Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
File: xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json)
Hash identifier: AA25a5VoeSjMWDF1bpNxsC8I8lpdGqWCD1em5alv9Bw=
Subject key identifier: 99:75:69:BC:6A:3A:98:0F:81:5D:DF:A6:8A:05:E0:A8:0C:ED:1E:34
Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Certificate serial: 01A0D315CCC63F2FB76E8EA211B91BDD9127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 11:03:36 +0000
Manifest this update: Thu 24 Sep 2026 11:03:36 +0000
Manifest next update: Fri 25 Sep 2026 11:03:36 +0000
Files and hashes: 1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: TkGzzzhmhNzEXn4B4Ozp544IhslfKDNjjaqMZYW4bgk=)
2: xsHwN39t7Lg_0JrvQJX-o8s4wJc.asa (hash: uUROjO5Wuy6f76sPTNQEiOJg9EZNcnwz3IXWyZD8TU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:cc:c6:3f:2f:b7:6e:8e:a2:11:b9:1b:dd:91:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Validity
Not Before: Sep 24 11:03:36 2026 GMT
Not After : Sep 25 11:03:36 2026 GMT
Subject: CN=997569bc6a3a980f815ddfa68a05e0a80ced1e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:a5:01:26:a5:49:08:ac:07:cf:b8:11:be:
02:5e:6c:af:b6:fc:37:a7:c4:ce:d1:d0:1e:ae:78:
02:c9:b3:f6:ac:e5:5a:b3:26:73:a0:a3:04:27:61:
de:57:3b:7f:ba:d7:94:b0:cf:a3:da:32:e1:91:41:
35:08:59:f2:01:27:51:90:26:19:c8:90:a4:73:8f:
b7:6b:8a:88:bf:32:ce:a2:e8:17:f5:d2:6d:75:e7:
0e:42:58:8b:40:bc:21:6f:aa:05:39:15:9d:bc:4e:
86:1e:4c:94:66:8c:fc:fc:65:69:ca:74:d9:cd:52:
ca:f4:1c:73:e0:ad:77:68:91:cb:22:41:50:f7:83:
f0:8b:33:77:27:2a:93:7c:e0:dc:7a:55:69:44:6e:
ea:4d:7b:ce:e3:46:17:27:be:6c:66:67:26:fe:9b:
40:98:54:ba:0f:d7:05:20:d4:ae:5d:26:c1:07:bc:
88:2f:bd:09:93:52:e3:d8:94:dc:8f:9e:e3:28:1c:
9f:f3:96:2e:aa:44:63:2b:94:22:f7:4d:30:ea:1d:
7a:f6:ee:9a:18:fe:63:bb:7f:7f:84:1d:b2:12:29:
c2:d6:4d:57:66:e3:0a:49:e0:c6:2c:b8:b6:8a:c1:
8b:79:d8:9e:12:d4:59:dd:f2:93:d8:d2:19:a4:77:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:75:69:BC:6A:3A:98:0F:81:5D:DF:A6:8A:05:E0:A8:0C:ED:1E:34
X509v3 Authority Key Identifier:
keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:35:88:14:09:23:22:b5:b0:7d:cb:fd:70:81:64:52:48:cf:
fb:9f:d9:73:e1:4a:8f:19:97:54:26:53:7f:73:d4:30:81:9d:
ec:f5:55:b8:1c:64:b7:c3:34:ff:64:de:1b:60:c3:b2:dc:a4:
78:68:a4:fd:5a:80:cd:58:8a:49:c1:78:94:0e:cb:f2:58:96:
37:8c:7c:7e:7b:b3:6d:96:6d:70:5c:74:d2:f2:5f:b6:a9:21:
e7:5f:cc:ac:00:67:7a:59:bf:28:8f:0d:ad:d5:b5:60:b4:12:
37:25:25:90:8e:34:42:73:8b:1e:ca:3b:7f:a4:aa:ea:87:f5:
1c:d9:d3:70:3e:7b:ae:c9:cc:f0:86:64:e5:6b:6c:ba:cf:31:
f2:8c:38:9d:35:a2:53:51:bf:d4:d4:0f:1f:fd:14:43:94:cc:
9a:0f:a8:c4:5f:92:15:6b:7f:df:33:87:55:dc:45:54:0f:fa:
dd:b6:39:87:c3:d3:f4:65:50:6f:61:c8:f2:c1:02:01:4c:14:
2d:aa:24:ba:8c:b9:c9:af:b8:cd:5f:a8:a6:1a:81:df:a2:12:
e8:08:19:4f:1f:72:1b:ee:07:c9:84:7d:69:e6:7e:3b:c0:f6:
69:b3:bb:0a:db:ec:38:bc:7a:05:1e:66:cb:04:4d:b6:94:eb:
e2:68:56:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:05:44 2026 by rpki-client