Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/d26efa-4b50-406a-9ad3-0ede2b8e416a/1/Xzi4unWL4nI7jvAvUL8z04qHcGM.mft
File: Xzi4unWL4nI7jvAvUL8z04qHcGM.mft (raw, json)
Hash identifier: +4aiDnvKUI2lySWcfZx1EuKgzas/abVseSXPYRLoKMw=
Subject key identifier: EB:96:BF:77:12:A3:56:EB:29:A0:01:58:C9:2D:51:29:52:5F:FC:D1
Authority key identifier: 5F:38:B8:BA:75:8B:E2:72:3B:8E:F0:2F:50:BF:33:D3:8A:87:70:63
Certificate issuer: /CN=5f38b8ba758be2723b8ef02f50bf33d38a877063
Certificate serial: 01A0D23761D2BCAFB6766124C620E44A8589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xzi4unWL4nI7jvAvUL8z04qHcGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d26efa-4b50-406a-9ad3-0ede2b8e416a/1/Xzi4unWL4nI7jvAvUL8z04qHcGM.mft
Manifest number: 0C
Signing time: Thu 24 Sep 2026 07:00:39 +0000
Manifest this update: Thu 24 Sep 2026 07:00:39 +0000
Manifest next update: Fri 25 Sep 2026 07:00:39 +0000
Files and hashes: 1: QhPoitJGGsLihPAk8EatJ2_7MiM.roa (hash: uluWwxRgXG5oY8fbSsgEEq/rzoKJ5moGou6WGrU387w=)
2: U-8FrDOeOK5de4SGm5112krE8sk.roa (hash: o2eipC2G68KUUyxkW1wKlR0Xd/ksbF/8pHbqmTK5ob8=)
3: Xzi4unWL4nI7jvAvUL8z04qHcGM.crl (hash: j1AfTfdVQjRdFDtj6yPI6Cy/DU3xX3a3xSy28KaUznY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d26efa-4b50-406a-9ad3-0ede2b8e416a/1/Xzi4unWL4nI7jvAvUL8z04qHcGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d26efa-4b50-406a-9ad3-0ede2b8e416a/1/Xzi4unWL4nI7jvAvUL8z04qHcGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xzi4unWL4nI7jvAvUL8z04qHcGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:61:d2:bc:af:b6:76:61:24:c6:20:e4:4a:85:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f38b8ba758be2723b8ef02f50bf33d38a877063
Validity
Not Before: Sep 24 07:00:39 2026 GMT
Not After : Sep 25 07:00:39 2026 GMT
Subject: CN=eb96bf7712a356eb29a00158c92d5129525ffcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:13:92:70:da:16:31:4c:6f:17:09:82:19:27:
fb:db:e5:19:3a:f6:d7:bb:58:1b:5f:ea:1a:d9:5d:
c5:40:b5:46:9c:36:51:8a:c8:81:47:62:30:5d:09:
12:b8:ef:d3:c2:33:ac:94:04:cc:c0:47:d1:4a:85:
46:47:05:65:3b:49:8d:24:f6:80:f0:a2:5e:8b:e1:
cb:1a:c5:ef:dd:65:eb:c5:f4:94:28:46:70:92:de:
a6:0f:75:bc:65:64:c2:30:7c:31:97:28:a1:27:22:
79:a0:9f:4f:34:45:2e:85:20:4a:56:cc:30:20:7f:
a4:7d:2d:94:97:66:f6:f8:fc:52:53:d7:7a:5f:f7:
1d:b5:79:4e:e8:cc:cb:e7:ea:5e:bf:15:c1:4e:7f:
e9:d7:cc:f8:5a:e1:2b:01:13:d8:93:b9:09:52:ca:
c3:43:9d:66:92:e3:52:74:97:ca:d5:a1:b7:a4:ce:
16:0b:57:fc:d8:7b:2a:19:e0:52:de:4c:fd:36:cf:
ad:cd:c4:5c:8f:43:ca:b6:2f:77:54:b5:11:de:d8:
2e:f0:8b:3e:6d:d7:cc:32:bf:c0:d0:89:9a:3e:51:
87:c9:73:db:57:fa:ef:a7:a8:8a:24:35:7d:22:61:
6f:b8:5c:8a:6a:3d:e4:80:7f:8d:0c:54:c6:81:df:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:96:BF:77:12:A3:56:EB:29:A0:01:58:C9:2D:51:29:52:5F:FC:D1
X509v3 Authority Key Identifier:
keyid:5F:38:B8:BA:75:8B:E2:72:3B:8E:F0:2F:50:BF:33:D3:8A:87:70:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xzi4unWL4nI7jvAvUL8z04qHcGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d26efa-4b50-406a-9ad3-0ede2b8e416a/1/Xzi4unWL4nI7jvAvUL8z04qHcGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d26efa-4b50-406a-9ad3-0ede2b8e416a/1/Xzi4unWL4nI7jvAvUL8z04qHcGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:aa:82:bd:6d:bd:aa:73:f8:c0:7a:22:11:6b:66:5c:1d:5f:
a4:12:88:82:27:85:44:71:5b:9b:69:26:fc:3d:66:b1:04:b7:
66:b0:1f:02:ad:ba:5e:e6:66:21:46:f6:2d:35:8b:79:62:52:
3a:ec:ec:b5:e8:e8:1a:cf:76:3a:64:d3:43:5c:33:7d:b9:f4:
9e:35:c3:aa:19:a6:4d:42:37:20:d0:8b:c6:4f:b5:ee:ab:51:
cf:00:51:9b:fe:ba:a6:0f:1e:8d:e9:d0:52:dd:8f:9e:be:d1:
cf:74:5b:c1:87:a6:e2:94:4c:d4:3d:66:db:05:bd:32:cf:ef:
70:03:c7:9a:0b:80:97:60:61:2b:22:71:4d:df:47:aa:da:c5:
04:78:59:1f:ab:15:9a:f8:2a:06:42:ce:de:d2:dc:f6:33:fa:
f5:16:98:ae:e0:06:68:1c:60:27:82:a9:9a:b2:4f:ad:52:03:
41:c3:98:24:b0:69:cf:27:64:0b:19:81:e8:04:cf:cd:a9:5e:
20:96:ad:b7:c4:61:d9:05:12:ea:67:93:e8:0c:85:8b:17:45:
2e:68:d2:79:de:4c:6d:04:73:4b:be:2a:6c:d1:f5:e0:f4:7c:
49:31:d7:2f:f9:c3:30:28:50:56:7c:ef:b8:8f:6e:43:5a:2f:
c4:8c:d3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:44:30 2026 by rpki-client