Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: vjSApc4Ze1AJDg42KW+9vet8ol7p8cja4EgrlaD+AKw=
Subject key identifier: 3D:D9:9F:D1:81:7A:23:7D:25:2A:34:02:D0:8C:E9:82:95:68:A0:A8
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 01A0DC4DA1D41A45E0CA2AD70753C28E19AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 1A76
Signing time: Sat 26 Sep 2026 06:01:10 +0000
Manifest this update: Sat 26 Sep 2026 06:01:10 +0000
Manifest next update: Sun 27 Sep 2026 06:01:10 +0000
Files and hashes: 1: 0GfPX1iH-4jrdeocNq_6rEuAOsw.roa (hash: ZXWqDRXmQQYRidDZbFeir8xCY/Br5x9u3HuJDCrOxDI=)
2: E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa (hash: Uscjfda3vNy/cunwHUUok4ph0ZEvFOV3pV/NuXcyZJ4=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: IGKx22zy2FA9PkIIPem7hkX2twTCAiBWenma1WigpUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:a1:d4:1a:45:e0:ca:2a:d7:07:53:c2:8e:19:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Sep 26 06:01:10 2026 GMT
Not After : Sep 27 06:01:10 2026 GMT
Subject: CN=3dd99fd1817a237d252a3402d08ce9829568a0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:37:fa:d0:95:c9:3b:14:ce:69:91:76:fd:
6c:c3:54:d5:a1:df:08:71:0e:06:c9:7c:71:36:02:
c6:a3:d6:bc:6f:e0:db:42:41:b7:4b:96:8c:27:e2:
ea:69:2b:50:69:1b:07:ca:79:15:ad:63:45:b5:b0:
a5:a7:18:82:e3:cc:db:df:d6:07:ed:7e:d8:97:33:
cd:1c:67:e5:0f:5e:ac:2f:ab:9c:93:0d:ab:1b:54:
ab:54:9a:73:d9:a5:f8:30:44:e5:64:ca:a1:cd:b7:
3b:66:d0:c8:1a:3e:4c:26:23:94:dd:35:73:f6:86:
ff:34:3f:bf:ba:36:01:24:72:c7:c7:fe:d2:c7:e4:
93:2c:8b:6f:8d:eb:3f:3a:5d:c4:80:5b:a7:d5:96:
c7:6e:8d:bb:9a:90:d6:d6:01:5c:30:20:10:f2:ba:
ff:9d:d5:c5:56:da:2a:c1:44:55:97:5c:de:f4:7b:
47:be:7a:b2:d1:ea:d2:26:53:5b:f4:d4:da:0e:ab:
93:1d:5e:3c:4a:6d:e1:d3:43:32:69:38:99:09:a0:
22:b3:9a:d4:13:0a:aa:16:ef:be:62:84:d4:30:b0:
86:f4:d8:63:f5:b1:f6:00:4a:0d:c2:e9:92:82:32:
c5:b8:4e:2a:c6:ec:98:d2:40:5c:4b:1b:69:5f:c0:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D9:9F:D1:81:7A:23:7D:25:2A:34:02:D0:8C:E9:82:95:68:A0:A8
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:f6:ed:00:75:3c:52:e4:3c:12:73:47:16:4e:d2:c3:88:66:
59:85:a3:a5:d2:96:e7:91:b2:ac:be:c9:cf:54:4d:11:86:a5:
50:6d:1d:8d:4e:e1:20:61:36:f6:7b:52:41:b7:b1:4e:bd:1a:
66:22:8a:60:32:5b:4f:c9:22:63:f0:45:30:a1:50:26:70:18:
11:04:f6:47:34:cc:e1:15:21:ee:f6:d4:b7:da:47:4c:2a:e1:
30:95:bc:c4:e4:66:49:d4:34:96:92:ff:22:07:50:72:e4:e4:
77:96:f9:76:2e:58:df:43:63:4b:8f:a2:ba:ee:97:6a:97:ba:
c0:35:36:9c:57:79:0b:6e:13:6c:b4:40:29:d5:4f:38:10:66:
d7:85:ce:59:27:54:40:a4:e6:9e:25:90:9e:23:a5:3a:8f:2d:
8e:a1:75:94:9a:47:28:e4:a4:67:ed:58:db:43:80:be:d1:66:
19:45:43:63:5f:3e:74:71:df:ab:5c:51:8b:25:54:b1:a2:e5:
2a:02:07:99:73:59:9a:3a:df:8d:a5:21:05:8c:1f:b1:ef:a2:
65:e1:2c:72:c7:80:f2:40:1e:7e:e9:3c:7b:c6:64:7e:28:5b:
10:70:21:89:77:91:63:47:ee:4f:01:46:5d:73:61:45:6a:27:
89:21:d3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:03:31 2026 by rpki-client