Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier: YZRIGZNJMbtbEhgeltNwGTVg2IWCSwc0520+HSLQ55k=
Subject key identifier: 08:16:15:E1:47:35:89:77:F4:21:98:E6:0F:30:E3:90:AD:BC:74:A6
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial: 01A0D15C01358299E5693A13F53A82BAEF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number: 1235
Signing time: Thu 24 Sep 2026 03:01:02 +0000
Manifest this update: Thu 24 Sep 2026 03:01:02 +0000
Manifest next update: Fri 25 Sep 2026 03:01:02 +0000
Files and hashes: 1: XfPxNqw04f4ysUNycil0EQofl1M.roa (hash: JClRzQorRQbXDP0L/PC7A7JxisEaLLPV1aRUiLTnBv8=)
2: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: WXVMO9JrRBFBbyT8g2FWQR2tjryVsBwXUVm7wAbV2dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5c:01:35:82:99:e5:69:3a:13:f5:3a:82:ba:ef:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Validity
Not Before: Sep 24 03:01:02 2026 GMT
Not After : Sep 25 03:01:02 2026 GMT
Subject: CN=081615e147358977f42198e60f30e390adbc74a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f9:23:b7:60:9c:87:c8:4a:98:65:09:ad:35:
9d:af:86:f6:1b:5e:c4:1e:3c:18:06:c6:7e:ed:7d:
a4:fb:c6:15:c4:54:2e:8f:22:fd:5c:22:c1:68:f4:
a4:bb:83:ce:31:72:fb:59:32:9a:fe:3a:fd:9f:96:
ae:05:f9:7c:6a:c9:e9:2f:87:a7:8b:08:f2:d1:24:
b4:d3:99:a6:83:30:ba:4c:93:07:a2:8b:ad:48:1f:
38:c3:6d:80:9d:ef:a8:5c:50:f6:29:dc:ba:20:3a:
be:e1:02:68:66:4a:f1:54:dd:4d:8a:63:fd:48:9c:
21:89:f4:93:f0:66:45:a1:0c:2c:ea:26:40:82:49:
6b:29:62:73:85:d3:7b:9f:f9:a2:87:64:32:fc:ca:
43:fc:62:ab:5b:30:6e:6c:f8:3b:19:e0:d4:88:4a:
f8:8e:21:a2:c5:dd:40:be:8b:ad:47:2e:7d:95:ed:
6e:39:8e:ef:f7:64:11:2e:00:5d:dc:df:63:a8:e1:
89:fc:10:26:b0:f4:ef:e6:1c:1d:65:09:d2:aa:24:
7b:a8:44:9b:95:93:37:23:29:68:2d:95:9e:52:a4:
ab:72:15:39:6f:4d:f6:60:55:09:da:7b:95:e0:95:
ed:06:8d:fd:be:e9:d4:65:b8:1f:6c:de:e0:e9:d6:
f6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:16:15:E1:47:35:89:77:F4:21:98:E6:0F:30:E3:90:AD:BC:74:A6
X509v3 Authority Key Identifier:
keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:71:9c:08:46:be:89:c8:e7:eb:c2:dd:a9:73:11:2b:5d:c7:
37:fe:73:54:71:5b:78:4e:7b:28:70:df:65:d3:99:08:e6:aa:
fa:5f:20:07:09:7f:91:29:fc:1f:77:cd:71:59:d6:2b:4d:8f:
6b:57:ef:d6:09:f6:60:bd:e5:88:b2:97:45:8f:37:8c:e9:31:
78:b2:9b:c3:79:1e:10:9a:9b:fa:63:62:f1:9c:89:0a:a2:56:
9d:ad:39:8d:26:ad:22:21:98:04:6c:2c:b4:f2:c9:04:e0:87:
52:c2:25:eb:60:fb:58:59:d6:90:3a:8a:0e:fb:f4:a7:bd:02:
c3:36:7f:9a:a4:67:6e:a5:87:40:13:56:4c:51:5f:1c:a8:6e:
af:6e:00:81:c3:05:21:e1:c3:65:42:87:f9:a1:ab:2b:3a:aa:
87:a0:2e:98:90:46:61:21:2d:ee:8d:4b:ad:60:00:2a:cf:8f:
f7:66:a8:d0:16:92:5d:60:b9:80:a6:4c:e8:6a:3f:5e:6e:73:
d5:3e:9d:2b:6b:77:b7:9e:e8:0e:ba:51:ab:90:ee:da:64:97:
ff:89:6b:c0:be:3b:f5:6c:7f:1b:92:2f:87:7e:60:fc:12:63:
78:54:4e:2d:47:70:3c:a2:72:9d:19:43:d1:41:f4:13:e8:ac:
be:6f:a6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:06:08 2026 by rpki-client