Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier: wmYl66ekL7mbuBFYPchhVMDtkBM9+gWzhaSJJ6ghCbU=
Subject key identifier: 68:13:7D:6C:1A:13:42:41:35:D1:BD:EC:96:8F:28:B0:6B:73:3E:CA
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial: 01A13E5CB69A5BFE75953FD7A94A00A3A7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number: 1AAB
Signing time: Thu 15 Oct 2026 07:00:25 +0000
Manifest this update: Thu 15 Oct 2026 07:00:25 +0000
Manifest next update: Fri 16 Oct 2026 07:00:25 +0000
Files and hashes: 1: FXTyPwjMGAiU5KxW_Bfbg2AROHw.roa (hash: OnE+aJgFklXNXWETHHDMbnfVlcK0uF/bBVveHl9Em7A=)
2: T3lGsdRYO3Jiv8YeumY1-URxH8k.roa (hash: 2iZU0Zg9KB5iXER8e3UtbINmEwCtWsu/Q8hRWGFKAwI=)
3: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: uMZ8pXQtt8VVhPGM13JUjjgZG59+LTz+ZPV6pONu5ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:b6:9a:5b:fe:75:95:3f:d7:a9:4a:00:a3:a7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Validity
Not Before: Oct 15 07:00:25 2026 GMT
Not After : Oct 16 07:00:25 2026 GMT
Subject: CN=68137d6c1a13424135d1bdec968f28b06b733eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:24:43:56:02:76:ad:ad:99:50:b9:0f:39:
f3:fe:18:df:e1:98:c7:63:4f:23:96:a8:4c:88:73:
45:12:3d:6f:30:b2:20:ef:f2:df:1a:48:9d:40:7d:
b1:bb:dc:69:b0:48:ae:9e:f1:47:e8:0a:37:5f:83:
1d:0b:47:01:c8:cf:f9:1e:5a:ca:3c:21:11:29:68:
ce:23:1b:f9:6e:d2:96:b8:e7:0c:9f:37:91:33:41:
73:ff:16:93:d3:6d:0e:8a:3c:e5:e2:36:41:19:02:
92:f8:41:45:10:f3:a3:2b:ac:e7:f3:1c:d2:cf:af:
2a:f2:28:6c:dc:ec:bd:98:78:fe:27:6a:71:20:5e:
a3:08:7c:b3:97:c1:69:43:dc:95:88:fb:59:56:fc:
d1:06:f9:ad:4b:36:e3:c2:f5:2a:12:db:6c:a9:d7:
aa:7e:8e:9b:7b:cb:88:d7:2d:44:e5:d8:e4:5d:cc:
ff:d3:91:6f:71:0f:d9:f7:16:7b:ad:4f:e0:68:85:
23:47:80:9c:94:5e:b7:30:d0:a8:10:79:98:cb:a4:
aa:1e:44:db:9f:e9:53:6a:65:01:9d:ee:f7:d7:8a:
b1:0e:33:17:c9:08:e6:4a:9e:f4:fc:54:a6:49:44:
60:d2:c4:81:1f:6f:ab:0f:ce:e3:f4:d8:54:12:de:
93:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:13:7D:6C:1A:13:42:41:35:D1:BD:EC:96:8F:28:B0:6B:73:3E:CA
X509v3 Authority Key Identifier:
keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:04:bd:b7:f0:59:d2:34:d9:be:ac:ab:dc:f8:bb:cb:a5:d8:
9a:9a:1a:ee:da:fc:df:e4:64:8f:85:d3:af:f7:44:fa:4b:d5:
52:d1:a7:d3:27:13:87:51:d7:2b:5a:0f:fc:70:b3:89:1b:98:
25:b1:cf:cd:70:74:11:cd:d4:de:29:96:cc:cb:cc:82:60:c7:
22:82:fa:76:53:aa:45:df:b7:8f:82:c3:06:54:52:9b:63:c0:
54:cb:33:c7:e2:54:a9:7d:d0:4f:d9:4c:4f:d5:40:e9:ef:44:
a2:ac:9e:1f:23:54:91:fd:ee:fc:11:55:d4:e5:7c:38:21:dc:
f8:63:09:91:77:17:c2:f1:e9:c5:5c:a2:a4:a1:67:e6:0a:8c:
ac:f4:1c:42:62:76:fb:42:79:54:b9:5a:b4:2c:3b:a1:f3:31:
35:a2:94:30:29:90:29:f9:c0:b6:bb:05:26:e1:03:40:09:40:
c4:39:4a:20:5c:73:54:55:33:9d:f5:d0:a1:80:c7:f6:da:70:
93:69:1d:5c:46:dd:73:b6:07:64:7d:63:c5:b3:b8:1b:c6:a7:
31:e4:f1:7d:14:ed:bc:63:d3:4b:8d:24:03:ae:60:3f:f8:ec:
4d:0a:87:05:a7:f6:8a:78:96:91:df:c0:fe:0c:50:57:9e:5f:
43:cd:2d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:50 2026 by rpki-client