Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
File: xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft (raw, json)
Hash identifier: cOrkeTrF1ushnr3kc2QLolGK8W/cGHeJ1PPdhOSZ6Wg=
Subject key identifier: 62:F8:4D:B9:A7:8B:5E:4D:A0:8D:E0:87:76:96:E5:03:6A:71:49:20
Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Certificate serial: 01A0E2BDBC58B1391C4B76F1624BC52A3BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 12:01:20 +0000
Manifest this update: Sun 27 Sep 2026 12:01:20 +0000
Manifest next update: Mon 28 Sep 2026 12:01:20 +0000
Files and hashes: 1: BQk9R-N3GOOYrja30Pn_XVDUf88.roa (hash: Yweym3mWkXHkGOyAmG6nDG9vHGdFCmlWDKJNXExlolQ=)
2: Z16EOuIvCScFGsV_p1V2RWzx1ZA.roa (hash: rAhtAVQwXrS7vputjJ+v+BvlJ+PvCNgskZKO8Cfnpys=)
3: xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl (hash: RNMjhXAGcflkvbS/bNpeMVm/Ng+RUsOCAFBODQ3svXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:bd:bc:58:b1:39:1c:4b:76:f1:62:4b:c5:2a:3b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Validity
Not Before: Sep 27 12:01:20 2026 GMT
Not After : Sep 28 12:01:20 2026 GMT
Subject: CN=62f84db9a78b5e4da08de0877696e5036a714920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:b4:91:be:ae:20:93:33:aa:94:2a:86:1a:
62:16:9e:5a:74:e9:44:82:46:5c:08:24:4c:15:3f:
b3:e1:9b:2c:29:ee:e6:c5:66:23:50:41:83:a4:a4:
e1:bc:cf:23:78:48:84:96:b9:d1:d3:53:86:45:19:
c8:7d:6b:16:66:30:60:c4:ae:e9:c9:c0:a0:98:de:
80:49:7a:f8:27:9c:c4:87:ff:bd:af:5d:90:38:f5:
e2:4a:58:bd:30:e1:5b:ff:92:72:63:90:09:13:9e:
91:1d:f6:1e:47:09:f7:d2:63:dd:1c:ad:14:26:b8:
96:d3:48:ec:1c:2d:37:56:99:30:16:87:a2:18:d4:
b6:46:b1:3f:cf:a1:c7:dd:83:06:72:c0:6c:99:06:
76:92:4e:75:d9:84:b7:76:04:6d:bf:1f:a3:9b:88:
d7:9e:8a:77:4d:61:01:10:d8:2c:9b:f4:52:57:d0:
75:7f:e2:f9:f6:4f:17:7c:b6:ac:55:f7:04:a4:dd:
38:ee:1e:85:f1:9a:61:57:ca:50:23:17:a8:05:c6:
a8:8c:22:0e:be:a2:da:ad:00:7a:eb:1a:e0:e3:27:
fa:21:5d:73:7e:df:4a:40:41:bd:31:b5:2c:7e:82:
1f:43:14:64:fc:41:ff:58:48:ad:39:3b:9b:43:8c:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F8:4D:B9:A7:8B:5E:4D:A0:8D:E0:87:76:96:E5:03:6A:71:49:20
X509v3 Authority Key Identifier:
keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:64:74:8d:e4:c9:37:35:e2:15:a5:a9:4e:af:f2:25:06:17:
36:6e:a0:ad:22:15:f9:c4:ce:72:45:94:b9:bc:3f:b8:8e:46:
4e:63:48:22:26:d8:36:26:3e:83:2a:6d:19:ba:2a:c4:f2:80:
b3:8d:4b:8b:7c:21:64:12:06:16:26:d5:7d:de:12:2e:9b:6c:
1f:3c:a5:fa:6d:66:84:61:8d:4c:3a:44:a3:e1:40:25:bb:82:
a9:1e:3b:ca:74:8d:0b:4d:9f:a4:1b:ad:03:71:24:d6:59:3e:
99:39:1e:9e:d7:e4:c4:f6:53:ca:2c:1c:7b:db:1e:72:69:0f:
4e:0b:d9:f6:48:d7:3e:96:25:26:a3:d1:bd:ed:66:3b:3e:3d:
d3:22:f1:22:a5:57:b1:f1:02:d4:9d:4c:c7:02:92:e4:83:cd:
62:c6:53:7a:cb:c4:4f:5e:92:47:92:59:85:10:c6:7e:10:62:
be:0c:50:54:51:49:0f:66:b1:8e:d4:46:54:95:36:dc:1d:6d:
a7:f8:d0:6e:9d:f0:19:fa:fc:d8:34:2b:79:84:6b:07:37:f8:
a5:f3:06:1e:2f:2e:4e:79:14:30:e2:6c:d0:ea:e0:28:7c:a5:
5e:b5:01:ab:0f:b2:5f:ca:bb:72:94:e1:66:32:ef:1c:6f:59:
3a:1b:bd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:17:30 2026 by rpki-client