19:33:e3:0a:de:4c:fc:4a:1d:
fc:50:bd:25:8b:b5:ee:ea:f3:f5:3f:c7:3e:bd:ab:
bf:9d:13:9b:b6:85:7b:4d:3e:b8:c8:67:a0:94:8a:
82:65:d3:0a:1f:bf:3c:52:ac:34:34:93:ae:3c:55:
2e:0a:90:61:d4:24:20:0d:22:50:83:73:30:d3:aa:
46:d4:9b:5c:a6:a3:af:13:53:21:7a:0a:c1:bb:6f:
b2:d1:c2:d6:a8:84:f3:17:ca:c3:15:cb:56:91:04:
16:4d:1a:6d:0f:1f:21:b8:65:a0:99:23:04:23:91:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:09:EA:B7:5B:D8:F4:E7:AA:F1:84:15:CE:AA:11:67:C9:C7:EA:6E
X509v3 Authority Key Identifier:
keyid:C6:74:01:22:C6:03:0B:38:98:54:23:D7:C7:C6:68:EF:2D:BA:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:90:9c:d7:ea:bb:11:a2:14:bd:a3:fa:f3:05:84:6f:ac:1a:
ec:7a:8b:66:f4:75:62:80:ad:4c:c9:97:a0:86:78:07:f6:13:
2d:24:94:61:55:cf:38:81:cb:23:02:b7:38:9b:03:14:e7:a0:
c2:58:74:38:a8:1d:d2:b1:89:6e:17:03:58:e6:5a:28:5f:1b:
e0:1b:2f:e0:04:90:5b:4b:aa:16:01:b4:15:44:13:0f:90:a7:
d0:9e:af:59:29:f5:19:5f:02:a4:c5:1a:7a:63:eb:8d:a0:5b:
d6:fb:32:d5:0e:05:7f:24:31:fe:ee:35:fa:7f:ae:34:12:f6:
73:3d:e8:93:be:00:9b:15:47:39:83:a4:f0:78:1d:f9:b8:83:
ef:70:05:1e:43:b7:c8:5e:eb:d4:53:40:72:a8:84:0e:f4:1e:
a5:7f:d5:5c:09:4a:66:e9:56:23:17:5f:21:3c:dd:2c:0a:21:
98:0c:92:b2:b7:cb:c0:aa:e7:e1:93:b9:0a:68:87:fc:db:af:
57:c2:7a:ce:80:3f:b2:23:17:2c:fa:dc:2e:3d:0d:a0:1d:f1:
2e:56:3d:bc:8e:dd:54:d0:ea:57:06:3c:d3:8f:b0:88:3e:f0:
88:86:d9:ef:59:0f:6b:62:b5:40:4e:18:6c:fa:03:a1:9a:47:
c6:cd:59:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:13:41 2026 by rpki-client