Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File: xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier: /7WBQc2YpYLFX66rkhY8YCmuP0pjKvKVFaPLRKT6+r0=
Subject key identifier: AE:57:71:03:56:D5:1F:C4:85:47:46:4F:EC:50:09:2C:FB:5F:47:F2
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial: 01A13E5C872ED1D6245121A00E691F99385F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 07:00:13 +0000
Manifest this update: Thu 15 Oct 2026 07:00:13 +0000
Manifest next update: Fri 16 Oct 2026 07:00:13 +0000
Files and hashes: 1: SQgk14LJvQD58GJwhzmdHvEGMpA.roa (hash: 9nEhhW/HaWe0QsWNlFcb5L1Nm0I/W7PdcIHoewo3ZNU=)
2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: 7Q2fbzTxg+00dEw/t2YJww8AVfBa2jPtMxziv4WVpCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:87:2e:d1:d6:24:51:21:a0:0e:69:1f:99:38:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
Validity
Not Before: Oct 15 07:00:13 2026 GMT
Not After : Oct 16 07:00:13 2026 GMT
Subject: CN=ae57710356d51fc48547464fec50092cfb5f47f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:72:cc:00:77:54:6b:80:28:0d:e3:41:b7:5e:
3e:2e:1d:6a:cd:eb:40:84:60:33:29:93:b9:b3:19:
e4:15:be:31:74:e5:d4:ce:0f:27:74:1f:ff:ad:58:
36:c2:3a:fa:e6:35:6d:67:a1:0a:d1:0e:c3:02:2b:
8f:e3:ec:d2:0f:26:7a:fc:d5:58:97:f2:08:e0:5f:
74:b7:b2:09:35:b2:ea:3a:59:d7:76:c0:d9:45:76:
98:75:80:4d:1e:e6:5d:2e:c1:84:63:94:da:b4:fd:
81:91:f4:ae:51:9d:e5:56:08:95:43:6f:c9:b7:51:
fe:11:90:b1:f1:e8:4e:28:9b:c6:3c:8f:f3:8a:00:
a4:6d:6b:70:49:e3:b8:40:66:ce:56:56:07:b9:2b:
fe:d9:92:e5:2d:82:6e:07:ba:d6:cf:48:b2:05:67:
62:85:34:5c:19:94:24:5c:9f:13:7f:02:ce:02:02:
0b:3a:4b:11:de:f9:8c:cd:b2:0a:57:0b:13:61:d1:
cd:2d:e6:d3:b6:a8:73:ad:cb:00:0b:71:77:e1:2a:
9b:ea:c2:8c:92:e4:ab:9f:0c:e0:4c:cf:19:2f:6f:
ba:aa:a5:a5:0b:4d:e1:08:d6:81:9e:76:3e:00:b1:
7d:e6:91:a0:c4:d0:51:31:f2:0a:4a:04:02:d5:fb:
a1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:57:71:03:56:D5:1F:C4:85:47:46:4F:EC:50:09:2C:FB:5F:47:F2
X509v3 Authority Key Identifier:
keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d9:f0:af:76:02:6a:23:95:02:3d:20:e6:d9:e8:e4:76:bb:
d7:90:12:15:21:5f:a6:d2:29:e1:fa:57:b9:78:9b:53:45:49:
71:b7:9a:43:02:d6:84:b6:28:27:7c:93:2a:04:70:3a:da:b3:
5b:11:8d:5b:2f:ab:0f:d4:84:36:bf:1f:e9:07:57:29:2b:6b:
88:4c:83:b0:05:86:03:90:7b:b1:2f:68:e5:7e:4c:ba:00:ca:
39:19:f2:4d:d8:71:5c:71:a5:91:05:f6:b1:66:8d:fc:f8:99:
44:ca:28:f2:07:5d:77:75:01:06:4a:34:e1:dd:37:33:eb:25:
84:b9:25:22:78:d3:b1:7b:12:dd:b2:cc:4c:f9:10:8d:ae:59:
17:69:16:b4:77:62:6e:5d:b7:7c:cc:42:b9:28:a4:9a:48:06:
9b:0d:87:35:4e:9c:4f:9f:13:fa:9e:04:2b:18:fd:ff:26:fa:
ff:81:c5:eb:d8:f0:db:82:1a:c4:6b:35:3e:7e:16:89:6f:49:
2a:ad:37:e7:99:e8:8f:45:49:7e:ca:c1:53:c4:29:e5:87:fc:
c2:85:5e:4f:69:d3:3b:b4:cf:8a:e0:6b:c3:1b:5d:a5:6b:38:
4b:f5:e5:66:20:22:10:5f:bf:7c:6f:00:9c:5a:68:20:a4:f1:
c7:66:d1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:29:08 2026 by rpki-client