Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: gZuMRZCSvGFax4MFEHPjBdkT+ZsvWXnQh6pdeFkg6G0=
Subject key identifier: 17:B7:7B:DF:7F:77:17:F5:34:8C:D4:F6:0D:27:83:A8:77:EA:D7:7D
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 01A0DB0431363321B0A0B9156C4CD508C7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 0DA0
Signing time: Sat 26 Sep 2026 00:01:20 +0000
Manifest this update: Sat 26 Sep 2026 00:01:20 +0000
Manifest next update: Sun 27 Sep 2026 00:01:20 +0000
Files and hashes: 1: Hi_yIbXB_AqEZvECw_6A2niKbbY.roa (hash: V9KwW6TEefSi+Nbg4IOw24z7gPz8KPWyVOeCLVyS3EY=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: tAvReZlxIjc0YEXJDYWVzl3la0Q7o2AThZ2W1tOkzGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:31:36:33:21:b0:a0:b9:15:6c:4c:d5:08:c7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Sep 26 00:01:20 2026 GMT
Not After : Sep 27 00:01:20 2026 GMT
Subject: CN=17b77bdf7f7717f5348cd4f60d2783a877ead77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:82:6e:70:c3:74:00:9f:5b:55:9e:e3:01:
28:3d:52:33:3b:c8:da:a1:56:bc:a1:a0:b3:3f:e2:
01:db:f0:31:e5:2c:cb:02:32:27:13:c8:eb:0b:6f:
d7:b2:95:65:0d:df:83:d6:53:2c:47:61:0b:5d:53:
bc:32:7c:2a:aa:4b:34:bf:ba:33:61:cb:25:06:17:
30:62:9c:da:f7:f5:66:55:2e:d8:a4:64:17:aa:a0:
cd:47:e1:2f:59:0a:73:cb:db:86:37:5a:72:eb:12:
62:10:7a:3b:25:ec:47:eb:af:d5:b8:d6:3c:a1:53:
1d:1e:05:82:36:02:cd:02:ae:1a:12:1c:89:98:03:
67:db:5c:5c:83:87:71:3c:25:73:7a:47:59:cd:25:
05:f9:72:24:1b:4e:91:15:9c:02:8c:09:1f:7a:6b:
f3:1c:4d:2c:10:ce:0e:2d:e4:02:e1:f5:4e:b8:2e:
fa:dc:d6:82:27:d1:2c:84:da:89:23:30:0c:81:b8:
8e:09:39:b3:da:0d:c7:7a:1b:4e:a5:e0:58:7e:6e:
a2:84:c3:39:a6:c1:e7:63:5e:b3:7b:f9:51:a8:75:
99:9d:94:63:02:cd:bb:fd:ea:a5:f2:ce:8c:b4:47:
0b:4d:a4:67:56:2a:53:ee:0b:01:9e:6c:33:0b:2e:
8a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B7:7B:DF:7F:77:17:F5:34:8C:D4:F6:0D:27:83:A8:77:EA:D7:7D
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9a:89:ef:bb:aa:ea:03:16:c7:34:58:98:d3:7e:b9:f7:55:
80:06:a3:0b:bb:5b:3b:a6:f6:46:e7:40:ca:36:70:0b:45:4b:
2a:86:b9:83:c6:0c:73:81:e7:14:d1:5b:62:06:53:3e:47:02:
df:11:02:72:1d:69:7f:66:88:1e:69:8a:70:37:da:dc:3a:1b:
a7:13:88:aa:53:92:b1:ce:5d:6d:09:70:9e:35:80:d7:bd:d9:
56:3d:ff:e4:3c:de:ad:47:18:ab:71:0a:0c:3f:b6:30:8a:2b:
ab:82:78:2f:4e:9a:60:93:8e:be:8f:a9:a7:8f:1a:c7:5d:78:
37:0e:75:a7:c0:7c:77:20:ea:0f:85:5c:d2:78:da:99:c8:29:
55:f4:c7:94:62:0e:d3:6c:60:ae:2c:2c:e5:5e:ab:fa:45:3f:
cc:6c:3a:aa:02:3c:96:26:da:15:d0:2d:02:a3:0e:c2:f2:47:
ca:98:7d:90:6b:be:a0:f1:12:e4:01:4b:e3:b2:ec:25:6a:b5:
cd:b1:a4:ce:e7:44:68:b3:7b:d2:43:5c:c0:59:7b:e2:14:53:
8c:8a:73:7e:26:b5:f5:e7:8e:75:7d:56:88:8c:7a:84:6a:ac:
8b:55:2f:3b:39:d4:bf:fa:35:ae:6a:02:45:1d:50:ad:64:15:
e0:12:10:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:47:01 2026 by rpki-client