Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier: 2Q4Sw/9vN9PWcJ1o7xAKZdfwvIOrTq5inesfn3DICYw=
Subject key identifier: 29:58:A2:A1:E9:38:DA:0A:52:84:59:08:CC:A2:F7:E0:DE:B2:34:2A
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 01A0D4CBAC2EAB9690067D758C677AC4FF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number: 177A
Signing time: Thu 24 Sep 2026 19:01:52 +0000
Manifest this update: Thu 24 Sep 2026 19:01:52 +0000
Manifest next update: Fri 25 Sep 2026 19:01:52 +0000
Files and hashes: 1: Cj9YGHvlLrMUi1SQsU7dObHSVlQ.roa (hash: ZPq9Z29tNM3JkEKWEncbVwe+zKH6BGs9kcyPYhZ/Frc=)
2: SpCNuk1u-hXCk_6chs0ukaT-xPc.roa (hash: KE7oMTHzlDHmctRL6sItqmo0AwEpnij4sNxyXYuwrUk=)
3: Vu85Nu-HoLeRv_52CEznI8bQbss.roa (hash: c6ty/wCdDrBOcI9jUvVNl5APK8YZjil4x8ZlNRshHvo=)
4: hwEYkWKezFU1S6DS8A0TF6JXUos.roa (hash: dJKRSf7F67Dm6ZGKlb7G6KP8NQfxdE863RZT2JIwE9k=)
5: kj0n6dD5Oy19P3eSGpW6sXPidMc.roa (hash: KnSRmZL/r55wQ34F0TOQmyUNo1O0fG3sUmtVLwDVu9s=)
6: lo3R5w_kTel81Z1irkIbzAD6F8Q.roa (hash: PuU1Xdn3kY1LjMwZS3Qaqe5MniakxiQ+Y+f6yTPGRCQ=)
7: nb0hXlBPQhPWTuMEqZzkSxkwpXI.roa (hash: 55gzjqx5n4gyySLdEurC8vvFbXFEosab3sYhqOZ+WA8=)
8: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: iD/n1kHkoFEJMvf054y03crjPwLZ4riBKlmA19Tixww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:ac:2e:ab:96:90:06:7d:75:8c:67:7a:c4:ff:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Sep 24 19:01:52 2026 GMT
Not After : Sep 25 19:01:52 2026 GMT
Subject: CN=2958a2a1e938da0a52845908cca2f7e0deb2342a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:3c:19:81:bc:94:40:4a:a3:4e:59:19:63:
60:62:90:f0:46:a1:0d:16:eb:00:c4:91:90:dc:33:
9e:4e:21:b7:3d:62:cc:70:72:f8:91:c2:d4:d8:e2:
64:db:bc:cc:b9:7b:9c:2b:72:38:95:62:ec:06:6b:
1c:0c:1e:0c:c3:da:7a:5c:7e:f6:3a:9a:1e:94:4d:
99:2b:30:57:39:36:8f:c4:0b:77:c8:43:c9:37:b7:
8b:b6:fb:3f:8c:50:66:dd:c9:2d:c8:dd:ce:01:de:
d9:08:df:a5:2a:c8:ef:2e:7f:f4:d9:f9:1d:d3:ff:
b0:82:66:85:5a:b7:fd:66:04:c6:14:64:6c:ab:00:
3c:4e:f4:b5:b9:8e:0b:d7:31:93:9e:15:f3:b3:ab:
1a:ae:91:f8:fa:93:e2:db:80:e2:b4:e5:6f:6b:7a:
07:24:37:63:ff:8a:e5:cf:b7:5c:6e:74:fa:8c:4a:
84:ea:bb:30:47:10:44:04:e7:12:9b:69:13:e6:78:
c7:f5:fa:59:aa:b3:76:c3:af:b4:78:24:a1:5b:1a:
43:4b:40:52:0a:e3:59:4c:67:bd:d1:ab:90:7f:ac:
09:d6:c8:6b:94:b4:82:0c:66:b7:58:a9:1b:ab:a3:
5a:ac:dd:41:52:5f:aa:a0:da:35:96:d6:e9:3f:bc:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:58:A2:A1:E9:38:DA:0A:52:84:59:08:CC:A2:F7:E0:DE:B2:34:2A
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4f:f8:ee:a2:41:9c:2b:2e:12:a4:c1:09:9c:ef:a3:da:c0:
cc:4f:2b:7c:77:15:e9:4e:70:7a:0e:2b:57:f6:4f:b2:31:c9:
8f:43:25:c2:65:d4:fa:30:60:b1:d7:fc:79:26:6b:3a:78:ba:
eb:be:56:2f:88:5a:e1:62:b0:22:f0:70:ea:91:8e:3a:e2:e4:
28:fd:03:79:ed:4a:e5:ff:f8:2d:32:d4:21:8e:c9:18:6c:80:
a0:70:b9:63:11:4f:15:4c:40:17:b5:32:78:6b:91:62:3b:7b:
ba:dc:e7:df:84:30:77:d1:e3:1d:a2:21:ff:38:2c:07:8d:dc:
88:93:ce:e2:96:f7:79:1d:25:c3:ba:fa:49:7e:41:07:3d:4c:
6d:b7:19:fc:06:a4:ed:c9:93:8e:de:a7:77:3b:89:ce:a7:9a:
ac:c5:7b:cf:18:97:d0:19:2f:2e:7c:ec:a3:46:63:c6:d3:67:
54:bc:04:71:26:59:46:cd:1b:83:b9:f9:5e:69:29:d8:f7:d5:
98:61:45:57:bc:09:a2:5f:d0:14:d1:35:50:f2:2b:22:7d:51:
0a:e6:95:24:47:c9:30:63:56:e3:07:6a:0f:53:5d:67:33:9f:
fc:a1:9b:92:1e:fe:4d:cd:15:88:38:e9:2a:9c:44:45:52:3e:
5e:f7:34:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:55:36 2026 by rpki-client