Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
File: C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft (raw, json)
Hash identifier: XHX/N4b2AcsgHRy7zAA+EbENDk1gvCP+ZwK9i4/FiFY=
Subject key identifier: B2:10:53:EC:C0:2B:C5:D8:5C:47:8A:B2:D9:57:B6:5A:CC:3E:C5:C3
Authority key identifier: 0B:C5:EE:45:73:7B:2D:94:9A:E6:DF:25:90:6A:31:F9:59:03:F8:59
Certificate issuer: /CN=0bc5ee45737b2d949ae6df25906a31f95903f859
Certificate serial: 01A0E0981FE140E6C6A17BD369945097D795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8XuRXN7LZSa5t8lkGox-VkD-Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
Manifest number: 0206
Signing time: Sun 27 Sep 2026 02:01:00 +0000
Manifest this update: Sun 27 Sep 2026 02:01:00 +0000
Manifest next update: Mon 28 Sep 2026 02:01:00 +0000
Files and hashes: 1: 2ki4F5C_f4OJd8bWDxEOfjMY2BA.roa (hash: SNZLfY0Dnu+nD0hrhPKZ/k/SnrH65xlGDQNmAoLOL0k=)
2: C8XuRXN7LZSa5t8lkGox-VkD-Fk.crl (hash: DCoPM7hOmgamU3vZfc2ive8dWV+J7f2mh5tgYAssEHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8XuRXN7LZSa5t8lkGox-VkD-Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:1f:e1:40:e6:c6:a1:7b:d3:69:94:50:97:d7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc5ee45737b2d949ae6df25906a31f95903f859
Validity
Not Before: Sep 27 02:01:00 2026 GMT
Not After : Sep 28 02:01:00 2026 GMT
Subject: CN=b21053ecc02bc5d85c478ab2d957b65acc3ec5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:29:e0:64:82:8d:6a:50:39:cc:92:e9:75:
3e:1b:4b:00:77:87:25:38:73:09:89:e3:30:90:53:
be:b7:6c:31:af:61:d7:b2:5a:1c:b9:69:0f:56:e1:
15:74:2d:5a:20:dc:6a:7e:b7:17:e0:9b:f3:6d:98:
09:d9:4f:6d:0e:1e:32:da:f1:87:99:a8:f9:18:c2:
80:11:8a:d7:14:15:ff:47:21:5f:cd:f4:26:0c:f2:
1b:6a:64:c6:7f:7a:87:2e:df:85:61:d7:8e:90:1b:
08:4c:ef:92:24:c6:02:68:2f:84:ca:d0:6f:82:74:
c9:ec:4c:6d:93:37:a2:35:1c:ac:04:c8:8d:fb:b9:
db:93:ab:fb:d5:19:49:78:cc:8a:41:2a:67:8f:dc:
94:d0:b8:ed:90:c4:5d:12:04:ce:65:f2:c0:3e:c3:
f3:e0:55:11:e5:f8:dc:8e:09:29:86:04:89:f0:80:
05:79:43:69:bf:bb:45:be:0b:20:da:fd:ba:0b:b2:
d7:0b:c1:ad:fa:aa:ba:cf:d3:fc:5d:a1:9a:d1:e6:
ea:46:14:15:19:bb:d8:c1:0d:92:cd:21:7a:66:95:
37:70:56:bf:6d:ed:fc:a6:38:dd:89:eb:cc:be:66:
de:0e:85:65:6a:b1:67:05:81:ae:18:89:fb:f0:60:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:10:53:EC:C0:2B:C5:D8:5C:47:8A:B2:D9:57:B6:5A:CC:3E:C5:C3
X509v3 Authority Key Identifier:
keyid:0B:C5:EE:45:73:7B:2D:94:9A:E6:DF:25:90:6A:31:F9:59:03:F8:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8XuRXN7LZSa5t8lkGox-VkD-Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3d:68:87:95:cf:d7:ad:b3:fd:40:b5:61:16:d6:41:d3:59:
09:da:1f:09:5f:b5:25:b1:cf:e6:fb:e8:ed:78:1a:41:21:20:
52:6e:19:57:57:b7:52:fd:e1:83:5d:be:06:a3:0c:ae:d1:93:
6e:b0:17:ce:fa:1e:86:e4:f0:6f:cf:28:00:c8:0e:ff:20:e6:
97:ff:e6:f5:83:6a:d2:48:5d:52:f8:8c:a4:f1:35:d5:32:4c:
89:cd:3b:86:d0:59:85:cc:03:3f:a3:b4:e7:be:b2:7c:d1:f8:
84:3b:83:97:8a:97:d1:ab:a9:5c:6d:4f:2d:4d:28:04:3c:42:
5e:7b:d6:24:2a:dc:40:c7:73:36:3c:7a:14:84:2a:42:99:66:
1f:58:2e:c9:82:b9:8a:8c:99:5c:1a:24:dd:c3:20:b9:7d:be:
89:a4:23:35:93:6f:bb:8b:1c:7d:48:f3:be:50:f5:73:72:74:
ac:ec:00:09:33:df:e2:99:34:de:7f:4a:55:3c:e6:70:b8:7f:
02:80:a3:f5:02:c5:bd:18:fe:60:c4:a2:63:8d:53:b0:b2:54:
6d:8c:c7:a6:4c:84:e9:32:55:21:cd:4f:fc:ba:08:54:04:2c:
3e:8a:8e:03:05:91:dc:28:99:bf:5e:40:66:50:d5:a2:c2:b7:
1a:aa:fe:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:33:08 2026 by rpki-client