Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
File: xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft (raw, json)
Hash identifier: Dt04+SeRuZy3pCB0xHXINKSWU1T4MDWibSqJ1SMUl9I=
Subject key identifier: 95:3E:16:1D:BD:25:B0:2B:CB:90:8F:A2:F5:A2:E6:E2:C9:7A:0C:6C
Authority key identifier: C4:3F:C6:B1:40:77:53:93:FC:33:69:AF:3D:0B:CE:20:C4:3E:5D:5B
Certificate issuer: /CN=c43fc6b140775393fc3369af3d0bce20c43e5d5b
Certificate serial: 01A0DB3AE126C89CAF056B8BF0080CF456F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
Manifest number: A3
Signing time: Sat 26 Sep 2026 01:01:03 +0000
Manifest this update: Sat 26 Sep 2026 01:01:03 +0000
Manifest next update: Sun 27 Sep 2026 01:01:03 +0000
Files and hashes: 1: Wc_H_BQm_T1przFaClfQ_aiSbiQ.roa (hash: MkPhhtBoGp/lssKXEDwA7t5KV65sjPCdBtv5VeMIgt0=)
2: X1apZ7-7CuoQuH1lprwDvLaAj_o.roa (hash: bKHCrK9Bl7HPkt4FDfJna4GmZEpO2EsOS5LM/0L3EJs=)
3: xD_GsUB3U5P8M2mvPQvOIMQ-XVs.crl (hash: 8XRGJ9FDp6thuwi0cylDhBNK2wQl0LgxwDpqRQRl0tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3a:e1:26:c8:9c:af:05:6b:8b:f0:08:0c:f4:56:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43fc6b140775393fc3369af3d0bce20c43e5d5b
Validity
Not Before: Sep 26 01:01:03 2026 GMT
Not After : Sep 27 01:01:03 2026 GMT
Subject: CN=953e161dbd25b02bcb908fa2f5a2e6e2c97a0c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:a2:a7:42:ce:0f:1d:d7:63:aa:be:66:f0:
16:4e:6c:2f:b9:c6:18:37:95:86:15:96:33:d7:b1:
89:2b:35:15:ec:8b:17:9f:c2:70:47:3e:54:71:db:
47:73:25:4e:0f:9a:2f:60:bb:18:8c:90:12:0c:c2:
18:69:30:8f:8b:f3:9e:8f:0b:d7:99:e9:c7:7c:24:
67:ba:71:15:8a:a6:9f:d0:be:2f:5b:db:62:24:7d:
b7:2f:ab:9f:79:ab:35:05:15:31:e6:2f:a5:c6:be:
92:94:ed:a8:f0:dc:61:b9:a0:04:88:f6:c3:6d:b5:
eb:93:fa:88:a7:f4:a9:8c:7c:21:81:17:b2:b1:12:
58:bb:c5:80:96:c7:e6:51:98:08:4c:ca:b2:03:37:
d8:76:db:04:3e:37:88:7e:ad:e4:ff:e9:b9:d8:93:
b6:7f:f3:35:e4:a0:d9:67:0f:94:f9:66:d2:f8:8d:
df:29:f2:e5:d5:a0:1c:fd:7c:db:63:e7:4e:bf:66:
91:1b:e3:e0:ae:2c:76:2e:04:30:e1:64:7f:69:0e:
26:b6:21:83:5e:1e:31:a0:40:44:bb:2b:ae:90:77:
8a:90:27:5f:04:76:3c:72:20:ed:1b:35:30:63:b1:
e6:60:c0:0e:f8:ab:fa:f4:d1:0d:e6:d1:36:6c:40:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3E:16:1D:BD:25:B0:2B:CB:90:8F:A2:F5:A2:E6:E2:C9:7A:0C:6C
X509v3 Authority Key Identifier:
keyid:C4:3F:C6:B1:40:77:53:93:FC:33:69:AF:3D:0B:CE:20:C4:3E:5D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:aa:15:f8:47:d0:40:f6:4d:e3:07:a1:0d:ed:6b:9d:d8:55:
98:88:66:48:88:3b:2c:0c:6b:65:56:dd:2b:cc:2a:33:20:75:
79:7b:75:d2:9e:ff:85:78:65:51:8a:49:d1:bf:8c:bf:a7:94:
18:fc:e2:2e:a7:ff:48:71:f5:0b:7c:35:59:a8:0e:01:d6:f7:
a4:1e:5c:86:05:78:db:dd:a8:82:dd:b7:a8:d7:04:a9:7a:d1:
5e:03:52:07:98:08:52:ab:99:e5:25:82:7c:7b:47:4d:e9:9f:
08:6e:e5:c5:49:14:33:48:82:99:b6:a7:c4:25:10:15:96:3b:
11:81:a2:dd:a9:bf:f1:a7:3b:f5:9e:73:46:ea:04:13:65:5d:
bc:8d:0a:9b:38:59:84:61:32:09:6f:db:f0:cf:bc:67:4f:06:
f3:f4:4b:26:d3:6b:66:3b:27:ec:2f:35:91:f1:0e:5d:85:bc:
a7:00:a4:92:9f:77:55:fc:d7:b6:df:74:7f:50:f5:56:21:60:
e8:e4:e9:7a:a3:49:41:0e:b1:19:d5:eb:60:34:cb:e7:b6:36:
20:cc:1a:b3:b4:8a:ec:9a:bd:81:9b:57:2c:44:24:b2:6b:36:
fa:9e:96:66:17:28:d9:2f:be:1c:16:c7:10:b7:9e:37:22:a9:
95:f8:a8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:47:57 2026 by rpki-client