Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: 030xqVYmR2MYI/I/M63KNfn2HV0hYLye02JAs8LzzV4=
Subject key identifier: 15:A6:55:92:E8:C0:D0:33:8C:6A:9C:80:D2:B6:80:48:5D:36:38:73
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 01A0D8723BD1C12E55C1C77ECF207F605711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 1A74
Signing time: Fri 25 Sep 2026 12:02:40 +0000
Manifest this update: Fri 25 Sep 2026 12:02:40 +0000
Manifest next update: Sat 26 Sep 2026 12:02:40 +0000
Files and hashes: 1: 0GfPX1iH-4jrdeocNq_6rEuAOsw.roa (hash: ZXWqDRXmQQYRidDZbFeir8xCY/Br5x9u3HuJDCrOxDI=)
2: E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa (hash: Uscjfda3vNy/cunwHUUok4ph0ZEvFOV3pV/NuXcyZJ4=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: wnlRQP7mXFGCtakxoEF8rF+4IDWwzMegslD+pTq1/2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:3b:d1:c1:2e:55:c1:c7:7e:cf:20:7f:60:57:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Sep 25 12:02:40 2026 GMT
Not After : Sep 26 12:02:40 2026 GMT
Subject: CN=15a65592e8c0d0338c6a9c80d2b680485d363873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:63:f6:bb:f1:66:c0:c6:7a:e0:6b:ea:b3:
6b:bf:60:48:1a:a7:3b:33:57:e5:31:98:d1:ff:56:
71:33:9b:03:e4:ce:d1:af:ad:6c:a2:a3:53:20:ae:
48:e8:02:a4:ca:c5:e3:ed:48:cf:fe:96:98:91:30:
f6:ae:9b:7d:2e:48:9a:f2:c4:d9:be:93:76:51:0b:
d5:27:3c:6c:d0:55:0e:74:92:89:79:42:fd:44:51:
ce:7e:dc:19:a3:06:b8:80:9b:7c:05:8d:27:f3:9e:
3c:5b:3a:ea:cf:88:f5:8e:8d:15:75:02:a0:83:3d:
7f:7d:c1:bf:69:5d:8a:de:85:85:46:2b:f3:dd:80:
cb:82:af:61:84:8d:b4:c6:fd:7d:1f:d7:b9:10:39:
34:a3:84:06:14:11:d4:99:f5:40:39:b0:3e:84:3d:
ab:f9:34:4c:fa:40:73:31:0e:a5:0f:07:02:fe:4a:
c4:6d:7b:4a:76:8f:51:eb:08:f9:c2:c9:2e:9c:34:
9d:25:19:c6:2e:93:ca:ed:d2:1e:a6:54:84:e1:85:
ca:9e:7e:3e:74:a0:98:f0:c4:02:18:ec:4c:e8:6d:
51:92:f8:f6:4c:46:79:e0:63:7a:ac:2c:4b:7e:b9:
d4:31:1e:79:8e:88:48:e0:85:49:6f:6d:b2:e0:b9:
9e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A6:55:92:E8:C0:D0:33:8C:6A:9C:80:D2:B6:80:48:5D:36:38:73
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:1a:56:43:2a:e8:bc:8f:7b:ea:b5:27:79:39:71:3c:30:a0:
bf:d4:6e:74:f3:49:cb:53:e8:67:30:f5:58:e4:e6:c8:23:66:
4e:cd:ec:47:b2:59:20:78:f5:0c:f0:cb:0b:22:21:e4:ef:40:
e9:e5:7c:10:24:12:bd:04:d1:27:e7:df:7e:88:ec:9f:03:3f:
fb:af:6b:b8:ce:80:ed:dd:91:e8:28:b3:f0:82:d8:89:9d:be:
34:9d:c3:7d:80:63:9b:26:37:2b:f5:bf:a3:33:5a:59:0f:25:
49:b8:d5:8b:51:e9:14:43:94:b9:e1:35:78:81:b4:bb:63:7d:
75:ac:cb:5d:1d:c8:63:7d:88:60:c5:75:b2:7e:70:cb:cc:01:
7e:de:64:06:a0:21:b5:7d:36:9d:ff:b8:f1:d3:28:1b:cd:c9:
0b:03:fd:09:a9:72:c9:c5:b0:4b:03:3e:40:17:c2:37:60:3a:
51:37:64:a3:a0:ae:51:7c:37:b1:8b:c2:9e:c9:db:7c:5d:73:
1a:9f:cf:e6:d8:b3:91:5a:5b:60:1b:75:f7:cd:24:91:a7:3d:
8e:cc:7f:0b:e8:51:b8:05:88:f5:75:26:df:d8:a6:30:21:d3:
41:47:9b:4d:58:ec:73:df:5d:4d:18:ad:dd:39:ba:6c:95:f6:
25:b7:51:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:12:50 2026 by rpki-client