Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
File: xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft (raw, json)
Hash identifier: esosa/tmDo3IdH8e8md2UWekJ9KGgkhcqiCsx6Arupg=
Subject key identifier: 8E:63:71:25:05:0D:E9:E4:BD:ED:F7:86:D2:38:FA:C6:0A:32:78:61
Authority key identifier: C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
Certificate issuer: /CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Certificate serial: 01A13748B29915C15DA24EE935CF840EE37A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
Manifest number: 1AA6
Signing time: Tue 13 Oct 2026 22:01:13 +0000
Manifest this update: Tue 13 Oct 2026 22:01:13 +0000
Manifest next update: Wed 14 Oct 2026 22:01:13 +0000
Files and hashes: 1: XhfQtg6lg2sPtQqujy0Tvt47GJA.roa (hash: 4PIBlMBLgLaYJg4fGmEmHbbe8E3tiv3yMYNtFBiiWa4=)
2: xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl (hash: XQ9L8vSYLL1HTzWjd7Nf37Rqy7ydeKpTgWS/YO7OmO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:48:b2:99:15:c1:5d:a2:4e:e9:35:cf:84:0e:e3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Validity
Not Before: Oct 13 22:01:13 2026 GMT
Not After : Oct 14 22:01:13 2026 GMT
Subject: CN=8e637125050de9e4bdedf786d238fac60a327861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:01:94:1d:ba:f5:83:4d:11:57:48:e8:42:
d3:df:9b:80:49:9f:7f:18:ab:95:81:68:3d:45:93:
b3:33:13:28:93:b9:07:84:51:12:96:24:e2:1e:f9:
32:07:7a:3d:c7:63:31:90:d7:72:d7:51:93:01:c9:
52:27:78:fb:f7:e6:c4:ba:05:37:86:47:b4:9e:1d:
8b:60:04:d4:30:d0:20:51:8d:e0:9d:93:c5:05:ab:
b3:a2:60:50:f1:77:3e:7e:36:c4:64:7e:c6:fb:48:
50:a6:ff:77:27:5f:48:b2:84:15:d4:9f:fb:d5:a5:
01:4c:6d:93:90:62:50:93:a5:89:9c:64:76:be:84:
ce:b0:95:95:18:74:0a:b3:22:2c:e0:51:b3:3b:f5:
5c:64:dc:21:91:fd:43:ee:d7:d1:6d:ba:b0:4f:e8:
29:4c:47:2d:fc:9d:d6:4b:f1:3c:3e:8d:02:5c:fe:
b8:2a:8c:4d:e7:06:1c:f7:22:8d:45:a9:fc:b9:c7:
86:bf:c4:cd:dc:fb:8e:c3:54:e1:76:3c:c6:31:9c:
9a:aa:56:f0:2e:ad:6a:7d:a1:bd:84:ca:d7:4a:82:
bc:ed:15:8f:fb:41:87:59:65:ce:9a:a4:b0:ad:fa:
5e:53:9c:09:b0:d4:a1:4c:e7:2a:1d:3e:42:e8:c1:
dc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:63:71:25:05:0D:E9:E4:BD:ED:F7:86:D2:38:FA:C6:0A:32:78:61
X509v3 Authority Key Identifier:
keyid:C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4f:04:fd:ec:ce:12:b2:57:89:31:9e:db:c3:5b:c2:ad:7a:
60:75:92:d8:f4:53:61:9b:0f:8b:2a:01:69:89:fb:72:95:1d:
4d:83:78:75:7b:3c:62:93:e1:c9:17:d1:4c:88:6b:41:ed:85:
46:61:45:e2:eb:a2:20:74:24:23:1b:e8:72:14:6c:64:f5:76:
04:9b:f9:b1:85:6e:0d:e7:8d:39:cf:07:01:2e:3e:d5:e5:68:
be:f2:03:d6:4e:ed:b7:19:73:ef:aa:9b:1c:24:7a:c6:7c:a8:
8d:38:45:29:b9:c2:78:70:7b:e2:7f:84:ee:2e:d1:73:ba:d4:
ff:e5:7d:7b:81:b3:18:93:8b:97:19:64:cb:30:f6:50:a4:60:
7d:80:b6:2a:7c:24:c7:fa:5e:f2:4c:a6:2c:dc:58:6c:ed:71:
82:ef:4a:98:65:2f:e5:0f:2f:6e:cb:4b:b2:f2:55:28:6a:c6:
fe:d5:8a:99:db:66:e4:7e:c6:94:bf:93:56:47:e6:b8:ac:06:
f1:bd:74:3b:4f:8f:ee:2e:08:cf:1f:0a:40:b0:68:7e:f2:bc:
69:44:50:18:73:de:95:08:6c:3c:1d:9d:35:ac:ab:44:6e:24:
03:80:4c:d0:a4:a7:7b:83:45:e3:df:d7:01:99:3a:14:92:68:
25:ef:bd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:27:50 2026 by rpki-client