Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
File: xx85HWDhoTnMxCsXoyqVNj31z7A.mft (raw, json)
Hash identifier: bXKuD3avAaWu1qDCRnNmkzgEGzhrfdsgd28xpEC3XVk=
Subject key identifier: D5:B5:45:EC:16:75:88:DB:A7:02:3D:15:1F:1D:66:19:0A:51:9D:9B
Authority key identifier: C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
Certificate issuer: /CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Certificate serial: 01A0E0988F8E7AACA50B8A0C0F9A62434780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
Manifest number: 0392
Signing time: Sun 27 Sep 2026 02:01:29 +0000
Manifest this update: Sun 27 Sep 2026 02:01:29 +0000
Manifest next update: Mon 28 Sep 2026 02:01:29 +0000
Files and hashes: 1: 5Ac1xGg2xzacy1Elgpwm7Fl9gOY.roa (hash: VWmcJPkpnJaJdz3GW3aT+bj0R6mJFxMSWGrX3LD0Zyk=)
2: xx85HWDhoTnMxCsXoyqVNj31z7A.crl (hash: 4S5+e0R82rJtsmwrSFl/qV8JtYF89VZC+GOxdsL6dxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:8f:8e:7a:ac:a5:0b:8a:0c:0f:9a:62:43:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Validity
Not Before: Sep 27 02:01:29 2026 GMT
Not After : Sep 28 02:01:29 2026 GMT
Subject: CN=d5b545ec167588dba7023d151f1d66190a519d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:75:f3:65:eb:c1:9e:8f:b6:91:be:0a:c9:
77:4e:58:fd:52:d9:5d:4e:02:f3:82:2e:54:0f:13:
60:d5:6a:61:bb:3a:17:28:20:16:15:0e:29:b6:d1:
6a:0c:b1:50:2e:d3:b3:14:74:81:06:38:6e:07:ef:
02:8e:f4:e3:a1:a2:06:6f:e3:f3:43:34:b6:1b:ea:
b5:b0:f0:da:1d:36:65:f3:12:be:e4:b8:3f:59:6b:
8c:c4:bb:82:4f:cb:a7:db:ef:d4:3a:be:4d:97:fb:
0f:4e:6b:1a:f6:35:bc:fa:7b:cf:24:0a:d8:d2:bb:
5f:f5:f6:7b:39:15:77:af:3c:45:57:11:e6:21:ac:
ee:39:f1:40:2d:d0:98:55:50:60:d8:5a:42:f9:6b:
96:b6:62:83:9f:33:1f:46:5e:43:ee:6c:7b:7c:ed:
2c:be:48:85:a2:e9:a5:2b:25:c2:dc:5c:29:51:cd:
3e:80:b4:ff:78:52:b5:5f:e9:25:99:dc:7d:85:f7:
20:ab:37:43:7a:f7:18:1e:9a:6a:2d:b8:f1:a1:4c:
b6:4e:ca:02:22:81:80:d7:8e:99:ab:a5:09:13:67:
10:9b:de:7a:07:89:74:18:9a:37:7d:73:35:90:6a:
f1:1c:68:e7:5f:5c:dd:85:e2:5f:9b:42:46:ab:97:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B5:45:EC:16:75:88:DB:A7:02:3D:15:1F:1D:66:19:0A:51:9D:9B
X509v3 Authority Key Identifier:
keyid:C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:44:6e:ae:b4:45:e0:05:41:85:ed:9d:e5:a9:51:b7:56:99:
db:76:54:63:6a:b7:16:86:ad:21:2f:d2:7f:09:8b:55:54:9a:
7f:7d:21:4e:5b:02:0b:01:72:f6:ae:3a:3b:23:e5:b8:12:4c:
e6:87:9c:40:ae:95:ff:02:a3:98:5b:48:55:74:7a:4e:99:a9:
99:be:56:01:75:01:cc:bb:76:0a:73:95:18:d5:c1:ab:a6:ac:
90:74:09:5c:35:4b:a6:6e:93:8b:47:c2:e9:2b:33:6f:b8:7c:
68:a7:b7:7f:43:34:91:01:4b:8c:96:26:62:72:6d:26:a4:82:
1d:73:f3:d1:3f:da:79:67:ae:4f:72:68:07:b8:22:04:67:88:
0f:15:fb:9d:ff:8d:e5:e1:03:81:d2:34:fc:10:52:8f:87:b0:
da:2d:d3:d3:c1:ed:e0:1f:07:80:ee:cd:6d:f6:e9:a7:aa:26:
0c:49:45:36:d8:93:18:c7:71:b8:2e:39:51:b5:f1:2e:01:aa:
65:85:3c:4e:ae:3a:e8:78:0d:78:ee:49:94:c5:12:a0:fc:83:
e1:53:1a:c7:7b:c9:5b:a8:ee:35:ee:9e:b1:80:51:75:5a:1c:
22:6d:aa:46:1a:5c:05:75:4e:0f:57:5d:c4:82:b2:70:f1:9f:
47:03:5f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:55:57 2026 by rpki-client