Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
File: xDt0aX74sFcJ99OU0f4pUeidXFU.mft (raw, json)
Hash identifier: Kf+3YONUEB+Or/tBMFdnoSd12UoXWbsp/0Rq28CUjAA=
Subject key identifier: A2:E7:60:26:C9:1F:1B:2F:D0:58:9B:07:86:85:3D:C5:A5:60:5C:5C
Authority key identifier: C4:3B:74:69:7E:F8:B0:57:09:F7:D3:94:D1:FE:29:51:E8:9D:5C:55
Certificate issuer: /CN=c43b74697ef8b05709f7d394d1fe2951e89d5c55
Certificate serial: 01A0D15BE9DCC98D83AE8F1F9A2C7B89344A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
Manifest number: 0196
Signing time: Thu 24 Sep 2026 03:00:56 +0000
Manifest this update: Thu 24 Sep 2026 03:00:56 +0000
Manifest next update: Fri 25 Sep 2026 03:00:56 +0000
Files and hashes: 1: cdK-ddxQ6uw5AVK3VADEiG5b7xU.roa (hash: kzD188j7ogf+ogrfaYMQ1BaJogJz8brxVXslH2Z+iS8=)
2: xDt0aX74sFcJ99OU0f4pUeidXFU.crl (hash: ouEs/T9anqeJFamk+WQy5gulGLa0U7QyyGaA1yMzbok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:e9:dc:c9:8d:83:ae:8f:1f:9a:2c:7b:89:34:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43b74697ef8b05709f7d394d1fe2951e89d5c55
Validity
Not Before: Sep 24 03:00:56 2026 GMT
Not After : Sep 25 03:00:56 2026 GMT
Subject: CN=a2e76026c91f1b2fd0589b0786853dc5a5605c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:27:04:ae:f8:0b:83:54:e4:7c:10:3f:f7:
f3:51:00:66:ba:be:21:b0:ee:72:21:4c:b9:71:ab:
27:3c:a9:32:57:27:1b:ee:3d:19:a1:fa:e7:08:19:
13:77:d5:71:1e:e5:e8:06:ad:68:fb:d0:53:f1:a8:
80:1c:5a:97:19:dd:7f:09:ca:9f:07:e8:cf:af:ac:
fe:65:8b:e2:98:47:83:d6:ff:4a:a6:d8:ed:0f:d3:
49:6e:df:b4:69:dd:5b:00:de:c1:7e:41:41:3d:22:
ca:27:14:1c:a8:25:a1:25:39:af:38:82:e9:a4:7a:
67:99:d3:79:a9:bb:fe:a8:15:8b:9e:6d:8f:79:f2:
92:14:b6:3f:4a:c6:51:30:ad:68:60:9c:61:9c:c2:
ad:48:44:bd:c7:22:98:f3:09:c5:9f:36:bc:3a:da:
47:72:00:08:bc:ab:5b:7b:e7:2a:4b:a2:08:b5:3c:
bb:18:f2:0f:7a:0f:12:3b:bd:f0:01:21:b3:6a:fe:
5a:31:00:48:40:8f:b3:ef:92:42:ca:94:72:18:23:
c9:1b:a2:51:3c:db:80:57:c6:1f:2e:e7:49:fb:39:
2d:a1:19:b3:83:32:d0:74:4b:d1:a2:9d:9c:87:26:
03:f9:85:bb:b0:a6:fb:b5:8d:14:84:87:74:7d:15:
a8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E7:60:26:C9:1F:1B:2F:D0:58:9B:07:86:85:3D:C5:A5:60:5C:5C
X509v3 Authority Key Identifier:
keyid:C4:3B:74:69:7E:F8:B0:57:09:F7:D3:94:D1:FE:29:51:E8:9D:5C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b5:e4:23:16:f1:7c:aa:82:da:40:ff:6b:d4:ec:08:f5:0e:
c7:f3:d9:0d:76:91:e8:cb:0d:71:89:f5:c8:10:7b:5b:20:c1:
88:b1:c0:cb:4e:1d:e4:5c:77:56:72:77:49:ab:a2:ae:70:67:
16:75:3b:9a:75:fc:46:63:ab:e9:e4:ab:ac:52:0c:bb:12:e8:
77:c3:f8:14:a7:e7:60:8a:9e:6c:9d:be:55:35:38:ab:d2:f5:
a5:d2:8e:8f:49:16:aa:ce:2c:56:c4:67:d4:25:2e:21:c1:8b:
33:05:c8:30:d0:20:65:44:81:62:f1:f6:b2:49:7c:77:d2:a0:
27:e7:02:1b:5e:9c:f1:85:fb:fe:85:ca:fa:34:4d:99:1a:d9:
ce:7e:e3:9b:40:46:1c:85:99:9d:e8:41:dd:cf:ff:22:33:87:
4d:30:d9:71:6f:e9:25:75:12:e9:4b:3b:32:a1:7d:d7:78:95:
99:0f:40:29:92:26:6d:d2:b9:f8:b2:a2:c9:5d:cc:95:ee:bd:
75:9f:fe:06:91:9a:70:75:be:78:71:d6:32:75:7e:a6:c7:2a:
e4:78:f2:54:56:59:ce:f0:13:7d:33:df:45:33:69:96:18:d8:
e1:07:a7:c3:80:fd:83:1f:9e:50:46:8f:ed:e1:94:36:2c:74:
45:54:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:50:38 2026 by rpki-client