Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: eLnAUXF1BQZdqVBGhhTQtt94LFli8aqQp/PYo1kHvps=
Subject key identifier: 09:BD:D7:23:BC:36:A7:D1:8B:CA:B6:4D:1C:5B:4A:F4:4F:80:CD:B9
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 01A126F9BABFA6D0A1EAD55EF6FA4D96ED64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 1A9A
Signing time: Sat 10 Oct 2026 18:01:02 +0000
Manifest this update: Sat 10 Oct 2026 18:01:02 +0000
Manifest next update: Sun 11 Oct 2026 18:01:02 +0000
Files and hashes: 1: pl4G0drpVsiUnTNv0aNJRxAq40Y.roa (hash: TIrmY5F1mz/rcq5o0AaF7KuNyHFmI5rxVVBApqp6+Ig=)
2: uCT5qS0TatwLKR2syBgBgC34NYE.roa (hash: 6Pav0LB8Y/JGRbLI7vMShFMSStiFyP+H+ECIrWK519s=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: 58FNaZ/aLamM6w29QH99UB/+Ch8wjf3gEN8SMxGJc6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:f9:ba:bf:a6:d0:a1:ea:d5:5e:f6:fa:4d:96:ed:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Oct 10 18:01:02 2026 GMT
Not After : Oct 11 18:01:02 2026 GMT
Subject: CN=09bdd723bc36a7d18bcab64d1c5b4af44f80cdb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:44:8f:59:12:66:ac:fa:d6:99:7a:e6:74:
0b:b1:22:ed:aa:28:e5:3a:76:b6:b5:88:41:d4:d9:
a7:82:07:2a:f2:2b:20:7e:a2:3d:43:fb:bd:63:10:
bb:cd:8f:42:4e:fd:6c:e5:04:eb:8a:1d:00:4b:1e:
83:d3:81:82:c0:ee:8c:cf:1b:e1:03:bc:bc:d0:bf:
bd:9d:96:da:e8:2e:c1:3d:51:9d:62:c0:37:48:ef:
14:23:d4:fb:b9:67:c7:32:14:28:03:73:3e:c7:65:
80:a2:b7:54:22:d4:84:2e:53:57:1b:9f:0f:4f:42:
b7:dd:25:7c:d3:a3:e0:42:1a:1d:a9:59:30:8c:ea:
3c:ef:e8:61:9c:a3:d8:e5:b1:78:d7:09:c5:9b:5d:
5e:1d:a8:d9:f9:e5:13:1e:a9:e6:cd:54:cc:8e:0f:
1b:2b:30:07:00:59:d3:e0:af:9c:d2:3f:f1:68:b6:
0c:37:ea:86:a6:e8:62:64:9a:fe:89:2b:15:8e:c2:
32:a2:2c:1a:12:dc:5f:18:19:df:7e:97:a7:8e:0f:
dd:0a:30:ce:00:2f:50:75:33:06:70:0e:57:bb:d1:
7c:e6:2e:5d:00:11:bb:27:34:63:d6:d7:9e:52:7c:
f8:e7:72:55:af:37:49:f2:f6:5f:0a:57:5f:d6:c3:
56:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BD:D7:23:BC:36:A7:D1:8B:CA:B6:4D:1C:5B:4A:F4:4F:80:CD:B9
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d6:1a:e2:8e:42:72:fd:72:13:f9:4d:82:98:a7:e6:bb:c7:
fa:5d:d0:d4:a4:d7:32:3d:f4:ce:df:f2:2f:64:03:72:9d:37:
7c:96:e6:c3:11:6a:62:b5:ed:82:34:87:35:e9:07:a4:62:9f:
cc:10:4a:ca:e0:70:77:b7:c8:20:ee:1e:cc:ce:1c:31:cb:b2:
1f:80:e5:da:a4:1d:9a:ba:61:dd:45:ee:6e:38:d3:18:74:74:
4a:56:21:2e:df:88:71:85:d6:b1:ee:58:05:47:15:34:e3:d8:
c0:71:70:81:9d:6e:bb:a7:19:ae:b1:4f:33:98:0a:da:1a:4d:
7e:a8:88:2a:ba:0a:4c:a2:f9:e9:4d:50:22:a0:8c:14:f3:c5:
a3:24:97:3b:08:c8:82:15:6f:44:5b:5b:01:06:c0:e0:ae:37:
5c:02:a2:e3:96:2b:3f:a7:b3:4f:a3:47:d3:ed:c3:0b:7d:35:
69:bb:77:42:09:b7:4a:3c:fb:7f:5f:a9:67:e1:e7:50:c0:9d:
f3:de:32:da:09:d1:ec:6c:00:21:eb:34:c6:1c:b5:13:03:be:
25:5d:6d:9d:bf:8e:d0:f7:f3:19:4e:e3:bd:2e:d5:aa:6a:3f:
34:f3:4d:b7:7d:30:43:08:6c:f1:20:54:a3:fb:94:76:f8:7d:
b9:2d:9c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:05:28 2026 by rpki-client