Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
File: xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft (raw, json)
Hash identifier: R/H0VSu8RDYl4pi5qmWxTZ76/OhviOWbBkHHimh5LI8=
Subject key identifier: C3:8F:70:F9:7A:0D:C3:A4:35:BD:B0:8B:7F:FD:54:58:26:44:49:43
Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Certificate serial: 01A0D9F2029ADAADBE9AF5CDDE464A53FDF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
Manifest number: 19C8
Signing time: Fri 25 Sep 2026 19:01:51 +0000
Manifest this update: Fri 25 Sep 2026 19:01:51 +0000
Manifest next update: Sat 26 Sep 2026 19:01:51 +0000
Files and hashes: 1: amTwSoJu04--PPMgX7cWGoLl7yI.roa (hash: LHgYpMKmWJ/zte9nRlTYZiOamXW79eIiHdCMO+n1Kpc=)
2: xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl (hash: qbYDyvbcnezIQTH0/JKjeNskIKV+gAlo0S50S0MpQkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f2:02:9a:da:ad:be:9a:f5:cd:de:46:4a:53:fd:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Validity
Not Before: Sep 25 19:01:51 2026 GMT
Not After : Sep 26 19:01:51 2026 GMT
Subject: CN=c38f70f97a0dc3a435bdb08b7ffd545826444943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3a:8e:b2:27:7e:29:bb:3a:2a:2d:5b:73:b8:
5f:55:5a:3a:bd:33:e5:82:a4:1b:c1:14:74:41:49:
47:e6:27:d3:5e:f0:05:cf:09:dc:ca:50:d7:a3:1f:
f4:71:dc:aa:99:47:30:60:d1:ec:ce:73:22:ae:87:
a2:10:fd:66:4d:e2:06:6c:ba:dc:3a:36:89:6b:eb:
de:37:6b:59:53:6e:91:f8:e6:a7:d7:d8:00:c1:15:
42:12:b0:94:13:e0:94:62:79:d5:a0:ce:d3:12:d3:
86:4c:fc:de:ee:99:87:9a:73:e2:bb:54:a3:2f:d9:
4e:ce:d1:b5:3e:6a:d9:0b:59:df:53:ea:df:b4:62:
78:7d:2d:2e:0b:68:e2:46:ff:a7:53:33:fb:07:2c:
cc:9a:57:9b:c9:b8:d9:61:ef:d2:85:9d:e3:f8:21:
6f:28:c9:6c:17:81:1e:62:56:2b:7a:f5:af:4b:ce:
3e:d3:da:b1:0c:7f:4a:10:91:64:93:ae:1c:a9:21:
f0:bd:d6:15:24:d8:38:96:69:f8:7b:53:41:fb:6a:
88:93:02:91:34:e4:9b:88:50:ac:d7:48:4a:f6:0f:
8b:76:78:22:db:7a:19:74:85:e1:7b:8d:d7:33:ff:
a5:fc:b5:ab:f9:b7:d6:fe:95:aa:b6:89:42:ac:87:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8F:70:F9:7A:0D:C3:A4:35:BD:B0:8B:7F:FD:54:58:26:44:49:43
X509v3 Authority Key Identifier:
keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6c:e0:63:cf:a6:e0:5a:38:85:5b:a6:81:48:b9:a5:a8:64:
98:f9:46:75:8c:39:9b:71:3d:bb:fb:65:21:84:82:24:69:d6:
64:93:c1:68:61:89:86:30:8e:f1:9b:2e:59:59:e2:5c:d2:44:
31:e3:47:c9:22:7d:3f:2e:03:ab:77:2d:42:72:1c:e1:bf:36:
bd:a1:44:44:86:d5:f8:14:de:b1:8d:ed:2c:28:a3:c8:c3:e3:
bb:fe:91:47:ef:86:bb:1a:41:ef:89:dc:6c:ee:7b:7d:47:b5:
2b:2a:52:57:10:c8:20:5f:a7:ff:da:04:a1:92:69:ac:c6:44:
c1:3a:bb:4f:c4:ae:27:4b:93:08:96:cb:ff:76:f7:2a:c8:42:
99:27:a9:26:d7:21:db:fa:14:f1:e3:4c:81:31:e3:5c:6a:bd:
4d:e1:e4:41:31:a1:d8:a2:99:12:e0:a7:48:2e:f7:38:31:38:
f9:d4:de:95:26:c3:3b:f8:31:79:f6:aa:58:00:88:bc:65:46:
02:09:a0:5d:3b:1d:6b:62:2e:52:de:4e:ad:86:3d:8f:c8:e4:
89:96:60:be:f7:70:b6:23:b3:5f:5c:20:58:24:aa:4a:7a:ba:
eb:b6:28:8f:0c:fd:4d:ce:46:a5:0a:c4:42:80:2d:51:e2:b5:
8e:00:05:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:41:30 2026 by rpki-client