Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: EPhbbF6lCkjTOOG0Md+x5dqt0yps4SXWoOYmz5J1WnE=
Subject key identifier: 19:67:3B:C4:66:D9:46:48:BD:D8:9D:24:AB:3D:EF:0A:2D:E5:80:AE
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 01A0E2F56D48672B6E74545971EA0C650A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 17E3
Signing time: Sun 27 Sep 2026 13:02:10 +0000
Manifest this update: Sun 27 Sep 2026 13:02:10 +0000
Manifest next update: Mon 28 Sep 2026 13:02:10 +0000
Files and hashes: 1: UTl2oEnM6aCF2kpB7Ff9DjUy06E.roa (hash: 0Pi09oTT2Bs/Jp2BUgsBTNW54DORQjFSQtJ6rpxdYR0=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: 39ebGEvoF2wl9Grwl8SAgX8aLSZjRV7cLSlGiMx7eHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 13:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f5:6d:48:67:2b:6e:74:54:59:71:ea:0c:65:0a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Sep 27 13:02:10 2026 GMT
Not After : Sep 28 13:02:10 2026 GMT
Subject: CN=19673bc466d94648bdd89d24ab3def0a2de580ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:51:42:ba:bb:0a:97:09:15:d7:89:d4:50:
b8:28:fa:cd:d7:e8:b9:df:56:01:26:ef:e0:cb:a8:
a4:d0:ff:3e:51:a7:4d:99:1f:77:9b:61:fd:65:2c:
f6:45:7e:dd:d7:06:69:aa:be:76:56:ef:9f:2b:24:
08:8c:da:3d:ad:a1:85:c0:09:f6:f8:6d:2b:0a:ce:
85:d2:d7:f3:9f:8e:18:7a:d7:e6:fe:5e:49:75:9c:
00:70:c5:26:1c:f5:34:71:82:02:34:f6:29:53:fb:
29:32:7a:ec:67:1d:2d:84:f1:da:72:57:31:cd:1a:
8a:bf:ac:fc:7e:27:39:c7:06:a4:fb:64:86:fe:97:
87:53:14:f8:4f:cf:3f:6b:1b:08:9c:db:a1:30:30:
41:7b:6e:cf:95:fa:75:2f:0c:fe:9d:f6:ee:62:bd:
cd:e8:93:60:be:aa:15:9b:92:89:43:dc:3a:63:37:
a0:a9:ef:95:77:53:1a:0b:41:e3:30:92:ab:7c:16:
7c:88:7c:b9:ef:d9:99:c3:4b:62:10:48:d8:0a:98:
2c:2f:9b:4b:fe:49:20:b3:78:86:da:9e:0f:5a:b4:
af:f7:54:e7:e7:49:4a:2e:71:fc:e2:7d:f5:1f:df:
1b:6a:af:96:63:ed:17:1e:58:f7:92:f8:c7:b7:8c:
ab:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:67:3B:C4:66:D9:46:48:BD:D8:9D:24:AB:3D:EF:0A:2D:E5:80:AE
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2e:b1:af:d2:be:0a:58:9d:8a:40:7d:6f:54:54:2d:ee:02:
b9:a2:23:31:59:a2:8b:5d:f7:70:33:8c:76:cd:dc:ce:d3:ee:
f8:c1:d5:3c:fc:82:57:7b:36:91:7d:89:f3:4b:b4:91:9e:2c:
27:43:d7:23:28:4c:01:6e:3c:92:53:57:89:6e:6a:25:ca:8c:
2e:bd:b3:a3:79:ff:15:34:2b:32:d2:d4:d5:fc:f2:e7:7b:ca:
20:0b:36:14:ed:a9:b2:b7:c5:68:40:1e:13:ea:05:e6:f7:34:
51:5e:62:da:74:02:32:11:a5:a1:e3:61:ae:35:7e:51:23:ea:
5a:21:83:cc:1c:62:0a:5e:e7:49:3b:d5:a1:6d:73:09:84:32:
82:ee:4d:34:8e:3b:44:ca:7a:de:47:bb:ae:28:0b:79:59:a4:
5d:3f:0d:fa:87:06:06:74:05:3d:56:60:ab:44:e7:e6:eb:b1:
65:a2:23:eb:be:47:59:a6:f9:09:b9:1c:f0:82:99:c3:06:4c:
ae:b2:31:3d:42:df:48:23:be:96:62:b3:92:d2:0f:a4:e2:54:
fc:e1:32:e8:b0:f1:34:5c:f2:9a:eb:f9:db:ae:b0:52:76:d3:
b3:fd:a0:22:00:9f:2d:c0:f1:cf:6a:44:78:9c:ec:27:2a:d3:
95:43:af:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:21:53 2026 by rpki-client