Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: 9N4iHk8bvWfxwLIUv6v4AoLQMp6Q+s++sq/25daMmBg=
Subject key identifier: 9B:DE:A7:01:C3:36:FD:BC:34:94:E4:0B:F7:C9:30:13:D5:B8:E7:54
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 01A0D5A6FC000929BF7EA671CCDC9CCD16A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 1A81
Signing time: Thu 24 Sep 2026 23:01:25 +0000
Manifest this update: Thu 24 Sep 2026 23:01:25 +0000
Manifest next update: Fri 25 Sep 2026 23:01:25 +0000
Files and hashes: 1: 5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa (hash: qdwMngtFVt4ZyT/UodrlBdn1CZ1QUvtY6m9NXbdSStU=)
2: DYkV04gki79D3asculnZRcHU37Q.roa (hash: qlIkHsV6HBqGkc4tTxIBB1jTZcTStbiHUpGcVOphuGk=)
3: X-ehgfatBtOAnRXcz6-5Jx0F8B4.asa (hash: /YVTHqMQAjpDaMD8b9BYDBTtlnwA4KQTEd5uL4RrvtQ=)
4: wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa (hash: xzHJiZgBxtEtCYr9MbTY6G8tT0OCniElkcH6xF7+Cv8=)
5: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: dbQ35I7o3jJ7B4cYzPMokQgO0AP4bGNjn/Eqj4hTSdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:fc:00:09:29:bf:7e:a6:71:cc:dc:9c:cd:16:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Sep 24 23:01:25 2026 GMT
Not After : Sep 25 23:01:25 2026 GMT
Subject: CN=9bdea701c336fdbc3494e40bf7c93013d5b8e754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a5:c7:1c:cb:eb:22:9e:be:b6:5b:52:8c:10:
f4:53:cc:47:99:8f:eb:e7:0d:03:4d:80:60:2f:70:
0a:9b:7d:53:75:89:13:d0:fb:f1:90:48:a1:27:18:
ac:b2:73:4a:9c:44:a6:de:35:c8:f5:ec:f3:66:5d:
af:45:de:ab:a4:23:6a:17:8d:ae:81:03:fd:2a:05:
11:30:00:78:c8:2f:49:d8:2d:d5:22:67:d9:8f:63:
82:6a:ed:67:db:fa:7a:b7:2c:86:61:49:c9:59:9a:
e1:fe:5f:c3:ac:bb:42:0c:fc:a2:60:4f:4a:a7:15:
3a:69:14:ff:24:15:c8:95:a4:7a:7a:53:32:41:cb:
a1:48:f4:d1:69:a4:fd:5a:9c:9b:ab:8b:f2:80:33:
fa:0f:bf:4d:25:43:79:94:20:0a:e0:6f:cf:1b:c2:
c7:78:68:6a:36:ec:e7:3d:9c:13:b0:47:70:ce:63:
fb:29:e1:87:79:73:95:50:59:22:b6:10:aa:24:79:
aa:80:7b:51:13:c5:91:5e:ae:20:be:86:c2:b5:ff:
a3:08:28:6d:0f:73:08:27:70:ae:12:a2:4a:e6:f3:
67:6f:21:92:6f:2a:72:ed:0c:da:5f:af:e2:fb:bf:
f1:41:76:d6:12:d7:fe:a8:e6:40:9f:1f:2e:22:f3:
6f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DE:A7:01:C3:36:FD:BC:34:94:E4:0B:F7:C9:30:13:D5:B8:E7:54
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fe:89:eb:27:d8:32:f7:fe:12:ae:38:f4:9c:06:c6:1f:39:
6c:59:cd:a5:cc:45:3c:1c:f2:35:63:7a:4a:6f:b8:bd:9e:e9:
f2:19:24:a5:b6:f0:5a:e1:5d:38:59:af:5c:e1:46:9e:1d:ad:
cd:89:fe:a8:c6:2c:f0:84:70:2f:05:aa:58:8e:3d:3a:44:9d:
d2:10:1b:fd:68:d2:50:57:f2:6f:fc:06:03:4d:5c:fd:6f:1d:
7d:27:e1:a2:4c:2b:d2:c4:d6:31:80:23:cd:e0:01:b9:44:f6:
98:d6:55:28:42:a8:ce:cc:a2:f9:c6:fe:33:17:a4:79:2c:dc:
d8:49:77:01:36:42:ef:35:38:53:5f:05:62:63:6a:14:ab:9b:
e7:47:3e:a0:8b:f8:33:c6:30:07:02:d9:1f:4e:6f:bd:e2:e6:
b9:5e:7a:ca:6b:70:e7:9c:0d:3b:46:48:5a:db:4c:41:7d:67:
9f:f3:19:06:58:36:b5:3e:83:5c:bc:f7:b4:2f:9b:57:64:b4:
25:43:7e:2a:58:5a:47:28:02:ee:f7:8d:9f:03:2a:3b:a9:12:
c8:4a:9d:21:9e:8e:53:8e:8c:81:50:3e:83:f1:9f:c7:2f:f2:
84:53:2f:66:d4:f7:49:e4:53:3b:57:8e:65:29:2d:17:9e:a5:
c3:3d:99:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:35:30 2026 by rpki-client