Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
File: xTtM8KdHHwAPilagSbFjlnzDvZk.mft (raw, json)
Hash identifier: wK3WfdKLODUE7TyoNqND2884sICMKzjJ4qk6Q7RMqaM=
Subject key identifier: A8:C6:02:89:1E:2C:D2:A8:4B:93:73:4E:F6:BA:E2:4A:D1:8B:4A:40
Authority key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
Certificate issuer: /CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Certificate serial: 01A0E1E1AE3F1987224565EEE7D771ACE2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
Manifest number: 1993
Signing time: Sun 27 Sep 2026 08:00:58 +0000
Manifest this update: Sun 27 Sep 2026 08:00:58 +0000
Manifest next update: Mon 28 Sep 2026 08:00:58 +0000
Files and hashes: 1: 4O_QOhMXcJ0t8sIeKd1mrxtJgYw.roa (hash: TciVqBMkJDUC0ydXbkijfxJoweOnHoMs5V4ucXCEH+g=)
2: xTtM8KdHHwAPilagSbFjlnzDvZk.crl (hash: lxRtQG15B+orElPXM0x8YN7cgYtp93imaZVdU/otHcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e1:ae:3f:19:87:22:45:65:ee:e7:d7:71:ac:e2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Validity
Not Before: Sep 27 08:00:58 2026 GMT
Not After : Sep 28 08:00:58 2026 GMT
Subject: CN=a8c602891e2cd2a84b93734ef6bae24ad18b4a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:97:8e:95:17:21:1c:43:65:de:9e:33:9a:
fb:96:a4:44:d5:66:d1:a5:22:6e:ef:d4:3d:af:3d:
1a:64:f5:3a:03:9e:87:1c:ad:ab:30:c0:c1:0f:a4:
a4:1e:d0:dc:9e:a4:09:5e:6b:02:b9:86:1a:76:a2:
93:b5:e4:1d:d7:59:cb:ef:1b:29:c1:7f:c7:46:0d:
3d:35:e9:2e:c4:c0:02:46:16:ab:37:a6:ca:0c:07:
e6:2a:78:04:fa:70:e5:74:0e:bf:96:f9:c9:14:2b:
a1:7a:b8:f1:2e:04:34:d3:2a:44:73:d6:74:ed:56:
a9:46:91:af:a4:fa:04:d0:9e:05:7b:1d:3c:c8:a4:
e8:04:90:f4:46:b5:cb:6e:fd:de:ae:4d:c5:fa:a7:
c7:b8:44:03:fa:15:e0:c2:fa:b6:87:fd:b1:6a:5d:
c3:24:cc:dd:bb:dc:4f:11:ab:18:8a:f6:f5:ed:1f:
85:ee:70:86:75:b5:e3:56:b5:43:17:e0:a3:8e:27:
37:42:96:5c:8d:85:45:2a:30:5d:04:a2:cb:0a:4f:
f2:28:06:2f:9c:b5:9d:6b:3a:ec:43:68:34:fe:9f:
94:0b:fb:42:70:ec:b0:53:17:db:46:40:57:7e:79:
73:f2:c8:65:51:0b:64:a3:cf:eb:06:21:ec:f2:80:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C6:02:89:1E:2C:D2:A8:4B:93:73:4E:F6:BA:E2:4A:D1:8B:4A:40
X509v3 Authority Key Identifier:
keyid:C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:98:47:9e:3a:74:e5:00:95:41:4c:29:2a:20:e0:d8:b4:fc:
b7:b6:9f:93:60:17:76:9e:3f:df:37:6f:23:50:37:24:85:8a:
3a:13:88:91:91:1f:0c:bc:38:bc:b9:44:d9:98:34:22:40:7b:
cc:35:1b:4f:b6:03:80:56:01:8a:99:7c:b9:05:67:e9:f4:b5:
5d:71:00:12:b5:3c:1d:4b:75:71:f0:34:00:72:cf:98:21:da:
9d:a3:2c:69:da:49:40:20:27:ab:db:5c:75:e3:f8:88:0e:27:
75:c3:ad:b3:1d:84:16:70:1d:c7:de:34:15:23:3f:da:07:f5:
ec:8e:64:e8:74:bd:64:89:f7:8b:5d:c0:b6:c6:f5:cb:c5:ec:
aa:5e:bc:89:d1:1f:1a:59:44:a4:0b:e7:35:01:6b:a6:2b:a1:
69:a7:63:82:6f:ca:1f:a4:df:5b:96:0c:5c:04:f2:10:3c:e3:
66:24:b2:59:e1:93:57:74:80:15:16:95:51:f1:79:93:a4:60:
b2:95:4f:a3:a2:88:1d:01:e0:f8:81:ba:70:23:fd:b6:cf:a6:
1f:01:3f:f7:ba:51:9d:ca:6e:02:e1:6e:33:ac:50:0e:47:b3:
18:79:fa:6d:b1:8c:eb:0d:6e:e9:b2:65:d7:97:d2:f6:aa:48:
ee:1b:eb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:09:55 2026 by rpki-client