Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier: 2qQtTwDmyaQJWfY5UHkCH/EJaPRhSgNHB4p2H4WH1aw=
Subject key identifier: 19:7C:54:5A:7F:58:B4:3D:1E:51:76:2F:54:6D:E8:F3:A4:24:42:9E
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 01A0E73F1F0422196FEF27CB3BF7712AD381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number: 096D
Signing time: Mon 28 Sep 2026 09:01:08 +0000
Manifest this update: Mon 28 Sep 2026 09:01:08 +0000
Manifest next update: Tue 29 Sep 2026 09:01:08 +0000
Files and hashes: 1: D93aVb7wrIXUaG1-CC-3JUagYOE.roa (hash: /8ReYoccQ/vVAZ/EZIZ9ttYSoWEPANiLCShHLXPhYb0=)
2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: cenAdhdBtxAcn8+qTar4PjsKMvTMd1wEWQ+G677L9pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:1f:04:22:19:6f:ef:27:cb:3b:f7:71:2a:d3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: Sep 28 09:01:08 2026 GMT
Not After : Sep 29 09:01:08 2026 GMT
Subject: CN=197c545a7f58b43d1e51762f546de8f3a424429e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e1:b4:b8:90:20:d2:62:9c:0a:ea:43:9e:aa:
43:e3:54:fd:1c:6a:0b:f7:b3:4a:3e:0f:5d:69:91:
65:f7:df:74:73:02:c0:23:5b:15:64:2d:fc:fd:30:
e9:b7:a0:6c:23:59:5b:ce:56:3a:16:ed:9f:b4:ec:
2a:ff:ff:d0:e3:1a:44:65:da:f5:5b:b3:c7:5e:72:
c7:44:b4:13:56:e8:a5:18:59:6d:1d:ab:cf:2e:37:
77:1c:dc:c5:26:fb:b2:da:94:67:78:6b:1f:d0:2e:
d1:ad:e2:8e:89:6e:87:e7:ec:a3:0b:7e:e8:82:2d:
21:92:38:9f:a8:90:92:61:ad:fd:99:e4:6e:97:de:
20:f4:8a:81:60:62:88:78:12:33:5f:b9:41:a5:d1:
7e:59:42:f6:e2:87:a0:96:e9:b7:c2:5a:fb:02:a3:
a7:24:46:af:b6:90:0e:2b:f0:5b:5b:9f:4a:4e:eb:
72:21:41:2b:18:ff:c3:6c:73:3f:d5:40:36:76:3e:
07:c0:4f:59:89:50:df:bc:dc:27:3d:c5:19:0b:98:
bf:c9:d1:63:66:29:52:3c:ce:51:3f:d6:76:ad:5d:
20:51:78:ed:9a:d3:2d:c4:5b:cf:67:6a:0e:fe:73:
98:3c:35:6e:ef:09:5c:23:f4:4d:64:4f:d4:b2:30:
c7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7C:54:5A:7F:58:B4:3D:1E:51:76:2F:54:6D:E8:F3:A4:24:42:9E
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:84:83:26:bc:75:51:fc:ee:8b:f0:19:b0:b2:bb:d9:3a:2b:
c7:7d:eb:78:9f:26:81:1a:19:92:a0:a2:92:8c:ae:28:c2:f6:
b2:59:4c:05:a0:92:cd:2a:62:04:7e:c4:89:bc:05:b9:cd:7e:
ac:cc:d1:95:7d:30:b0:68:2c:cb:8d:34:5b:02:f8:e9:c1:58:
7a:48:81:13:fb:ac:44:67:4c:44:74:5a:93:da:95:21:c6:48:
99:c5:01:36:41:44:5e:67:2a:e0:3c:7f:e3:72:4c:b4:42:09:
d9:8f:7c:31:b8:96:89:fb:cd:5a:48:d7:0a:06:28:94:29:01:
4c:e9:50:12:3c:53:6d:5e:ba:cf:b4:ea:7c:62:0b:50:3d:e1:
85:16:62:0f:33:91:b2:76:77:68:a7:a0:c2:f6:fe:e7:57:99:
43:2e:ea:ea:f7:2e:eb:49:3d:d7:03:b9:78:b2:7d:72:91:19:
1d:69:a0:bc:ac:66:81:40:a6:7b:21:d5:fa:86:56:47:ef:49:
f9:6c:f9:c2:f2:6d:1d:03:7c:0b:41:6b:0c:86:cd:f6:c7:a9:
a7:a2:d5:c7:20:5c:00:cc:01:b9:c1:3e:92:96:30:50:93:a2:
47:d5:1d:05:61:20:1e:48:6c:02:78:b1:3a:3c:da:72:ba:7d:
cc:28:1c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:10:36 2026 by rpki-client