Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier: hIf3RWKyrh5UGC/PvuT7Nb8y4+F0NHCkhWRJFJ0+kOs=
Subject key identifier: F2:BF:4E:11:62:BC:ED:ED:1B:3B:4C:6F:CF:78:5C:46:56:80:47:45
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 01A0CD118C7DB3A3DA8C650211DFB32B77AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 07:01:14 +0000
Manifest this update: Wed 23 Sep 2026 07:01:14 +0000
Manifest next update: Thu 24 Sep 2026 07:01:14 +0000
Files and hashes: 1: BQKL8EXCPvyOQg1ICU181HzsTLY.roa (hash: MQTZW+TVECgfYFhuLaoeF6hUd6ELHRAnYHxRk4WvfLE=)
2: FxY1RAn7Uc02QNfQHdB91asNvfo.roa (hash: XFxgE3CskWpWNCg7s6TQKuMZYsJq+2wXqoHIuIsrGSk=)
3: mvSatyfuo61e-RTaG2TAjXDZEec.roa (hash: Wd+3k5bQsb75PtYForkA7tIC7S5S2MMNM7YiFG0yOOs=)
4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: ikjpNVUF7KWzL2UXaG8hOi5BkZr/hFEh35G43vPUyD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:8c:7d:b3:a3:da:8c:65:02:11:df:b3:2b:77:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Sep 23 07:01:14 2026 GMT
Not After : Sep 24 07:01:14 2026 GMT
Subject: CN=f2bf4e1162bceded1b3b4c6fcf785c4656804745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:83:29:b5:ec:95:99:cf:13:94:98:db:2e:
46:3c:9c:00:b3:11:b0:15:7f:57:d8:02:c4:3b:cd:
db:16:0e:cc:b6:e5:a7:7d:7b:c8:87:2f:c8:b4:48:
5e:2c:1d:88:af:6b:33:b9:f8:73:45:fd:8f:33:6d:
7f:ee:98:e0:70:57:9e:df:de:af:b4:3e:1e:25:40:
7e:0b:4b:cf:e1:fe:6a:b8:e6:aa:3f:69:79:33:17:
34:3c:3c:0b:86:be:e9:35:82:3c:21:62:00:85:69:
dd:a4:e3:a5:1a:fb:e4:8c:a6:d3:bd:a5:a5:d3:0e:
c5:48:30:3c:ff:68:07:d0:75:2d:bc:61:43:2e:94:
63:34:87:d4:bd:5b:7b:88:2d:76:fc:b5:b1:30:86:
d5:9b:48:29:07:2c:fa:64:b9:06:53:2f:80:6b:b4:
8a:49:8f:b1:75:91:26:89:9c:a2:8e:e3:ad:07:80:
31:87:0b:7c:e2:ce:ed:3e:06:a8:61:6b:8d:32:1e:
87:41:2b:82:d7:3e:b3:6e:2c:47:29:ba:04:cf:ce:
df:1c:9c:26:bf:18:07:7e:1a:c2:00:5d:9e:62:54:
8e:c5:d8:ed:a3:ce:f0:cc:36:99:5d:0f:87:8c:47:
b7:da:d2:c1:d0:3a:d7:30:c8:47:52:8c:76:e5:a0:
f7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BF:4E:11:62:BC:ED:ED:1B:3B:4C:6F:CF:78:5C:46:56:80:47:45
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fe:bf:4c:f4:05:18:b3:7e:8e:97:b7:a2:6c:f7:53:ec:45:
fc:fd:4f:c5:fd:17:14:1b:12:b0:0c:3e:24:f7:66:c6:3e:7d:
30:f8:66:79:68:0e:4c:02:12:4d:85:c0:d2:1d:97:3d:88:34:
c9:7c:29:64:cd:ef:19:c0:83:27:7f:44:2a:cb:1c:a7:f4:a5:
3b:c9:4f:9a:fc:a1:ed:d1:6f:aa:cd:5a:20:14:bc:09:49:c5:
cd:91:13:64:c7:76:20:7e:1f:84:d9:9b:16:31:03:68:ce:ae:
df:89:c6:4a:df:86:45:ad:62:01:a1:30:de:01:49:c4:7f:ef:
af:dc:94:cc:01:a3:f1:40:00:89:d3:49:48:f2:f0:13:f0:6d:
28:65:4c:91:34:05:fd:9a:f2:7d:61:34:45:c4:47:39:6f:66:
38:78:ca:1e:0d:67:f7:74:54:57:4e:d4:0a:97:b6:5f:aa:98:
0e:63:6c:4c:84:42:75:65:c1:6b:0d:71:a4:17:83:36:2d:15:
92:d2:a4:a9:e0:5a:f2:da:90:d9:30:38:23:f4:2c:fa:be:a9:
b2:4c:4e:1e:9d:d2:68:7f:e1:bb:6d:1a:5b:bc:38:84:c2:2f:
82:4d:2d:09:e7:07:de:03:d3:3d:be:f6:91:e9:85:26:a3:e1:
a2:e4:5d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:58:32 2026 by rpki-client