Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier: uCTJ9wpKcGRg91Lj9LNvm1KU3oNRzaLQ4+a8FHpLBl0=
Subject key identifier: 8C:8B:91:24:06:81:C0:FC:57:CB:B7:DE:FC:E0:59:C5:33:3E:B2:FC
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial: 01A0DA28C4791479B2A865099FB1141018AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number: 18C6
Signing time: Fri 25 Sep 2026 20:01:39 +0000
Manifest this update: Fri 25 Sep 2026 20:01:39 +0000
Manifest next update: Sat 26 Sep 2026 20:01:39 +0000
Files and hashes: 1: RA_P8M2CbE3vpnTaUf4TR1pQq4c.roa (hash: sqZi/SBA/dg8k8Qf9vK6EYY7YFO+mp6oMfC87nRDLEY=)
2: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: wB4y8HZiVv2PxY3W+rDwlZVarzBUULyKwzY1SzYB56c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:c4:79:14:79:b2:a8:65:09:9f:b1:14:10:18:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Validity
Not Before: Sep 25 20:01:39 2026 GMT
Not After : Sep 26 20:01:39 2026 GMT
Subject: CN=8c8b91240681c0fc57cbb7defce059c5333eb2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:a8:8a:cb:96:f4:1b:d7:d6:98:0f:9b:4c:
ed:49:4f:37:5e:3a:db:86:4c:d9:0f:6f:a4:07:fe:
eb:0b:ba:31:94:67:c3:01:bd:0a:5d:02:43:84:a3:
04:bd:26:b2:4d:e3:6c:cd:52:97:04:d8:26:f3:74:
b7:ce:e2:d4:dc:36:7c:4a:10:d0:10:82:da:75:d8:
8d:dc:f0:f3:a3:f5:5f:d5:5e:a3:5f:f5:e7:7c:16:
91:77:5b:3b:30:4b:16:25:1c:e9:7c:fb:fd:40:82:
76:12:5a:60:99:7e:bb:37:0f:c6:26:0b:57:be:9d:
95:bd:48:65:fe:c0:2e:c7:b9:b1:32:9c:02:ea:41:
45:bf:e4:c4:89:19:d8:5e:60:bd:38:4f:8d:4d:9c:
53:9d:50:50:a0:67:55:be:27:50:23:c8:bf:78:b2:
d4:aa:93:01:42:b1:88:b5:b1:15:1e:c0:2f:3d:7c:
a0:ed:5d:d2:b0:4d:94:79:85:7b:f1:84:ee:4d:df:
61:76:b3:8c:51:c2:e0:e1:7b:59:73:f2:5e:a3:0b:
9d:3a:4a:84:96:c3:e9:21:4f:4d:49:31:fd:d0:21:
65:49:ca:fd:b2:7d:f9:6a:32:74:01:94:99:62:a9:
50:17:d6:bc:fd:0e:bc:14:08:35:e7:22:57:d6:24:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8B:91:24:06:81:C0:FC:57:CB:B7:DE:FC:E0:59:C5:33:3E:B2:FC
X509v3 Authority Key Identifier:
keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5b:c8:6a:cd:91:1c:40:75:1a:30:16:21:5c:7d:6b:34:c7:
ee:d5:e4:0e:35:e8:9b:bc:e5:df:de:6a:7a:49:04:5e:34:8b:
2e:c0:c5:63:17:b3:ec:e0:26:6d:db:f0:8d:5a:50:7b:b8:20:
88:ee:98:46:db:6d:70:33:11:32:3f:e4:c5:e7:c1:8d:70:c3:
88:3e:9b:82:72:a5:3f:88:b1:ae:fa:ed:e9:3c:52:13:84:7c:
c0:ba:f4:a4:78:64:0b:89:e5:00:df:8b:53:b9:2d:90:31:34:
2b:89:5a:e7:27:6a:a8:fc:91:24:0b:18:ff:25:e3:72:31:24:
af:ac:6c:b4:39:11:c5:8a:0e:c9:2b:97:6d:ec:3a:74:dd:0a:
97:40:ba:50:78:e9:17:59:3c:4d:54:ae:7b:57:4b:fe:10:65:
28:da:4b:f2:87:82:ae:e4:c1:89:64:96:a5:ed:fe:6d:b2:03:
20:40:6d:11:fc:54:08:71:97:89:74:7b:aa:07:9a:5c:49:14:
97:43:cb:8f:f7:05:1e:4a:20:93:07:69:f7:68:2d:dd:b9:a5:
39:18:73:c3:af:7a:aa:d2:43:b2:99:65:0e:67:ae:bd:a9:a9:
7a:ee:7a:f1:d5:d4:0b:dd:67:74:71:d0:12:0c:d8:a8:74:56:
d6:64:6c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:02:59 2026 by rpki-client