Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier: cNUjFh6h+QMPy77htIHL+GnaIiRfN+PgqcHSYGrc0DM=
Subject key identifier: AB:CE:DD:77:92:A2:9E:73:18:22:A5:6E:60:33:D3:9E:4C:78:8E:D9
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 01A0D5DEE95CFDB313D1D571B1581F3571F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number: 1A8B
Signing time: Fri 25 Sep 2026 00:02:30 +0000
Manifest this update: Fri 25 Sep 2026 00:02:30 +0000
Manifest next update: Sat 26 Sep 2026 00:02:30 +0000
Files and hashes: 1: vvOgIMkDpg0381NKvOJ6xEsVrhU.roa (hash: Ilfe2d/82ILTFX47xfIYllXXNOO6y9+T+nkxBpSb/2g=)
2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: LsSJD+p0Vs2U7evfO03nep0pLNYonBwZOUnSrneAoQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:e9:5c:fd:b3:13:d1:d5:71:b1:58:1f:35:71:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Sep 25 00:02:30 2026 GMT
Not After : Sep 26 00:02:30 2026 GMT
Subject: CN=abcedd7792a29e731822a56e6033d39e4c788ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:98:c3:50:11:12:88:b2:82:2d:3f:b8:46:dd:
0f:41:d3:eb:3c:d0:5f:95:ee:75:58:8a:e0:e4:ae:
ac:d6:07:ce:3e:f7:f8:b1:fc:aa:35:b6:42:2b:23:
b0:09:7e:10:a0:6a:e6:6b:a8:c6:10:bc:c7:b7:20:
1f:48:30:97:c3:30:f5:2c:f1:cb:ca:bb:d6:08:2c:
06:a0:d1:05:f0:9f:06:1f:d9:a6:2b:b7:66:c8:8d:
a9:42:fd:9e:d2:fb:85:f1:49:5b:f8:61:9e:bc:f7:
ad:20:b0:fe:4a:a2:92:01:7c:98:73:bb:e9:f5:fb:
d3:6d:f2:8a:16:68:9c:fa:dc:87:5a:71:1c:da:40:
18:5b:db:16:4b:2b:6f:72:49:24:f8:be:24:e3:cf:
1a:7c:c6:66:69:e1:59:d8:e6:eb:a2:73:f6:4c:95:
a3:a4:df:27:55:1f:81:3b:0f:ce:32:97:e3:54:e1:
cc:8b:bb:bf:db:cb:30:14:68:2d:3b:48:92:d8:aa:
2d:67:ea:66:61:b5:a1:77:09:ac:37:67:55:e4:a0:
2c:92:d2:05:d4:2b:8e:9d:26:64:3b:3f:4f:cf:d3:
bc:91:fe:f0:ba:64:29:c2:82:6e:08:0c:fa:52:ee:
b9:41:aa:3d:32:bb:cc:d4:31:5c:5c:05:23:b0:e7:
c5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CE:DD:77:92:A2:9E:73:18:22:A5:6E:60:33:D3:9E:4C:78:8E:D9
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:21:93:9d:45:51:f2:49:90:48:6a:e2:1c:72:13:a9:89:ab:
00:16:ab:16:fe:e1:de:80:83:b2:03:74:c8:20:c7:2c:47:4b:
16:a8:c0:23:38:91:24:ed:49:5d:72:e1:9e:fe:ad:1a:0d:67:
5f:2e:47:80:3a:b3:7c:46:68:3a:7f:c1:fc:eb:70:1d:c2:d8:
0c:53:8c:a6:b5:82:48:aa:48:72:cd:79:15:a4:80:b4:37:cc:
2c:0f:35:5e:0f:22:ef:90:4b:f4:78:a6:42:38:59:64:73:6e:
7a:c3:82:8e:bb:2d:b8:53:94:fd:56:93:f9:9e:87:62:e1:62:
88:67:c5:99:86:50:d3:3b:b7:99:61:52:b9:eb:87:cd:30:b5:
8d:c3:c2:ac:f8:7a:5b:46:b4:74:fd:79:40:24:df:1f:cf:e5:
39:d6:31:32:47:01:61:71:6b:8c:04:c4:f8:55:63:a7:62:f6:
40:32:a8:89:7d:de:a2:ff:aa:f8:0d:98:ec:3a:7d:41:17:fd:
83:94:f1:5e:d1:af:50:fc:ef:d6:b2:ba:ab:6c:52:76:3c:a7:
f4:d1:50:ce:83:18:4a:0f:67:e2:38:50:3b:f0:fa:97:24:88:
c2:92:6c:64:04:a3:00:7d:68:42:3a:84:f9:95:ea:4e:d1:2e:
c6:59:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:30:54 2026 by rpki-client