Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
File: xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json)
Hash identifier: asG3ZCriP5pxIRAk8eNlYLq+m8ppW4sY9zC38hHMYtQ=
Subject key identifier: 5E:88:6B:0B:6A:8D:23:21:30:8F:A3:94:7B:44:4A:74:89:86:B1:06
Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
Certificate issuer: /CN=c7208a8b85bcb807cad64138543263acb204448b
Certificate serial: 01A10F2861ADD8AF77C2EEFBFEBDDD3F7EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
Manifest number: 0A79
Signing time: Tue 06 Oct 2026 03:01:07 +0000
Manifest this update: Tue 06 Oct 2026 03:01:07 +0000
Manifest next update: Wed 07 Oct 2026 03:01:07 +0000
Files and hashes: 1: RgWi-aprHOGj2N0T2_M-Cs4Yuhc.roa (hash: FwSEX5ZWPDMp7ATa85IYHEA7kyGOC21zknxdskogO04=)
2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: gbIKe3vGJ6cOp+IGtVNTUzy6pPIExN7VqUb+4rQbf1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:28:61:ad:d8:af:77:c2:ee:fb:fe:bd:dd:3f:7e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b
Validity
Not Before: Oct 6 03:01:07 2026 GMT
Not After : Oct 7 03:01:07 2026 GMT
Subject: CN=5e886b0b6a8d2321308fa3947b444a748986b106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:a0:a3:5c:f3:3c:5b:62:f2:05:b8:68:6a:
8f:38:e0:f1:7b:46:37:97:31:18:dd:09:9b:e2:83:
17:5b:77:55:f1:6b:21:ed:30:12:03:4c:34:8c:e1:
72:4c:d6:a0:cd:1e:59:2a:69:6e:1a:50:bd:07:cd:
6d:df:65:8b:5a:d1:40:8f:8c:d4:32:4f:55:1e:04:
44:b9:be:50:6b:3a:e1:37:34:d1:69:bd:b1:60:5c:
1f:10:22:e8:3e:09:7c:2b:e2:69:47:06:2f:e2:4e:
7d:96:7a:bb:e7:00:1b:d6:73:c0:f6:d3:37:d3:41:
a7:43:e6:0a:74:a0:6f:ad:79:12:32:44:5f:86:5d:
55:17:e8:07:3f:34:05:9e:f4:16:96:a0:44:ce:92:
72:53:6b:7d:17:f9:af:e7:39:f2:cf:62:6a:4d:7b:
bf:ca:6b:ab:50:40:d0:6b:02:d4:ad:6e:28:72:63:
c2:68:fd:fb:3b:aa:60:cb:02:e4:42:97:d9:c9:33:
a0:32:6e:fa:1b:91:66:2c:86:54:13:e6:00:82:3d:
a6:5f:64:d7:d4:60:c0:1a:b5:99:5a:13:38:9f:e7:
ec:26:ab:e3:5e:a2:0c:10:3d:f3:56:93:0d:94:d0:
69:17:ca:e8:39:1e:81:df:00:51:ac:26:49:35:24:
7d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:88:6B:0B:6A:8D:23:21:30:8F:A3:94:7B:44:4A:74:89:86:B1:06
X509v3 Authority Key Identifier:
keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:93:1d:7f:62:83:57:71:f6:24:c4:a6:50:3b:22:e4:79:4d:
cd:44:a9:78:a8:57:b7:1c:7b:ce:80:f3:b7:45:9f:d8:85:0c:
65:a5:ed:f4:ca:98:35:42:02:0a:0c:7d:9c:fb:76:8a:84:7d:
5f:78:4c:a4:e4:ae:d4:da:b0:ba:c6:7c:ba:b6:ea:7f:0c:ef:
b4:e2:22:b7:05:aa:2b:38:47:9b:2f:93:0f:0d:6f:a8:64:ab:
94:a1:69:47:b9:1b:f4:58:b9:07:81:dd:db:1a:89:b8:78:af:
2a:10:e0:96:ee:be:63:ea:99:2a:f9:db:25:58:f8:65:f0:dd:
db:72:33:84:54:bf:04:00:5a:ed:90:4c:b3:02:6b:66:d8:3d:
4e:ca:72:86:56:f1:f8:ca:e4:eb:59:0b:f3:43:3f:e6:4e:a0:
e4:81:cd:2c:58:ad:c4:85:a0:6e:fb:19:81:57:04:d9:bd:94:
2a:f2:60:46:0f:e6:63:f0:11:1f:7c:af:b7:ca:eb:b5:75:87:
c2:97:7f:47:ae:1a:08:a5:71:6a:3c:62:ec:b3:c4:d9:67:d6:
35:f2:b1:71:79:e2:d3:16:75:4f:1e:16:cb:bd:00:93:eb:52:
20:1f:94:48:eb:b2:d8:91:bf:f0:ac:08:34:5b:a8:80:d0:c1:
05:1f:c2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:41:05 2026 by rpki-client