Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
File: xvw4sqEAOV-puZGa15LnrLLbLgc.mft (raw, json)
Hash identifier: farM1prXgcjiykws3HDIiKT3jnEt1UMDHMuWObdTr1U=
Subject key identifier: CA:6B:EE:C5:AC:BF:3E:A4:DF:F7:32:3A:32:60:C3:00:10:D0:85:0B
Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
Certificate issuer: /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Certificate serial: 01A0D237865C0AD3C747A949032B6B77FBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
Manifest number: 0A3A
Signing time: Thu 24 Sep 2026 07:00:49 +0000
Manifest this update: Thu 24 Sep 2026 07:00:49 +0000
Manifest next update: Fri 25 Sep 2026 07:00:49 +0000
Files and hashes: 1: 4kLVVeCRQJrEoKU2Z3FAZr5ZTZg.roa (hash: N+n4RQm/UCrzmjM9BuILs0DGf1giItqSLrBBjPu0qrU=)
2: MAAniPDXI9HsVNZwiBPzQo7C0FE.asa (hash: +t1AssvVOScBcP/9D61rppScOKqy8/J9uspPTrgro+o=)
3: xvw4sqEAOV-puZGa15LnrLLbLgc.crl (hash: 3zSV3GOWfcbH3XvdAK/nQb712TuyrwyGviFCxSijtbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:86:5c:0a:d3:c7:47:a9:49:03:2b:6b:77:fb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Validity
Not Before: Sep 24 07:00:49 2026 GMT
Not After : Sep 25 07:00:49 2026 GMT
Subject: CN=ca6beec5acbf3ea4dff7323a3260c30010d0850b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d1:16:9d:43:96:8a:ce:98:eb:0f:4c:ff:32:
e5:a6:c2:7e:56:4e:9d:c2:7a:f0:04:53:10:9c:f5:
1e:cf:86:0c:1c:80:2e:18:fd:f5:4f:07:0b:12:f2:
37:5a:66:80:c3:84:19:be:33:64:a5:14:12:49:0f:
b1:6a:75:a9:b6:b0:42:6b:7f:9a:9a:0e:73:a3:b6:
a2:0d:7c:a1:79:4c:66:ec:7a:67:4a:35:16:52:e3:
75:88:df:4a:de:15:da:58:47:40:30:5e:c5:5a:55:
1f:b4:60:fd:ea:40:a9:7d:bf:a9:4c:3b:4a:fc:4e:
f6:88:bc:0d:1e:e2:ad:aa:06:0a:3e:35:17:99:9b:
4c:b2:17:be:89:50:2c:27:a4:c6:8a:b4:91:a5:73:
d5:a6:ff:36:53:60:fa:98:d7:3b:dd:41:55:e4:6d:
bc:42:11:4f:53:e4:8c:08:fd:5c:f8:40:99:c1:1f:
c2:41:fd:8e:05:eb:eb:2c:b6:1b:73:14:15:84:f8:
8c:64:bd:8a:c7:35:b1:41:b8:07:c5:17:08:5d:eb:
47:d1:06:47:32:57:3b:a9:97:c4:be:0c:36:ec:ae:
fa:dc:a7:15:4e:e1:12:1d:9b:f2:da:b3:7f:dd:5b:
65:e8:c5:d7:eb:11:36:56:c3:24:df:2c:f4:5e:b2:
0a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6B:EE:C5:AC:BF:3E:A4:DF:F7:32:3A:32:60:C3:00:10:D0:85:0B
X509v3 Authority Key Identifier:
keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e4:35:0b:e1:c2:6c:47:a5:e0:fe:78:a4:9e:55:8b:17:be:
9a:cf:d5:02:f2:48:95:f5:12:ee:e1:e3:0b:bc:81:3b:8e:c2:
cd:af:55:52:dc:dd:cf:37:df:3c:a2:7e:2b:2b:da:6c:fe:c4:
e9:36:cd:6e:8d:cd:df:7c:fb:60:c2:ba:66:d4:00:bf:4c:c4:
8c:bd:b8:6b:c5:9f:60:31:39:3f:d8:94:70:2d:c4:bf:99:e9:
a3:77:1e:4e:db:29:f0:e4:63:bf:b7:ba:4b:d8:bb:1b:61:8f:
8d:88:7b:6c:66:4c:e2:e5:6f:f2:05:93:47:b2:ae:66:3f:ff:
82:e2:7c:a3:0b:2f:02:6c:9a:5e:e2:c9:c4:54:cb:ac:b4:ad:
2e:d6:57:2b:ad:5f:17:09:45:39:b7:c8:eb:e1:49:f6:c9:11:
2d:42:c4:86:2a:8c:32:d6:cc:ae:9e:5f:17:b4:44:4e:9e:6b:
ea:cf:f4:f5:fd:6d:4e:1a:3b:0a:4e:d9:c8:5f:61:90:d1:24:
6d:65:8c:5b:82:79:51:68:48:b9:1e:12:3b:0b:04:88:18:77:
f8:bc:40:4d:08:e7:da:6e:e0:33:ed:44:7e:74:22:72:6e:e6:
ed:8b:b4:75:61:2c:5d:ff:4e:b5:fc:64:42:fc:94:e3:6c:8c:
6c:17:8b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:02:46 2026 by rpki-client