Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
File: xnSbIhBmFd8RMq2lGekgcJLy26o.mft (raw, json)
Hash identifier: SQFrsgkAJOin2I3ZduFvZ3CWgm6SsD1FnGhbG6PFkt4=
Subject key identifier: 7B:B3:61:B2:40:D9:6E:28:6E:38:EB:4C:1E:3A:3E:CA:BD:59:62:DE
Authority key identifier: C6:74:9B:22:10:66:15:DF:11:32:AD:A5:19:E9:20:70:92:F2:DB:AA
Certificate issuer: /CN=c6749b22106615df1132ada519e9207092f2dbaa
Certificate serial: 01A0E173C71D890786B6FE6C6D773E7E9FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:00:56 +0000
Manifest this update: Sun 27 Sep 2026 06:00:56 +0000
Manifest next update: Mon 28 Sep 2026 06:00:56 +0000
Files and hashes: 1: eIdFh6Y2hgdzeMtjgTPa_J9JiIQ.roa (hash: gOJ1QVyv1enp2QMYeZEi64KYRWZktKrcxHdJcaTNmH4=)
2: xnSbIhBmFd8RMq2lGekgcJLy26o.crl (hash: lnrFAHSdz0OEG5XA6taNwLd8ziGm7TFKpjMoOPMx4P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:73:c7:1d:89:07:86:b6:fe:6c:6d:77:3e:7e:9f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6749b22106615df1132ada519e9207092f2dbaa
Validity
Not Before: Sep 27 06:00:56 2026 GMT
Not After : Sep 28 06:00:56 2026 GMT
Subject: CN=7bb361b240d96e286e38eb4c1e3a3ecabd5962de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:2f:f2:32:de:3c:52:b5:30:b5:d0:e4:88:
ae:a8:47:b8:f1:d3:c1:a6:72:97:e6:78:d4:01:0e:
1d:42:b1:ae:00:42:2b:ba:95:d8:12:07:79:0d:90:
cd:80:33:22:e5:52:62:e4:c3:27:d5:2b:57:6c:89:
d3:68:3c:5f:a7:25:82:34:d7:b4:6e:ad:ce:76:40:
95:db:ff:0e:30:1f:e2:a5:8f:6b:a1:3b:ba:59:13:
8b:7d:4e:b4:66:33:c2:07:98:78:a0:0c:cc:c3:09:
89:28:c6:a7:80:cf:63:c8:11:71:7c:d0:f5:76:1b:
17:f7:b4:b4:92:54:d8:08:e1:9f:fb:f6:b4:b3:5f:
5f:e1:7d:8f:73:88:55:96:fc:2b:31:f0:ba:30:3d:
cf:11:a7:9f:e4:6f:b3:0e:6a:99:65:48:8a:3f:87:
5f:90:73:df:f6:73:bc:b0:f6:28:a1:98:c5:78:03:
8d:52:89:ed:63:b6:79:2a:3d:d7:5e:6e:f2:5a:11:
45:be:e4:2c:af:94:54:c7:b2:d4:65:47:0e:bd:e7:
62:48:89:c5:77:9c:e1:81:0f:86:f9:10:39:a7:61:
13:14:ea:69:30:6e:79:01:e0:ab:cb:61:61:98:fa:
ca:e2:ed:e6:62:b5:26:94:ad:18:73:0f:f1:b3:5e:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B3:61:B2:40:D9:6E:28:6E:38:EB:4C:1E:3A:3E:CA:BD:59:62:DE
X509v3 Authority Key Identifier:
keyid:C6:74:9B:22:10:66:15:DF:11:32:AD:A5:19:E9:20:70:92:F2:DB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e6:d5:31:2c:a6:4c:d2:0d:6f:91:07:22:57:ec:b4:fe:59:
b8:3c:12:7b:1e:8b:9c:84:35:a4:dc:90:75:ba:47:36:ee:3a:
bc:84:32:d7:3c:1b:96:ef:5e:77:85:7c:ea:40:6e:74:8f:98:
3a:8b:ae:55:9c:0d:06:73:05:e6:af:77:aa:e2:60:f7:fc:5a:
01:6e:85:57:61:fe:75:fc:52:be:21:73:47:c3:62:46:34:79:
c5:9f:cb:4b:ba:bf:02:2f:62:b9:3f:35:0b:28:1d:b2:3c:1b:
16:d5:00:6f:b2:83:6d:3e:97:93:6a:e6:42:d1:88:bd:11:66:
cc:2a:1d:03:db:ce:91:2f:fb:67:7c:f8:bc:43:92:38:94:8c:
aa:8b:34:dc:23:7a:5e:3a:76:6c:d5:c6:5a:6b:b2:70:6a:89:
03:6e:c0:e9:ad:18:b6:a3:3d:22:97:9d:cf:e8:95:cb:2d:bc:
15:d4:6d:b4:04:05:11:38:a6:1f:10:5d:38:3f:57:73:b1:f5:
b2:49:0b:4d:99:d0:9f:34:4d:e0:c1:95:8e:d6:50:46:5e:f4:
14:e5:d6:65:a6:7d:71:50:a5:0d:4c:a0:12:a7:33:e6:a8:b9:
5f:8e:21:83:28:66:44:52:2e:22:b6:a0:1a:d4:6b:91:3f:da:
85:05:b7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:55:43 2026 by rpki-client