Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
File: xg8yRv3WG6G1eS_hrsStypjXWlw.mft (raw, json)
Hash identifier: TC6Cxdq3OsFatft+lIGfw8JA7lp8n4pJyzbjrcIc1tY=
Subject key identifier: A5:68:B6:D6:B6:A1:87:60:B2:ED:19:38:DB:F8:C2:D1:A5:48:8B:7A
Authority key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
Certificate issuer: /CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Certificate serial: 01A0E1E1B8176C19D03F16D633848B257A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
Manifest number: 0456
Signing time: Sun 27 Sep 2026 08:01:01 +0000
Manifest this update: Sun 27 Sep 2026 08:01:01 +0000
Manifest next update: Mon 28 Sep 2026 08:01:01 +0000
Files and hashes: 1: MmQGKSoH5LF3BVkr3ibrE-H9I9E.roa (hash: yWJCfOrBqqRptAvrnSvVrhM/S/WywcoV/IXeHHMd0es=)
2: xg8yRv3WG6G1eS_hrsStypjXWlw.crl (hash: 6CHq4uY5nIj3ThlPxj6xmHvj0KmgEMfGbHlsoRaBqfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e1:b8:17:6c:19:d0:3f:16:d6:33:84:8b:25:7a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Validity
Not Before: Sep 27 08:01:01 2026 GMT
Not After : Sep 28 08:01:01 2026 GMT
Subject: CN=a568b6d6b6a18760b2ed1938dbf8c2d1a5488b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:28:54:8f:e1:02:d0:3f:05:5e:11:31:de:
1a:8b:9c:0f:b6:61:a5:9c:bb:f7:fb:b9:34:69:0a:
2d:17:81:97:b2:e8:c4:15:2e:68:d6:c7:39:e3:2b:
82:2b:89:76:a1:3b:8e:38:93:93:2e:3a:f7:04:be:
57:79:1d:6a:1f:b1:81:e3:1e:da:79:42:f6:bb:a4:
8e:dd:77:0e:4d:1e:d5:cb:99:ec:2d:3d:e9:b6:2a:
7f:a2:8b:53:ad:bb:84:ba:23:71:9b:0c:a8:31:76:
9f:21:18:89:87:4d:f3:b3:03:97:6c:a9:da:77:64:
b0:70:62:4d:e2:3e:89:fd:54:a3:9f:12:80:39:cf:
90:01:34:99:da:1c:63:de:81:65:d4:e1:93:fa:bd:
31:3d:f9:aa:99:de:68:9e:c2:c1:0f:ce:8c:19:10:
c3:74:a6:0b:f0:0d:8e:ae:62:5e:04:72:cc:6a:25:
d3:a1:92:ca:bd:00:4f:c4:18:51:41:b9:51:05:9b:
1d:3b:93:82:55:24:35:18:35:48:14:62:07:b1:ee:
62:b0:3c:b8:10:78:9c:19:cc:45:4d:de:20:7c:03:
bd:6f:4e:59:76:cf:f8:d0:b7:9e:b6:7e:be:8e:54:
79:92:ef:4f:d6:ca:ff:9e:4c:e7:80:9c:f1:00:92:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:68:B6:D6:B6:A1:87:60:B2:ED:19:38:DB:F8:C2:D1:A5:48:8B:7A
X509v3 Authority Key Identifier:
keyid:C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0f:03:ff:34:39:e3:05:08:57:e4:c5:a2:97:38:d0:0c:09:
f5:14:39:8e:ca:79:fe:ae:46:b0:24:e8:bf:ef:fc:6c:40:08:
68:6c:a1:34:3c:51:3b:52:fc:bb:db:0c:4d:73:37:4d:6a:d8:
63:92:1e:70:40:6e:f7:e4:c5:1e:fe:e3:04:2a:04:80:90:37:
56:86:3c:96:37:d9:aa:e0:e8:b6:17:00:9f:6b:87:fd:83:f1:
c3:24:ce:67:07:5b:a4:84:c3:74:f7:2f:a0:3c:02:0b:7d:b6:
b6:78:cf:a7:c9:38:9e:66:62:a7:f3:81:f5:eb:fb:1b:16:7e:
f3:d1:98:b5:21:d2:97:bd:f6:96:dc:ed:a4:3c:80:fb:f4:15:
82:b6:d2:a6:7d:f0:63:c9:ad:13:11:c6:f9:ed:3a:40:1e:a6:
07:57:a6:3c:8a:7d:c5:7d:b1:be:fb:76:fe:7f:30:26:c2:f2:
cf:40:11:c8:cd:af:08:6c:e7:d5:e3:0c:33:5d:ac:43:ea:6a:
7f:6f:59:1e:7f:fc:8d:55:9b:f8:54:14:30:56:94:05:b9:d2:
b5:2e:c8:c1:b8:2e:ff:7a:b6:11:4c:80:13:b8:c5:20:1a:fe:
61:ed:f7:ba:85:f4:82:d3:f8:1e:0e:04:9f:78:4b:29:a5:ba:
49:d9:29:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:45:01 2026 by rpki-client