Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
File: xmJhwznF7fjYxIPwjka4SAqAXvE.mft (raw, json)
Hash identifier: prKaZowqLw0+W9sFS0tm77xC3vvws4qA8oXEqoZN8Yo=
Subject key identifier: 61:1A:BA:E1:84:3B:D9:D4:77:73:9D:CA:A6:D8:E5:51:2D:16:46:55
Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
Certificate issuer: /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Certificate serial: 01A1355A2F69AE4DC74B2CF9F013BA7AC9E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
Manifest number: 19DC
Signing time: Tue 13 Oct 2026 13:01:05 +0000
Manifest this update: Tue 13 Oct 2026 13:01:05 +0000
Manifest next update: Wed 14 Oct 2026 13:01:05 +0000
Files and hashes: 1: GkysysiUBXozBtdhxp6l182WpJ8.roa (hash: VR1FnjecjyRiwX08EOHPvLrD5A0SMs3OVYweJtUa454=)
2: xmJhwznF7fjYxIPwjka4SAqAXvE.crl (hash: I39nkIKxtnutHyT8MjN2VSqWV+GgIVgirzyUB2pNGk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:5a:2f:69:ae:4d:c7:4b:2c:f9:f0:13:ba:7a:c9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Validity
Not Before: Oct 13 13:01:05 2026 GMT
Not After : Oct 14 13:01:05 2026 GMT
Subject: CN=611abae1843bd9d477739dcaa6d8e5512d164655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4f:76:40:c8:6f:72:5f:fb:f4:07:58:83:01:
63:70:3a:d7:d9:5c:d5:0d:c3:b1:ef:c6:a3:33:3a:
76:03:f5:16:60:11:cb:ec:45:f3:ea:97:43:8a:4d:
c6:2c:96:a1:ce:52:b4:f5:d1:85:ec:3e:11:25:57:
6c:4b:f0:1f:a8:c8:60:b1:d1:cd:a8:67:04:28:8c:
67:0d:87:a7:c2:05:3a:b8:76:d4:b0:7c:d4:49:ea:
d0:71:27:11:51:d6:5d:7b:82:37:df:89:ea:f1:87:
dd:9e:58:aa:cb:3f:2c:5a:22:2a:77:41:bf:2f:ff:
3f:8c:3a:9d:25:7b:49:fe:02:77:0d:5e:80:ad:ef:
75:7a:37:6d:ed:3b:ba:eb:cb:cc:58:2f:40:f9:28:
18:7a:76:20:26:f6:65:71:53:92:34:78:fa:2f:ce:
40:d1:98:f5:b5:46:87:56:1f:69:31:5f:88:66:12:
f9:10:a8:16:34:f9:12:f8:cd:a6:9b:ed:ea:86:7a:
09:88:e5:b1:14:46:cb:7e:60:a8:f4:10:4e:30:27:
1e:b2:f8:3d:68:94:fe:9c:d8:7c:c3:b9:b6:e7:89:
8e:c4:df:7b:eb:11:af:d9:eb:4d:37:36:f0:68:54:
51:48:4a:65:fa:41:78:21:73:29:89:7d:39:84:8a:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1A:BA:E1:84:3B:D9:D4:77:73:9D:CA:A6:D8:E5:51:2D:16:46:55
X509v3 Authority Key Identifier:
keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a2:0b:30:35:bc:a9:99:a2:c1:bd:e5:db:3a:88:69:c9:31:
b4:6e:14:91:c6:14:bf:fe:2b:95:f5:c2:a3:1d:0b:4d:a7:35:
01:fd:60:e2:d4:17:07:50:dd:e8:9a:c6:1d:ed:fb:2b:b8:e5:
be:1c:61:2c:0e:52:83:43:ec:fc:7e:87:37:6c:9f:3f:7b:7b:
2e:19:d8:c8:86:1c:41:03:b1:b1:03:98:75:f8:26:25:3f:7d:
da:e7:75:ab:a7:18:d0:23:f4:01:5c:8c:dc:93:58:42:01:35:
8a:90:37:19:67:03:7a:dd:34:8a:6e:fd:a2:fb:99:2e:62:71:
e9:98:bb:fa:1f:08:8d:04:df:b6:1d:52:e1:2d:43:5e:bf:3b:
a9:2c:4d:1f:56:68:ce:ed:4d:e7:e3:1c:e0:01:63:28:f6:42:
3c:b2:2e:7c:a0:92:3d:99:dd:e6:c8:f3:ee:ad:71:4d:aa:c0:
f0:7c:82:23:2c:0f:75:02:41:ae:d4:b0:c2:ca:ff:53:49:1d:
3e:70:dd:0b:9d:52:56:ff:c9:0d:bb:b8:69:a1:cd:31:e0:bf:
2d:d9:d8:f7:c7:f5:54:6d:d1:a5:ee:17:7d:30:40:02:81:9f:
64:e8:30:c6:56:f6:28:2f:46:6e:76:3e:27:28:29:29:10:69:
4b:4b:46:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:27:16 2026 by rpki-client