Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: 6itHkP1kmC2OMb9wdAtrAt2BqoMnHX6B5SLJDGwEWTw=
Subject key identifier: B5:4E:9C:6A:E1:91:3D:A0:C2:5A:5D:7B:26:DC:DF:0D:75:C9:CD:CF
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 01A0C55772FB4C22B9776E381C0F547779BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 19:00:37 +0000
Manifest this update: Mon 21 Sep 2026 19:00:37 +0000
Manifest next update: Tue 22 Sep 2026 19:00:37 +0000
Files and hashes: 1: FX91S7TqeS_5eNXFwkhAJLeDMDY.roa (hash: 7/g0n2srHScQb2lUJNavUfjGDwgVOP/uF61M1Zy+4aU=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: uvuLxw5X/uudXU2gKfiQn+HibbUAlN6HZOU4hgGVR8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:72:fb:4c:22:b9:77:6e:38:1c:0f:54:77:79:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Sep 21 19:00:37 2026 GMT
Not After : Sep 22 19:00:37 2026 GMT
Subject: CN=b54e9c6ae1913da0c25a5d7b26dcdf0d75c9cdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:13:cc:45:9e:69:4c:4c:ad:c5:96:ce:f4:
a7:24:e9:a2:cc:6f:58:69:6e:f0:3a:57:d0:31:ea:
e8:03:e7:75:e5:45:16:66:92:70:e5:40:4e:2d:c4:
fe:b9:99:6d:42:83:69:f0:fc:07:42:a3:3c:e2:23:
dc:36:ad:e9:c1:e8:7f:84:b7:1e:e9:ad:d2:85:13:
6d:2a:67:78:15:a3:71:9c:db:f9:60:45:4e:fc:00:
36:f5:90:3d:6e:92:5f:e0:a3:ad:32:19:aa:3e:a5:
1b:96:f5:0b:62:4a:ad:0d:b2:34:2d:89:66:ed:5e:
7c:ee:b3:00:12:5c:b5:1e:88:8c:fd:07:32:9e:50:
f0:66:3e:2e:27:8f:84:36:ed:fe:90:c7:a7:9e:20:
d3:36:a2:69:ad:c4:75:9d:d7:15:82:0a:da:2b:96:
76:d3:00:9c:1e:bd:b0:1a:86:79:d9:be:44:9e:1f:
79:b5:37:2c:af:9f:9d:70:2a:8f:e7:7c:39:20:11:
93:b5:d6:40:53:5e:bb:f4:97:7f:fd:f3:9a:46:80:
51:61:df:de:dc:4a:58:99:d4:ae:c2:31:01:e1:7e:
6e:ab:24:6b:b6:b6:07:3e:38:55:e7:fa:66:bc:13:
ae:90:fe:0c:e9:f5:ef:43:00:01:13:0a:c1:9f:44:
59:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4E:9C:6A:E1:91:3D:A0:C2:5A:5D:7B:26:DC:DF:0D:75:C9:CD:CF
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1b:71:79:c7:2d:19:d2:df:86:05:aa:73:a7:f6:d6:5c:a7:
8f:0c:8e:2c:cd:78:9e:9c:4f:a8:3a:34:41:8c:1e:94:b7:ad:
ce:10:13:bb:28:39:9e:9d:35:e6:35:81:91:60:8b:ee:30:03:
de:ee:92:2c:f4:7d:06:c1:bb:bb:ec:e5:f7:ae:18:65:61:50:
99:5f:8e:a1:f3:a0:c2:c3:19:91:40:e0:78:0e:22:d0:1b:b6:
bb:9e:52:33:b8:fa:5e:8a:3f:b5:9a:8c:80:28:b0:9a:15:bb:
8b:a9:24:ca:14:37:de:f2:88:f2:3d:f3:05:aa:49:88:94:0d:
7a:e8:96:93:9f:30:fe:6a:f6:cd:1f:04:86:af:19:46:05:b0:
1a:2d:9e:1e:c8:8b:3d:2b:64:39:9b:71:d0:41:70:14:a9:41:
9f:47:ce:d6:8b:2b:59:ce:14:87:8a:be:8d:7d:d1:c1:27:1e:
e0:05:c6:f4:72:ad:c2:56:d1:e3:56:d1:6e:dd:aa:e9:30:f4:
72:65:e3:bd:e4:47:1d:a2:f0:e8:c2:07:ab:eb:1d:c2:48:aa:
a6:b6:ba:d8:23:2f:34:61:62:d9:cf:df:9e:85:16:e4:2a:60:
d3:32:b8:82:7d:5d:a8:a2:c5:f9:40:cb:61:b6:fb:0d:b0:14:
0a:b8:c2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:31:11 2026 by rpki-client