Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: i0ZeO+tP+eXtaIIkuXwxHLBs3ouUX1aP54AL0WyYuRc=
Subject key identifier: A3:A3:E4:03:7D:3A:22:57:4E:96:CC:A5:B3:43:83:70:51:F9:21:3D
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 01A0D79632E15D44E6BA46B37BAEFCAA555F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 08:02:19 +0000
Manifest this update: Fri 25 Sep 2026 08:02:19 +0000
Manifest next update: Sat 26 Sep 2026 08:02:19 +0000
Files and hashes: 1: LXxDQYBI8a2bgUeaO6Um5RWeWus.roa (hash: eyN2GAZCoXjAEdKeBKmxr2YBtVYHGsGtrSqCUIPElRo=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: Vpr72b6y/Ofgl4jWfifMeV6sKvg0JrfCEVvpruIds2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:32:e1:5d:44:e6:ba:46:b3:7b:ae:fc:aa:55:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Sep 25 08:02:19 2026 GMT
Not After : Sep 26 08:02:19 2026 GMT
Subject: CN=a3a3e4037d3a22574e96cca5b343837051f9213d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1e:fb:50:14:76:7d:11:8e:a3:8d:22:ee:b3:
13:ed:82:21:b3:89:dc:a1:cd:ec:2b:c3:8a:46:57:
32:86:9e:3d:e4:51:f8:0a:74:cb:21:7d:7f:cf:b3:
b2:7e:7a:af:c4:7c:3a:2e:e2:f7:f6:ac:4e:31:5f:
31:c1:6e:50:9a:0d:2e:ad:20:52:2d:27:5b:e0:12:
e5:b4:34:a7:83:ad:65:29:fc:e0:87:f7:26:ab:c8:
cd:78:68:18:31:fe:bc:a0:3d:ad:67:e4:5c:56:e6:
fa:81:11:1a:3b:d8:f7:1a:5d:17:1d:fb:22:74:ff:
1a:73:10:3e:61:88:5b:1e:1f:8a:34:69:e0:6a:8f:
90:37:ce:6b:61:e6:45:c5:e8:ab:0d:e6:3d:4c:5a:
73:ab:16:4b:7f:ca:a6:7f:c4:ea:ba:36:8f:37:a3:
ba:08:24:2b:29:30:fa:cf:bb:34:fb:9a:3e:b1:36:
e1:b0:c9:4a:00:18:70:32:05:87:d2:c4:7c:48:46:
a8:9d:4e:e7:04:bc:8d:8a:5f:79:02:75:16:b8:59:
85:1d:15:31:69:fa:e3:9a:1e:ff:de:e0:97:bb:5d:
99:04:5a:8d:a8:8f:f1:23:e9:6f:fd:0e:39:35:00:
02:ea:bc:36:1a:1a:ca:b9:ab:a6:49:1e:7e:78:a5:
0c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A3:E4:03:7D:3A:22:57:4E:96:CC:A5:B3:43:83:70:51:F9:21:3D
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:be:ba:e3:9e:7c:c1:5b:de:48:7d:86:eb:68:a8:c3:53:af:
fa:2c:d5:11:42:26:47:dd:88:f5:24:e4:f9:39:ff:23:77:87:
6f:1e:d3:a4:d1:99:dd:83:37:34:49:d2:d4:25:ad:a1:f2:a4:
3b:1c:e7:3a:5f:59:13:f5:58:d9:a8:86:2a:55:d9:62:b9:82:
a6:9e:be:52:33:5f:37:8d:99:57:d9:c6:09:69:bb:a4:9a:99:
1a:8c:2f:be:13:69:ce:e8:12:16:a7:56:10:5e:26:c6:aa:ae:
91:cc:d0:9d:5a:1f:be:60:ca:9d:dc:19:c5:8a:64:f9:55:f4:
6f:b6:46:3a:db:25:eb:4c:27:12:f0:56:4b:95:26:4a:b2:23:
4c:12:7f:ff:26:2b:bb:2d:57:1a:c5:9c:ae:73:ed:e2:59:18:
a7:54:2e:bc:d3:07:11:e7:7f:a0:38:91:2c:cf:d0:96:44:07:
4c:e9:c3:1f:4b:c5:10:87:15:4a:33:1d:05:2c:58:09:64:a7:
6e:89:b0:57:1e:bf:8e:da:a3:b6:99:07:b4:8a:0d:57:8b:c3:
5c:de:ab:5a:a6:b0:bc:17:a5:95:69:1d:53:bd:19:47:bf:0b:
4c:a5:70:9e:78:fd:49:bf:97:63:48:a9:53:1d:30:4d:05:f3:
b4:1a:30:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:07:19 2026 by rpki-client