Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: g6DgEBNAnpseXbePnv7rDqsNDpI8933exyFfnM5LhWw=
Subject key identifier: C1:5D:DD:34:FE:AB:87:FA:EA:1A:DD:B7:34:D3:3D:D8:30:71:E2:86
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 01A0D314EC4F26D0A30E0AA9801EFCDACCC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 11:02:38 +0000
Manifest this update: Thu 24 Sep 2026 11:02:38 +0000
Manifest next update: Fri 25 Sep 2026 11:02:38 +0000
Files and hashes: 1: 8bjq5CLAkMYnJtGthdYrockLCPY.roa (hash: eDG4zg9ilYUKjh0gJA5+ITJl6INuXH1V6df209hapIs=)
2: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: IR/tk3VYrp8/av7x5CeymNpWTJguKq4ChTQcEXLuPPA=)
3: y6q-4aOfHflX0pozAnd7z21SiEw.roa (hash: BNrcMKA3+AgY/9eYfHPZuG3AM/va4c4zSTiZb/uHiLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:14:ec:4f:26:d0:a3:0e:0a:a9:80:1e:fc:da:cc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Sep 24 11:02:38 2026 GMT
Not After : Sep 25 11:02:38 2026 GMT
Subject: CN=c15ddd34feab87faea1addb734d33dd83071e286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:1c:59:ea:3a:26:3e:a2:41:29:b3:2e:d6:
51:46:d7:15:68:7e:0b:41:5d:38:52:c9:1e:4f:12:
ec:50:de:4b:be:08:d3:6a:b7:4c:cb:d4:e3:86:90:
df:16:1a:c6:ba:fe:fd:db:b2:c7:a9:36:34:6b:12:
3b:51:1d:4e:bb:2c:2f:c8:b2:15:28:f6:33:2c:12:
32:97:94:fe:4d:91:25:76:e7:89:de:90:ed:b1:c1:
c3:17:3d:7a:70:8d:e5:c8:42:d0:84:68:75:fa:e6:
dc:cb:12:60:96:ec:67:59:8f:87:e8:8c:f5:7d:40:
42:28:95:17:75:ef:34:9d:4f:5e:d3:b9:ff:50:1b:
6b:16:9f:b5:4f:53:ed:3f:2d:c0:53:3b:d1:19:3f:
e7:26:69:4d:54:ee:7b:63:00:3f:26:6c:1f:e6:16:
da:95:ac:09:7f:96:34:75:27:5b:26:16:31:fc:0a:
0c:f5:2e:f5:36:7d:6f:6b:46:28:a2:a6:f2:b9:b2:
dc:14:a8:ef:7d:73:62:0c:95:e8:1a:92:3d:bb:d7:
79:a9:8c:33:6f:f3:66:5e:3d:e7:af:10:a4:2b:60:
2e:dc:18:c0:47:17:f8:30:4d:76:2e:ab:bf:52:71:
93:ba:f6:96:94:61:94:5d:5e:34:7c:00:c8:41:ec:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5D:DD:34:FE:AB:87:FA:EA:1A:DD:B7:34:D3:3D:D8:30:71:E2:86
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2f:fa:8a:9b:91:96:2b:f8:88:39:8c:f4:04:57:18:2e:43:
52:73:25:57:96:e0:fe:c8:62:5e:d0:83:71:9d:05:f9:7e:88:
c4:0e:0f:7c:3a:5d:68:c1:d4:ae:92:28:f6:d2:35:54:03:f8:
ea:c2:3f:ad:b9:a1:15:d3:fa:d6:d2:f3:50:a9:a3:c0:6e:a8:
9e:7d:81:cd:3b:55:29:c1:52:7a:c1:e5:7a:35:9c:51:2d:2c:
a4:6d:87:37:a7:3c:64:3b:4f:4b:87:2f:33:c7:1e:4a:8c:f5:
7e:58:2a:06:ff:7c:b7:2c:9c:9d:be:44:83:bf:9b:9c:0e:ed:
96:bf:7e:c2:83:9b:63:0b:f1:1c:92:9e:29:aa:72:92:c0:17:
10:96:b1:ec:6d:ad:23:e9:cc:55:a5:09:12:19:00:be:7f:4d:
f9:b2:4b:72:24:fa:f4:4a:d8:5e:bd:20:bf:93:c2:32:c2:c9:
06:de:a1:06:d2:a4:12:09:14:c8:95:c4:06:5a:2f:8a:1c:29:
c9:78:18:ed:a1:59:7b:e5:fb:ab:5d:1c:51:b5:b1:4f:e7:2b:
b9:b4:2a:fb:ec:fe:70:43:19:9d:5b:22:54:97:45:a7:01:97:
95:b0:14:ec:1f:c4:57:1a:6e:5d:b0:52:33:b7:61:65:57:e8:
d8:dd:e1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:31:46 2026 by rpki-client