Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: PIUTI2zExZnlM/y7j9H7O+tihauur4KzKH09VXnzwp4=
Subject key identifier: D2:16:EC:6A:75:C9:B4:00:4B:08:6E:00:EE:29:02:87:87:94:78:3A
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 01A0E399F1CADC9DC17DF76F707250BD8FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 1A78
Signing time: Sun 27 Sep 2026 16:01:51 +0000
Manifest this update: Sun 27 Sep 2026 16:01:51 +0000
Manifest next update: Mon 28 Sep 2026 16:01:51 +0000
Files and hashes: 1: RB5D86Eez18oD-QABqEilaFp2nQ.roa (hash: cNT5vI1+Epdr8/RiwTV50sHhN6dBP41X/USYdNru1kM=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: tw7/t3svutKTveSl9ZcLSng/sr9K7+s4NWPxtH2ITz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:f1:ca:dc:9d:c1:7d:f7:6f:70:72:50:bd:8f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Sep 27 16:01:51 2026 GMT
Not After : Sep 28 16:01:51 2026 GMT
Subject: CN=d216ec6a75c9b4004b086e00ee2902878794783a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:b6:ff:b2:70:c0:d2:fd:d2:c1:75:2d:91:
ac:62:0d:d7:f3:39:62:5b:b5:19:c1:dd:dc:a5:a3:
ed:32:11:1d:9b:74:46:31:a8:79:ee:dd:79:0a:52:
0f:9d:a8:a3:1a:67:81:22:be:28:3b:e6:ca:2d:d1:
79:0f:04:53:3d:03:b8:0e:08:b8:c5:14:2e:83:fa:
91:46:9d:25:60:df:ab:4d:60:27:02:55:8d:de:34:
d0:60:de:de:cb:12:56:95:08:a1:13:ef:72:80:74:
75:85:1e:6c:50:84:bf:9d:27:f5:23:bd:2e:56:11:
2c:9c:28:11:77:1a:a2:48:6c:bc:8d:3e:e4:f0:ab:
27:30:36:00:b7:0f:0b:62:13:81:89:61:81:8a:9d:
2f:09:ba:e0:95:a7:92:f8:51:d9:f4:e2:c6:bc:10:
77:aa:0e:3e:cc:95:b7:16:6e:ec:2b:cc:da:aa:ef:
65:40:7e:4e:19:b5:36:a5:ab:2e:1a:fd:00:b5:ea:
52:6f:b4:8f:8f:4c:52:98:62:68:22:b9:80:7b:25:
9c:c9:52:5b:47:6d:32:0f:37:07:3b:ce:a2:1b:ce:
0c:1f:f3:c4:61:dd:12:7b:29:a6:a6:3f:a9:6e:68:
4b:0a:f0:14:b3:97:6b:74:84:a7:ca:cc:18:da:98:
b9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:16:EC:6A:75:C9:B4:00:4B:08:6E:00:EE:29:02:87:87:94:78:3A
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e2:26:2b:8f:65:30:11:a6:a1:01:85:4b:ee:55:bd:9e:a8:
0e:8a:35:4e:ee:49:5d:b1:31:8f:80:93:e1:e0:5a:29:83:d5:
53:68:4e:5a:5c:8e:06:a1:21:24:1a:c1:d8:fa:d8:ec:48:0e:
88:e8:8b:8e:8b:b7:8a:bf:9e:4b:0b:cf:e0:a5:65:d7:b3:be:
5a:9c:8a:61:c2:d7:eb:b6:a6:e9:0b:5a:ee:0b:ce:50:fa:21:
da:13:f9:2d:fb:26:87:0d:32:6c:3a:7b:19:50:ae:b6:cd:ef:
2f:69:f1:d8:7c:26:a9:12:3a:17:90:38:5a:5a:03:a0:9a:f9:
76:7d:4f:cf:10:dd:8b:15:58:31:f8:5d:17:89:e0:b2:0f:3c:
f4:a0:51:eb:a6:30:62:92:b7:e2:00:5d:3a:e4:eb:ef:c0:b6:
74:39:38:c1:1b:6e:0b:68:1a:0a:fa:7e:cc:09:6d:14:ea:01:
db:88:e7:3d:76:e9:ad:1c:33:0b:73:73:ac:10:01:a9:9e:6f:
75:dd:14:07:fb:78:62:fb:53:5e:8a:df:e3:99:f3:93:6b:7a:
a2:d8:74:4e:5b:cf:e0:77:0b:6b:a0:37:c1:5e:b1:09:04:88:
1b:9c:c2:9a:1d:13:48:df:c5:f7:1f:7f:18:3f:62:e1:ef:35:
fe:a7:92:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:09:10 2026 by rpki-client