Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: 02Oy5vAtSF2LvbYCdHY6NAIo0Gy8mtUKNO12U6B8NcM=
Subject key identifier: A4:C0:47:1E:2E:A2:63:DE:39:27:B5:06:D4:6A:98:6F:FE:53:A2:F7
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 01A0D9840E55668FDCE5BB4AE61BAC989F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 1A78
Signing time: Fri 25 Sep 2026 17:01:45 +0000
Manifest this update: Fri 25 Sep 2026 17:01:45 +0000
Manifest next update: Sat 26 Sep 2026 17:01:45 +0000
Files and hashes: 1: Pt1Psw1-lXzUqfn0X0LMWdzipP0.roa (hash: 15BXKGLsn5CILBGoCHvyltyRe1OA4GGdr684IX7Rfck=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: 1XubFXTEp3G4HSTTeog85sh9mEkJ8V8Q9l4iIRk1j9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:84:0e:55:66:8f:dc:e5:bb:4a:e6:1b:ac:98:9f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Sep 25 17:01:45 2026 GMT
Not After : Sep 26 17:01:45 2026 GMT
Subject: CN=a4c0471e2ea263de3927b506d46a986ffe53a2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:7b:ab:f5:70:75:f8:12:a3:27:20:64:ae:
9b:e2:d5:51:93:45:7b:e7:7f:70:64:3b:72:f0:e2:
d9:b1:d0:55:d3:82:0f:04:3f:5c:e9:2e:e3:cf:10:
b6:28:08:50:16:fb:39:ee:50:01:60:f3:4f:8f:65:
80:b5:db:d2:57:71:1c:61:33:bb:ee:06:58:05:5e:
72:91:db:43:d0:a2:b8:f5:7f:fb:b5:d3:6f:6a:9a:
12:d9:8a:55:33:07:06:7c:18:58:cf:0b:05:25:91:
11:d7:c8:75:2e:c8:c9:cb:05:3e:fe:64:05:cf:d6:
f7:16:d4:bb:e5:c6:db:a9:08:08:7a:23:18:aa:3e:
f7:a7:75:65:e5:ac:7d:e0:26:1a:66:a1:db:e0:1c:
e4:ed:83:5b:c2:88:5a:eb:02:8b:15:00:df:e6:82:
66:30:1e:03:6b:5c:d2:de:04:c7:91:01:39:15:b0:
63:58:4a:3b:a7:7b:4e:25:26:d4:1e:5f:39:04:42:
80:10:1f:3c:53:46:02:24:13:1e:30:07:0e:b4:2e:
0d:ba:40:dd:31:0e:4b:15:9e:94:b4:8f:82:08:ae:
69:d9:6e:f5:e7:ed:73:d4:cc:24:ba:35:cd:e4:b3:
45:92:49:a9:1f:9f:6a:a9:b3:97:63:d9:25:9c:01:
a2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C0:47:1E:2E:A2:63:DE:39:27:B5:06:D4:6A:98:6F:FE:53:A2:F7
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7b:c6:1f:56:0e:e1:41:fd:25:06:6b:29:34:10:c2:81:ae:
dd:fc:95:ea:8b:c0:cf:92:b1:89:b8:03:84:7f:4e:57:fd:10:
0e:27:1b:8c:20:4a:a1:ce:a4:43:80:49:0d:5c:05:83:c7:c4:
ca:b8:a8:46:80:9b:d8:d8:d7:d7:14:af:1e:cb:90:17:48:97:
e0:cf:a9:11:fa:de:d2:b8:ea:38:01:f5:bf:1c:e8:72:53:a8:
3b:32:c5:2e:87:6b:4a:7c:7d:07:f0:a8:ab:a8:d5:a3:e0:1f:
ce:06:1d:e4:6f:5d:28:51:75:17:62:f7:0a:4e:d9:df:8d:d3:
89:f7:c1:97:11:73:fd:d3:3b:20:52:c4:73:2d:e4:9f:8d:dd:
8a:6e:ed:79:50:b5:28:18:b6:c9:04:87:f5:6f:97:ea:d3:77:
9e:a0:bf:44:2a:25:2b:db:b5:d0:40:a7:65:a2:ee:cc:5f:dd:
87:59:f2:94:eb:10:c1:ca:80:08:6a:29:2e:e6:f4:94:a5:aa:
55:a9:83:86:54:85:d2:0a:d7:24:a5:20:00:a3:a4:f0:46:a2:
fc:3e:c3:18:88:ea:16:64:5c:48:f5:7a:93:3a:2f:eb:83:9d:
4a:e6:e6:87:d6:d0:f6:08:47:d7:d9:3e:f0:57:56:e2:5d:45:
20:a7:5e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:47:55 2026 by rpki-client