Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
File: xM-i_E8u6evIO-eTZrCulNHyv8c.mft (raw, json)
Hash identifier: T/wbd5569Qv9x1fFVvxAlUX9N7o53bWC4XSQLOjJUXY=
Subject key identifier: AA:BA:61:1D:DB:83:56:77:EB:76:C0:FD:C4:54:61:DE:89:03:D0:AF
Authority key identifier: C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
Certificate issuer: /CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Certificate serial: 01A0DD29672205663561CC8CF13F4CD1DA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
Manifest number: 0AD1
Signing time: Sat 26 Sep 2026 10:01:13 +0000
Manifest this update: Sat 26 Sep 2026 10:01:13 +0000
Manifest next update: Sun 27 Sep 2026 10:01:13 +0000
Files and hashes: 1: F30FN8U3Xj87k2Z9DAG1GB_A31Q.roa (hash: pnPZQBEXHi+ImRZ6WCYxFeNcDY9y0/l3lR4zkQuuaVQ=)
2: xM-i_E8u6evIO-eTZrCulNHyv8c.crl (hash: qToFy1l6jeTBIlbo4bM49M6qrv8BjW8dWeSYcwOnFy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:67:22:05:66:35:61:cc:8c:f1:3f:4c:d1:da:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Validity
Not Before: Sep 26 10:01:13 2026 GMT
Not After : Sep 27 10:01:13 2026 GMT
Subject: CN=aaba611ddb835677eb76c0fdc45461de8903d0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:ff:b4:74:00:53:86:7a:a6:d1:05:09:e1:
c3:f3:76:fd:7c:c1:2e:af:30:34:b4:06:10:dc:33:
7d:28:d7:51:1d:8a:ec:1f:8c:b8:b1:cb:dd:0a:44:
39:ab:47:d5:7a:7b:28:84:28:51:7c:91:7c:18:1c:
74:b7:32:89:21:36:75:1e:d6:05:e2:a7:d1:2a:7c:
62:da:b7:35:1b:6d:47:4d:f7:04:53:b9:b9:34:79:
e3:0d:f6:58:68:87:4c:ea:a5:92:a8:83:d8:ae:e6:
38:6f:a1:f5:89:b4:6f:4c:2f:ce:87:83:1c:30:e4:
b6:76:b8:88:e8:3b:55:12:c5:65:69:88:70:5f:e4:
98:04:06:c8:b6:57:23:8f:d1:4b:e9:42:6b:ab:17:
0d:a0:58:9f:92:88:f5:ca:74:26:db:95:e9:85:29:
89:cc:fc:3b:de:f4:19:da:8c:6f:09:ad:d8:23:53:
ba:4d:2c:9e:53:5e:36:a8:6e:26:e2:4c:95:80:03:
e8:15:2e:48:6e:34:94:b3:db:94:55:15:05:14:61:
b1:7f:f7:13:3c:23:39:e6:86:18:bb:5c:4d:5d:5b:
c9:77:78:18:5b:bc:01:36:3e:6c:51:c0:b4:92:be:
a3:e0:84:1e:2b:9a:44:14:92:fa:2a:15:df:15:05:
f7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BA:61:1D:DB:83:56:77:EB:76:C0:FD:C4:54:61:DE:89:03:D0:AF
X509v3 Authority Key Identifier:
keyid:C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c2:dd:f4:5b:2b:40:d4:8d:6c:d3:f6:81:21:d6:8e:38:43:
a5:38:f6:c1:12:49:39:98:04:fe:a2:8d:2a:e3:55:9e:cd:56:
b2:9e:ea:59:58:00:7f:a2:2a:87:ec:0c:a0:2b:c4:95:a1:e1:
7b:b9:03:2f:55:59:db:b8:3f:8e:18:fc:70:70:48:a0:6f:5b:
ba:4b:0a:88:65:b2:af:f0:ee:5f:13:e5:c1:84:7a:68:14:06:
26:e1:0c:d3:0e:8b:b0:a4:d5:cb:3a:6f:21:0d:72:bc:82:e8:
39:e2:9e:d9:23:b2:b0:44:4d:50:d4:cf:87:f7:96:4d:04:d0:
59:90:43:ff:41:0d:c1:8a:fc:62:d4:3a:27:5f:28:d0:d0:f7:
7b:77:37:d5:61:b4:c6:59:f2:7a:cd:d7:ca:e8:fa:73:8f:aa:
cb:3a:45:ab:34:9b:79:89:fa:f5:d4:08:eb:48:f2:2c:5b:50:
2e:2c:38:08:bd:99:0d:27:e7:c0:b5:8f:4e:69:0d:d9:00:6a:
89:64:22:71:92:f7:9f:f1:4f:e0:2c:4a:5e:1c:8f:f2:32:b4:
cd:36:60:d4:ed:a7:00:19:5b:f1:32:b1:e8:50:dc:47:39:a7:
8d:39:5f:0f:c9:87:8a:5d:fe:02:07:62:a4:7b:34:8d:c6:d1:
5e:bd:16:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:46:15 2026 by rpki-client