Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.mft
File: xJH8Ajs5EjN6xxQp2chKN15bzS8.mft (raw, json)
Hash identifier: kCHd1FMjSYyz73XAij2tNfiOBUUx/unRxji36uWnIFs=
Subject key identifier: 89:ED:54:25:A4:5C:00:67:9F:BA:7D:DC:A9:05:75:36:63:8D:9E:E1
Authority key identifier: C4:91:FC:02:3B:39:12:33:7A:C7:14:29:D9:C8:4A:37:5E:5B:CD:2F
Certificate issuer: /CN=c491fc023b3912337ac71429d9c84a375e5bcd2f
Certificate serial: 01A0DD2A6F05A68B30766A60F28F716ADF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJH8Ajs5EjN6xxQp2chKN15bzS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.mft
Manifest number: 22
Signing time: Sat 26 Sep 2026 10:02:20 +0000
Manifest this update: Sat 26 Sep 2026 10:02:20 +0000
Manifest next update: Sun 27 Sep 2026 10:02:20 +0000
Files and hashes: 1: wNtH8SQdtiCv3yvmwmtJ4tjEIpg.roa (hash: KFPihkmGqp/gfErugdaWlWM5LZ9F8sQft1dGIGgMm3A=)
2: xJH8Ajs5EjN6xxQp2chKN15bzS8.crl (hash: tQoc5HTia5+b3ydygUfJSueeoMbGDpiWncT8dVc2b0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJH8Ajs5EjN6xxQp2chKN15bzS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:2a:6f:05:a6:8b:30:76:6a:60:f2:8f:71:6a:df:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491fc023b3912337ac71429d9c84a375e5bcd2f
Validity
Not Before: Sep 26 10:02:20 2026 GMT
Not After : Sep 27 10:02:20 2026 GMT
Subject: CN=89ed5425a45c00679fba7ddca9057536638d9ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:1d:f4:c7:ef:dd:d7:01:ef:35:c9:6f:84:
e6:c2:f9:2d:2d:98:c7:bc:05:a6:df:e6:82:ae:4d:
8e:e8:97:07:8f:50:5f:95:f5:83:ab:31:cc:e7:57:
38:f1:b1:2d:27:3d:32:2b:99:2b:1e:f9:91:26:f2:
dd:37:0d:58:05:60:c2:f4:02:45:f5:c8:b2:9d:c8:
69:2f:54:02:bd:07:2b:e1:e2:9b:48:14:60:3b:ee:
af:5f:4c:80:d2:f2:5a:fd:85:cc:07:a7:f7:9d:ad:
1d:dc:9d:cf:3c:51:63:bd:78:46:bb:02:7a:d0:23:
d8:71:74:b7:03:7e:14:34:9b:6e:b7:ab:6e:1e:d0:
5e:04:5a:fd:66:ba:2d:16:63:91:f7:22:2d:5c:55:
fe:21:6f:2b:b6:29:54:81:c1:e8:3a:04:02:1d:64:
63:53:39:fd:a4:03:8e:88:1b:65:a6:53:7f:9d:38:
d2:d0:58:ee:1f:5f:44:df:62:4c:fd:a9:56:eb:c2:
d3:02:b7:96:66:5c:26:f6:8f:f5:e1:e1:9d:3d:da:
b9:0a:ef:d4:a2:91:59:27:6e:b9:31:9f:f8:4e:66:
6a:21:9f:d6:94:c8:f3:fc:7a:95:93:5b:50:0f:67:
94:45:59:6b:31:ba:6c:70:57:15:8e:fa:3f:b1:49:
dc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:ED:54:25:A4:5C:00:67:9F:BA:7D:DC:A9:05:75:36:63:8D:9E:E1
X509v3 Authority Key Identifier:
keyid:C4:91:FC:02:3B:39:12:33:7A:C7:14:29:D9:C8:4A:37:5E:5B:CD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJH8Ajs5EjN6xxQp2chKN15bzS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fa:91:08:07:6b:df:05:bb:28:aa:ec:c3:9b:0d:d2:b3:ae:
27:36:5f:ff:51:1e:94:1c:c1:5b:ec:51:91:07:e5:16:03:32:
81:8d:10:4b:da:b8:d0:f8:24:5e:71:90:c3:9a:33:bb:4d:02:
b3:01:22:9d:51:0c:59:31:ee:05:06:91:33:b4:32:54:ed:d4:
2e:a0:9f:d4:e9:df:f8:b1:c7:64:02:07:41:34:81:e3:ad:a1:
5b:ea:b7:77:6c:0f:0c:3c:2d:f5:7f:0d:03:db:29:01:7d:2e:
f7:0a:8c:e2:ea:3b:b8:59:93:7c:8c:6f:0f:39:bf:77:2a:07:
bc:63:47:46:55:f6:4a:51:b9:ec:9a:b9:82:4b:05:32:1b:4f:
6c:02:b2:c6:06:ba:16:81:4a:b9:da:bb:65:e3:99:a5:50:8e:
78:98:be:6c:73:f9:32:ad:e0:76:f5:a3:0c:90:c4:fd:eb:08:
e1:56:12:fd:45:3b:16:67:85:1c:73:a5:34:34:16:08:b8:28:
21:99:5f:14:bb:cc:79:94:d6:6b:12:d1:93:51:9a:89:11:b6:
08:e6:30:d4:68:fa:a9:59:f3:8a:13:59:fd:39:e3:8e:ec:6d:
35:8d:ba:b8:83:d3:22:59:22:60:95:51:5f:61:6b:e8:f5:72:
28:a4:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:27:22 2026 by rpki-client