Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier: PL33o6raGRTMHc8pnWLVVttiDL7oCcEDec/u5eA6VoY=
Subject key identifier: 86:AA:D8:E2:B9:52:92:5F:86:43:BC:44:A6:03:EF:B9:FB:0D:C1:1A
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 01A0BD2FD285FBAF1BCA050EE1FC30C4AC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number: 1A63
Signing time: Sun 20 Sep 2026 05:00:22 +0000
Manifest this update: Sun 20 Sep 2026 05:00:22 +0000
Manifest next update: Mon 21 Sep 2026 05:00:22 +0000
Files and hashes: 1: iLa7f2S3_d-gftGTw6gty0-Uiak.roa (hash: rM0PahqNF2zfpsbMJjY2LhMIvSX7eg/hz/KEUHOLLAA=)
2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: 8ncSbPWdpyuEQZmsHfmwDCKFPUeZmSRQ5yKMoQ5u3Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:2f:d2:85:fb:af:1b:ca:05:0e:e1:fc:30:c4:ac:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: Sep 20 05:00:22 2026 GMT
Not After : Sep 21 05:00:22 2026 GMT
Subject: CN=86aad8e2b952925f8643bc44a603efb9fb0dc11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:fc:06:ef:c0:01:2e:9d:70:3d:53:ca:00:
21:a3:a1:44:06:36:72:4e:c0:19:6d:b9:33:84:77:
b1:54:74:f8:82:74:42:0e:1a:40:bf:ea:f0:97:ca:
ac:bf:ab:3f:25:c2:dc:ca:a7:32:3d:3c:d1:04:59:
9d:f9:47:2a:ed:22:90:6e:a6:a9:b7:e9:a9:ec:67:
02:a5:68:e0:d2:9f:b6:3b:3e:1c:66:6d:72:e6:35:
a3:83:c5:66:3f:f1:1f:ef:52:75:65:80:2d:be:44:
c1:4c:a5:84:d2:c0:75:6d:85:cd:a3:60:1a:31:1c:
55:7b:ba:af:73:42:33:b4:36:49:f6:5f:c5:44:93:
7b:8f:3b:e2:84:f9:9b:cc:a8:e9:39:d0:42:80:30:
6a:95:49:76:59:86:2e:5f:ad:2c:c1:bb:15:26:ca:
dc:2b:24:58:cc:bb:c6:20:c0:85:1f:b7:82:49:fd:
79:71:78:fd:16:b4:2c:fc:5c:28:0c:ab:4a:aa:a8:
47:d3:df:4f:70:16:79:b2:3a:f2:e9:c6:c6:17:40:
fb:c9:1b:d4:03:96:8f:58:7d:50:3a:69:0b:84:7e:
0c:39:f3:6a:15:52:98:64:93:72:18:17:d8:24:af:
27:2e:b4:b0:93:4c:40:cb:99:91:97:2d:d6:22:37:
bc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AA:D8:E2:B9:52:92:5F:86:43:BC:44:A6:03:EF:B9:FB:0D:C1:1A
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9a:88:25:c9:74:bd:19:22:0b:62:0a:bc:71:89:d3:de:fa:
2a:40:5f:a6:ee:d1:96:80:71:dd:0f:05:0e:89:fe:78:c5:53:
f3:06:4d:84:f7:2c:e6:75:37:fa:1d:6b:da:59:b9:90:49:53:
74:53:0a:27:75:26:3a:4b:1b:b3:0e:37:21:f1:f8:7a:20:97:
94:fd:0b:25:40:44:04:95:35:93:75:c4:a1:48:a1:81:df:6a:
88:78:f2:04:b5:7c:64:99:df:dc:ac:eb:ca:2b:78:67:fc:fb:
32:de:89:6b:ed:81:a6:32:51:0f:b0:8e:f8:8d:5b:ec:50:3d:
10:68:6d:f2:bf:ae:6c:be:32:3a:0f:db:53:80:08:31:39:f0:
61:79:6d:2d:f1:af:30:02:fc:89:21:ff:74:9b:fc:91:0d:c0:
92:cb:11:d7:9d:48:0a:e5:5b:fe:d9:f2:7c:2a:f1:67:02:e3:
73:c4:89:85:8b:f6:12:58:e7:b6:c9:a5:77:cb:68:76:df:ed:
5d:4d:79:87:b0:ce:d7:4e:3c:50:fd:ef:14:d0:1e:f9:36:d7:
1b:79:6f:ea:83:d3:1a:38:10:11:d9:c6:64:1b:dd:3e:fa:0c:
d0:e6:f6:9f:d6:be:6e:22:78:41:2f:17:ab:8e:83:8f:40:81:
50:22:07:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:57 2026 by rpki-client