Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
File: xypST5sbOAHb18iaFgrsB2tX5yk.mft (raw, json)
Hash identifier: qGBVUHks9lM2MFIuuLYb0PackgaiNbMPlQsNoARi17A=
Subject key identifier: BE:2B:BC:B3:7E:CC:7E:58:90:4D:E0:A6:82:51:05:BE:40:B0:40:58
Authority key identifier: C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
Certificate issuer: /CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Certificate serial: 01A0E13DA08FDEBF1DC094306EAE44DEECFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
Manifest number: 12DC
Signing time: Sun 27 Sep 2026 05:01:47 +0000
Manifest this update: Sun 27 Sep 2026 05:01:47 +0000
Manifest next update: Mon 28 Sep 2026 05:01:47 +0000
Files and hashes: 1: 6MOGH8oGvh6IYApLtSaZowTuqtk.roa (hash: HJrHUPLTq5etSutfssfFpw4hmCz6YgNXH+NQPFP+7uM=)
2: U2uOljUf-48wSNUQgF-2wsauE-g.roa (hash: 2YVcDn6Ax9cXhQHx8fyaxNd0XJvsq3/OJmSqm70WvIg=)
3: xypST5sbOAHb18iaFgrsB2tX5yk.crl (hash: u56OlN+0lPUPRfAi8FG31jn526Jd6IFso8KbRLof+wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:a0:8f:de:bf:1d:c0:94:30:6e:ae:44:de:ec:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Validity
Not Before: Sep 27 05:01:47 2026 GMT
Not After : Sep 28 05:01:47 2026 GMT
Subject: CN=be2bbcb37ecc7e58904de0a6825105be40b04058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:1b:86:b9:ff:f5:01:a9:c1:b2:1b:80:08:
01:61:ff:dc:2e:a6:10:7a:f6:c2:40:b6:e6:52:67:
4c:19:83:50:a4:98:8e:0b:47:14:a5:f1:40:c4:35:
f9:4e:e6:c9:de:94:c9:cb:2f:95:69:41:29:8f:87:
9f:b5:24:c8:3a:bb:c4:a4:9f:2d:a7:b1:ba:40:73:
dc:7d:c5:92:64:f5:c9:ec:bf:79:fa:44:e5:31:c2:
5c:d5:ec:59:25:e1:54:30:7e:7a:9a:86:14:41:34:
a3:7a:aa:e7:5e:29:04:73:d3:ab:68:a9:40:7b:9d:
8d:80:a0:44:db:9c:d4:67:a8:42:db:4d:6d:77:97:
bb:b9:1d:9b:e5:e6:ce:00:7b:b5:f7:01:ac:06:c2:
de:c3:5e:3f:2f:56:d4:b7:8b:47:3e:e6:60:2e:f0:
a6:74:bf:03:10:10:dd:a3:b4:d6:ae:b1:43:1a:a7:
5c:34:96:81:45:1a:38:63:92:66:8d:37:ea:26:0c:
8c:e9:24:0f:9b:d8:8b:a3:74:fc:a6:24:c5:76:0a:
74:e0:79:fa:54:2a:ff:6a:ec:41:92:99:80:91:27:
60:11:f7:e7:47:d5:9f:d7:8f:19:2b:ad:c1:80:d0:
a5:31:c3:0d:83:38:9d:bc:df:d2:4c:28:33:1d:ea:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2B:BC:B3:7E:CC:7E:58:90:4D:E0:A6:82:51:05:BE:40:B0:40:58
X509v3 Authority Key Identifier:
keyid:C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:47:d6:e8:63:0f:b5:83:07:6a:b4:ff:e6:10:11:68:72:5d:
cc:fc:8e:97:b0:0c:33:ae:b5:ff:3f:fb:8f:e3:f7:d1:e1:c3:
be:a4:b2:19:db:64:19:5f:49:3b:0c:aa:7c:a4:70:e5:99:15:
a5:2e:f9:5a:15:aa:d7:8d:fa:2f:ff:30:28:dc:e2:73:4c:b9:
0b:26:62:88:9a:85:08:6b:00:f2:9f:26:b2:ae:b0:8d:75:89:
82:b1:d6:6c:72:c7:54:96:b5:92:48:09:53:82:03:3e:19:68:
ce:71:6b:16:f4:2c:07:8f:4a:23:52:ba:e2:4f:97:0f:9d:c5:
04:b9:2a:b6:93:91:6c:82:09:bf:df:d9:5c:a4:5a:de:ad:e5:
1d:19:41:f6:af:1e:5c:d6:9d:c2:7d:c4:41:04:ed:68:38:2a:
4e:3b:e5:7f:f1:2e:a5:dc:50:98:33:ee:0c:b8:cc:f5:73:e2:
d0:be:32:70:65:02:03:6a:4f:25:c0:46:5e:dd:11:1b:01:67:
18:0b:55:9a:52:d3:66:ff:d1:95:f5:fc:cd:63:2e:11:47:99:
b9:a5:a2:32:cc:d9:a4:9c:73:32:55:84:32:b4:b7:64:88:37:
00:b2:14:24:59:83:e6:6f:a0:2d:9a:cd:78:43:da:84:bb:d2:
7f:8b:92:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:36:47 2026 by rpki-client