Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: bCbOEMyPIssZ+D3drImfM/+jGByePvBes+pTNPDSDZM=
Subject key identifier: DD:76:E2:60:66:BA:57:92:31:6F:38:9D:0D:20:F7:50:AF:30:D4:5A
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 01A0D796D99BDF439D4246946F66C2F3D117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 1A82
Signing time: Fri 25 Sep 2026 08:03:02 +0000
Manifest this update: Fri 25 Sep 2026 08:03:02 +0000
Manifest next update: Sat 26 Sep 2026 08:03:02 +0000
Files and hashes: 1: 5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa (hash: qdwMngtFVt4ZyT/UodrlBdn1CZ1QUvtY6m9NXbdSStU=)
2: DYkV04gki79D3asculnZRcHU37Q.roa (hash: qlIkHsV6HBqGkc4tTxIBB1jTZcTStbiHUpGcVOphuGk=)
3: X-ehgfatBtOAnRXcz6-5Jx0F8B4.asa (hash: /YVTHqMQAjpDaMD8b9BYDBTtlnwA4KQTEd5uL4RrvtQ=)
4: wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa (hash: xzHJiZgBxtEtCYr9MbTY6G8tT0OCniElkcH6xF7+Cv8=)
5: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: f7JQyXsacEgksZgMgCk3VFhRW85RbG08R8vlNgsyRZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:d9:9b:df:43:9d:42:46:94:6f:66:c2:f3:d1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Sep 25 08:03:02 2026 GMT
Not After : Sep 26 08:03:02 2026 GMT
Subject: CN=dd76e26066ba5792316f389d0d20f750af30d45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:80:66:ac:54:0c:cb:fc:67:80:39:bc:b7:
bf:65:51:12:62:dd:49:89:7d:3c:47:ef:c3:12:9c:
7a:26:fc:13:f1:c5:c5:31:c9:c1:54:37:94:9c:c4:
36:bd:17:1f:91:7f:e9:65:e0:f4:2b:da:37:71:17:
fd:2a:29:47:c2:db:b6:c6:08:ff:14:d8:b5:52:29:
09:e8:8a:a2:d8:8e:03:e7:33:b9:66:72:a1:23:2f:
72:1f:19:03:ee:1d:2f:76:8b:62:ca:d7:ed:aa:e3:
e6:2c:90:0f:e2:c8:20:50:4d:52:0b:ad:f3:66:f0:
a3:42:98:ca:5e:15:a6:4c:fb:4d:f1:b7:60:af:31:
00:2e:c1:55:a6:7f:ff:45:4c:5f:06:30:60:33:ab:
45:f6:bc:d4:4c:70:ee:d4:7d:04:54:a6:87:42:97:
77:b7:ac:c4:6a:dd:10:35:1f:61:d0:3a:92:5c:02:
c6:a6:fd:1f:cb:d5:19:9b:20:6a:28:ec:5b:63:cf:
98:ba:68:d5:f9:9e:eb:19:6d:7c:c0:0e:5a:9e:f1:
47:13:3c:69:d3:cf:ca:a0:90:40:c6:bd:2d:4b:83:
d6:3e:55:39:3d:2f:a5:d2:64:0e:d4:0a:b3:42:70:
41:be:f0:a0:f4:be:c2:cd:81:f7:ad:48:19:80:dc:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:76:E2:60:66:BA:57:92:31:6F:38:9D:0D:20:F7:50:AF:30:D4:5A
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7e:3c:28:84:c3:70:24:72:32:11:ea:b2:53:48:15:d4:06:
cb:66:b3:a8:78:82:f2:83:29:4c:7c:41:98:b9:f0:25:4c:ef:
cb:94:1f:43:56:21:f3:9c:74:e6:4f:45:77:5c:9f:d9:b8:f1:
7a:f3:ec:54:e9:aa:a3:17:06:a2:6c:51:4c:5a:64:a9:34:9c:
a6:77:15:62:25:d2:7d:3d:16:86:3c:0d:fa:59:a6:6f:96:82:
18:e5:50:bc:4c:ad:67:3f:99:8b:71:fb:ee:95:8e:03:01:93:
6f:58:2b:53:8c:a4:25:9c:8b:b8:7f:2b:f4:e2:68:25:9d:d9:
9f:31:8e:47:79:aa:49:52:ba:c6:20:a9:ac:0d:b6:eb:ed:df:
3a:25:89:14:cc:b8:07:60:f6:0d:58:c4:0b:ba:c3:d9:ee:74:
b0:15:1e:3f:7c:ff:39:ae:d4:01:81:4f:92:e0:21:6f:4c:6f:
b9:e9:bb:62:d9:9b:3a:a1:79:2a:c9:15:82:2b:f8:29:71:c7:
59:f4:22:5a:17:c2:28:6f:2f:72:5b:20:38:13:b3:59:e6:cf:
28:16:20:d3:90:8e:a4:ab:5d:67:6a:cd:8e:e5:ba:70:14:2c:
f1:28:b7:e6:dc:45:37:d8:e6:15:19:1c:a8:3a:cc:91:11:d9:
9a:df:17:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:29:11 2026 by rpki-client