Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: 26wqz2yjZJHVkNCgn2n59T1khghNk3+I+VPeBf/A6yg=
Subject key identifier: 0E:70:9C:18:40:8A:A9:77:5F:87:2D:B9:8C:08:02:38:83:F4:6E:B3
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 01A0E8C12587497723B9255B9310BDAB534D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 0793
Signing time: Mon 28 Sep 2026 16:02:47 +0000
Manifest this update: Mon 28 Sep 2026 16:02:47 +0000
Manifest next update: Tue 29 Sep 2026 16:02:47 +0000
Files and hashes: 1: tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa (hash: 3SzovpialpEoSK1tVIj0K+EFB6CyFsxOHbtKDkoQSb8=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: +MxEID7iU1tOhS3ighXvezmt1wcMnXjQ9ekYDaJs3w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c1:25:87:49:77:23:b9:25:5b:93:10:bd:ab:53:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: Sep 28 16:02:47 2026 GMT
Not After : Sep 29 16:02:47 2026 GMT
Subject: CN=0e709c18408aa9775f872db98c08023883f46eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:7b:a1:d3:4f:4c:cb:15:bb:4d:18:ae:7c:
f6:89:6f:be:72:4a:17:8f:04:98:51:24:37:49:37:
8e:0c:45:83:d9:54:77:ff:0b:e3:67:2c:86:67:b4:
4c:47:65:2b:f2:36:4a:1c:ac:8c:4c:3b:ec:6b:9b:
1f:b9:d1:ef:50:33:b0:0d:ac:93:fa:e6:f5:d8:85:
6f:13:18:4a:a9:f3:82:ef:de:e5:45:03:40:79:1b:
89:1d:6d:d2:63:ca:6e:d6:99:61:36:fb:2c:c1:fd:
7e:33:6f:28:17:aa:49:33:47:3c:9a:48:c4:8a:14:
c7:d6:01:bf:30:a1:fd:1c:dd:a6:cd:da:df:82:1a:
c1:5e:db:64:fd:82:f0:8d:58:7f:1f:92:86:ad:4f:
d5:72:5d:95:cd:c3:66:fa:dd:c4:23:eb:16:e2:fd:
c0:62:07:f0:42:bc:84:5e:c5:b7:5b:92:e4:35:73:
ba:0d:5d:43:1c:bf:4b:c6:8b:67:a6:32:d5:6d:56:
1e:6d:ad:a5:2d:c5:ab:28:d0:b4:76:38:38:23:af:
8f:ec:8e:67:4b:45:a6:fb:b9:c3:7d:68:dd:62:27:
10:53:bd:24:f9:8d:57:f7:ea:91:ea:d0:05:aa:92:
14:d9:ff:4d:ce:c9:3f:cf:67:08:52:0e:09:22:ee:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:70:9C:18:40:8A:A9:77:5F:87:2D:B9:8C:08:02:38:83:F4:6E:B3
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:da:6c:b2:52:04:f4:2a:cb:3f:4f:e4:a3:1b:0d:86:8c:32:
a6:5c:2d:c1:26:bf:9d:93:6c:b8:dc:ad:d7:a1:ff:ab:dd:82:
68:14:71:ea:78:1a:10:fe:ed:b1:46:3a:b0:c6:bd:d7:82:ed:
c2:1b:f9:80:8d:93:2a:c2:b8:11:2f:80:dd:28:9c:44:f4:2e:
d5:c3:6b:ba:5d:ca:be:b5:2e:c0:85:4a:26:09:4c:63:e5:b7:
b1:f7:1d:26:45:7e:ac:99:3d:a1:b0:0c:6e:b6:76:df:cd:10:
a7:7e:59:9a:e2:60:fe:79:65:f5:ee:f1:98:96:e7:54:df:aa:
d9:42:3c:e0:46:fb:2a:9e:2f:b1:d4:1c:c9:67:9f:7f:e1:1b:
25:4a:fe:06:18:67:3f:51:00:7c:4e:74:44:ca:ec:d2:ba:3a:
a0:62:43:9c:3b:31:58:0f:10:bb:44:d0:30:a0:a8:12:dd:95:
63:48:4a:25:c9:6a:40:19:5e:8a:00:cb:0d:4b:a5:a0:58:0d:
6d:43:a9:43:43:cf:4a:30:d2:d0:bc:f5:88:07:59:8d:ec:5a:
d8:f5:0c:7c:bc:c4:c9:f4:23:bb:d5:dc:ea:cc:d5:bb:3e:e3:
3a:0d:93:76:72:e0:74:19:a3:3a:13:f9:d0:b5:7e:4b:04:33:
11:a5:98:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:28:04 2026 by rpki-client