Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft
File: xTLcpO-wjHGnrwa-wCHIhxMNR48.mft (raw, json)
Hash identifier: P8KRuGoovihQCn2T0wvHOZuIO/jYvf8PJyNtqzwE6ZE=
Subject key identifier: 3E:51:DB:81:B0:A5:CF:D1:38:25:AF:8C:E3:7F:87:1F:21:6B:3F:79
Authority key identifier: C5:32:DC:A4:EF:B0:8C:71:A7:AF:06:BE:C0:21:C8:87:13:0D:47:8F
Certificate issuer: /CN=c532dca4efb08c71a7af06bec021c887130d478f
Certificate serial: 01A0D9838F371C332770454E5C137756EF1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft
Manifest number: 02AC
Signing time: Fri 25 Sep 2026 17:01:12 +0000
Manifest this update: Fri 25 Sep 2026 17:01:12 +0000
Manifest next update: Sat 26 Sep 2026 17:01:12 +0000
Files and hashes: 1: Huo4v4tY2uen4ePCEgqNNKeOpvs.roa (hash: C+3OeFCf2CN5SiRHvpAmYRQyu35YF1gv9VB5KKALnKw=)
2: xTLcpO-wjHGnrwa-wCHIhxMNR48.crl (hash: iXMn0Uy+9x791Aw3K1ezDcJ0ljHCIYvzNoYrCwHG6ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:8f:37:1c:33:27:70:45:4e:5c:13:77:56:ef:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c532dca4efb08c71a7af06bec021c887130d478f
Validity
Not Before: Sep 25 17:01:12 2026 GMT
Not After : Sep 26 17:01:12 2026 GMT
Subject: CN=3e51db81b0a5cfd13825af8ce37f871f216b3f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:bc:50:6b:33:3b:2d:f5:a7:0c:12:f9:ee:
16:45:28:04:f6:3d:8f:08:3b:c8:1a:89:87:1e:5e:
83:88:9b:74:f4:2f:c1:f8:67:50:16:bd:94:53:56:
f7:1c:a6:2f:64:f9:4d:c2:35:75:7b:bd:4a:b6:af:
d9:03:01:2e:46:35:f4:16:23:86:e7:58:73:6c:d5:
cf:e5:ed:ee:68:63:e3:71:cf:29:e9:5e:cf:fb:84:
46:a7:de:8c:a9:ed:22:eb:33:6e:14:7d:77:9d:06:
03:e7:f4:6b:f2:b6:8e:3f:89:41:e9:f6:1a:d7:b1:
26:1b:d0:64:52:eb:62:2e:56:7e:4e:16:5e:38:67:
7d:e4:de:1a:96:6f:ae:50:4c:5f:21:68:3d:6d:a2:
df:0c:71:83:c9:6e:45:4f:68:a5:a0:c1:f4:d8:28:
27:3b:48:07:00:82:ea:f2:f0:27:f9:81:3e:8d:0a:
2b:e8:75:bb:82:9c:80:18:66:31:ef:ad:47:e4:c4:
f4:b2:66:30:46:b8:3e:48:8f:2d:c5:16:13:50:5f:
00:55:22:0e:2d:e0:ac:09:38:95:08:4b:6a:11:05:
31:54:6d:27:dc:21:e7:65:9a:5e:36:b4:e8:4b:c0:
2d:68:de:40:5b:c8:8d:f7:73:29:0d:66:c3:ed:83:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:51:DB:81:B0:A5:CF:D1:38:25:AF:8C:E3:7F:87:1F:21:6B:3F:79
X509v3 Authority Key Identifier:
keyid:C5:32:DC:A4:EF:B0:8C:71:A7:AF:06:BE:C0:21:C8:87:13:0D:47:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTLcpO-wjHGnrwa-wCHIhxMNR48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/577b22-a81f-4bcf-bc75-c92a90c121e8/1/xTLcpO-wjHGnrwa-wCHIhxMNR48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:aa:8a:cf:64:ef:4d:f9:7b:1d:34:5f:5b:87:d5:06:90:3e:
c4:51:b1:c0:a1:88:8c:26:ac:0b:d6:59:dd:98:60:b4:02:a9:
ae:59:ac:5d:29:09:c8:3a:c3:39:a7:31:f0:f5:23:f4:e6:83:
ee:76:5d:ac:a7:c9:be:41:1e:9d:8a:dc:02:ed:0b:45:36:01:
d4:f5:f0:46:d5:5c:e2:3d:0e:fa:32:15:b3:52:66:ae:42:df:
65:a3:8b:54:16:b9:d7:e8:c3:44:17:fd:ba:6f:af:5e:b4:95:
9d:49:bb:e8:47:c8:9c:a6:8a:47:ac:62:96:31:81:4b:58:93:
71:2f:d6:37:48:ad:55:33:c3:80:27:f6:77:f2:4a:f3:6b:36:
58:22:f4:6c:8a:10:02:0e:cb:fb:f4:14:6a:f5:a6:3f:de:e7:
6b:04:62:57:9f:5e:be:b4:ce:b2:f6:fb:fa:ce:74:c0:46:c7:
22:10:48:dc:df:cb:2c:2c:e4:f3:41:e4:61:4e:a7:ba:38:c2:
e4:21:fe:d6:88:47:18:b6:27:08:91:2f:dd:4d:44:41:10:02:
5f:1a:ac:ef:dc:4a:ac:7d:9a:62:ca:21:3e:41:57:bb:73:aa:
fe:6d:de:6a:3c:0c:1a:6d:7d:af:e9:6b:ef:c2:d3:39:dd:b9:
bc:fd:63:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:26:53 2026 by rpki-client