Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
File: xhMz0OgQeIbQMFx72BvdNUiVJ64.mft (raw, json)
Hash identifier: ntVL4Du6MgYEJQKT14XFYXGhzNRyniquo3ghAZSjo4I=
Subject key identifier: E1:F0:A7:23:30:42:8F:48:A3:02:3C:85:52:D0:9E:09:BC:A1:D9:90
Authority key identifier: C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
Certificate issuer: /CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Certificate serial: 01A0D4CAF316A45A47C814CF8F5245461125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 19:01:05 +0000
Manifest this update: Thu 24 Sep 2026 19:01:05 +0000
Manifest next update: Fri 25 Sep 2026 19:01:05 +0000
Files and hashes: 1: 5ie9J9ix6eo_LjO_d-h0wTlK5sY.roa (hash: hY4eQy4LzjSe1EFCcdEhDwEocsy77V2cxczGFy9ZGiM=)
2: D0Omi7eTzuK_0HEfZBlA62fHv-s.roa (hash: 0MjChUFTQrOrybRBrDN8jiZf3suuubHFJss7LSX+W2A=)
3: xhMz0OgQeIbQMFx72BvdNUiVJ64.crl (hash: YQTGNdSTPlOhx/lCeSdaWX4/gXRJAyslOwf/w+oWIyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:ca:f3:16:a4:5a:47:c8:14:cf:8f:52:45:46:11:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Validity
Not Before: Sep 24 19:01:05 2026 GMT
Not After : Sep 25 19:01:05 2026 GMT
Subject: CN=e1f0a72330428f48a3023c8552d09e09bca1d990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d0:06:c0:e4:c7:1a:de:74:3b:5e:51:4b:74:
b9:27:0b:9a:30:d6:79:dc:3e:6d:63:1c:82:2f:7b:
56:55:ea:1e:54:0d:7f:6a:ab:1c:1f:86:85:bd:ac:
99:bc:5b:ae:78:de:7d:c5:65:16:2b:6b:5d:6b:e3:
90:11:ac:cb:1f:54:d1:9c:6a:de:dd:81:05:c0:31:
26:06:52:af:bf:1f:b9:a7:1d:6f:29:ba:3b:82:d8:
dc:32:f4:3a:42:ba:b5:17:2a:f6:4a:a9:66:41:02:
1c:6e:a3:04:74:8b:2d:92:ee:f3:6f:d6:53:b4:c7:
59:7c:99:cb:45:d6:e7:48:6e:c2:cc:45:59:67:d0:
50:4a:84:94:30:ef:bb:dd:3c:09:5b:cb:5d:16:32:
fd:9d:c1:22:16:62:84:29:b7:f5:69:b5:bd:19:d7:
37:89:06:86:ab:33:33:ec:73:d4:76:63:a7:95:14:
54:56:a6:4b:0a:ac:f3:47:2c:e7:6f:80:84:cf:cf:
bd:ad:9a:27:c4:b4:c4:16:5d:87:42:00:8e:80:fb:
f8:2e:21:18:6b:ae:fd:f3:37:b2:f2:d8:e1:47:ca:
12:b5:08:db:fb:21:5f:47:ec:ab:15:ec:e3:71:b1:
c9:b3:de:08:80:fd:3f:fa:ae:21:a5:4f:cf:fa:b0:
ba:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F0:A7:23:30:42:8F:48:A3:02:3C:85:52:D0:9E:09:BC:A1:D9:90
X509v3 Authority Key Identifier:
keyid:C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:86:78:3a:5c:c5:bd:ab:77:69:e0:9d:61:0c:3b:aa:1e:e3:
41:95:a0:1e:18:90:82:b0:53:11:6d:7b:d1:0b:72:c3:f0:09:
2e:5e:c0:de:63:32:20:80:39:de:3d:ff:bb:78:ea:46:ce:32:
24:ff:b1:62:a7:46:0d:c7:dd:57:01:cc:0d:e1:2b:72:89:27:
a3:ae:04:3a:af:0c:bc:f0:c1:a8:7f:eb:5e:3a:4a:96:fb:ea:
af:bb:64:fb:39:17:e3:1f:ff:d5:9c:c6:1f:a1:b1:d8:53:c3:
e0:ca:78:2d:17:38:41:63:54:5e:68:a3:a8:5e:8e:6f:cd:28:
70:2a:c1:cd:3c:e5:86:a4:f0:40:09:fc:ad:5f:36:41:60:7e:
25:58:f7:7c:17:e7:ee:48:34:62:d3:46:11:66:8b:b3:96:da:
60:f0:25:45:91:17:f8:40:d6:0b:53:9d:a6:82:ae:79:6d:91:
79:86:9e:40:47:18:87:ed:72:fa:90:e7:73:a9:87:a8:5b:d1:
1d:61:4a:b7:12:be:63:39:8f:36:fa:6f:62:cd:e9:41:57:92:
f6:2e:4b:3b:d6:e9:0d:92:a3:19:63:b8:d7:e3:7c:3b:df:12:
3b:5c:2b:7d:c2:9a:c4:ab:32:d4:4e:c6:a9:27:9d:28:00:8f:
4f:14:ff:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:37:29 2026 by rpki-client