Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: qLn1bCv+cicOV7SoPPjuOu2i+G76N1k3nqFcFiwy8ms=
Subject key identifier: 0A:4E:BC:E6:86:05:6B:B2:01:BF:7B:54:2C:78:C2:33:F7:6E:4A:16
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 01A0E7E3B62B1F510087342693D82C041B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 1A0C
Signing time: Mon 28 Sep 2026 12:00:55 +0000
Manifest this update: Mon 28 Sep 2026 12:00:55 +0000
Manifest next update: Tue 29 Sep 2026 12:00:55 +0000
Files and hashes: 1: AorOXJjA6o7VIXG2KhmRn45N0UY.roa (hash: opct1yXiFy361tzWw8bb0wIPcRKu5irJGelwFQC/fvQ=)
2: ErvwJYNq58NBwdxg4NllytvGu58.roa (hash: L/oQiFOQUaagNx6+74y64js5tlg2OsPgxLI2bOEuDOs=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: V2JPX1O/DHnM0yoFoKDLGrH9V2ui5Z4bEoR6iy/qICA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e3:b6:2b:1f:51:00:87:34:26:93:d8:2c:04:1b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Sep 28 12:00:55 2026 GMT
Not After : Sep 29 12:00:55 2026 GMT
Subject: CN=0a4ebce686056bb201bf7b542c78c233f76e4a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2b:dc:09:a7:e8:b0:f5:bb:80:92:76:20:07:
be:84:8a:4a:f1:5a:48:a3:86:97:3b:5d:ef:c4:58:
3b:14:24:c1:a4:c7:f4:95:00:6c:43:c9:7a:c1:d3:
91:ee:63:d4:f1:3d:9b:58:b8:4b:e5:a4:a4:9b:d4:
dc:a2:95:40:14:da:44:4b:37:23:25:6f:7d:3f:85:
a2:a6:9f:55:ed:8c:04:21:7f:71:2c:76:0b:37:2b:
6c:3d:e2:0d:ad:5d:7d:ff:08:23:e2:58:64:dc:a0:
fd:8c:64:8f:9c:55:2a:2a:b4:c3:0d:77:30:4e:3d:
ed:3e:a7:bc:42:08:b7:ed:a0:0c:89:19:5c:33:90:
96:d8:53:5f:64:5b:af:ad:61:a7:1a:53:e3:2e:55:
c5:52:6a:7a:96:6a:93:37:b1:a0:fa:bd:6f:bc:52:
e3:70:a2:f8:c1:54:93:06:de:c9:6f:49:5a:81:76:
60:ba:f5:20:a2:0b:88:a4:30:59:ac:6e:ac:e5:9a:
9b:a2:1b:ac:b1:0e:69:ae:49:09:1a:eb:bc:42:65:
fa:76:6b:21:6b:45:78:43:53:d6:d3:fa:0f:82:ed:
13:ac:5e:1a:54:cb:f0:92:0f:f7:23:b6:f7:67:96:
db:c5:bc:d5:27:c1:65:8a:20:78:51:9d:d9:d8:6f:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4E:BC:E6:86:05:6B:B2:01:BF:7B:54:2C:78:C2:33:F7:6E:4A:16
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:11:b3:5c:59:bb:dc:09:07:c6:d0:4d:5b:dd:09:7f:18:8b:
3e:76:77:51:d9:ee:30:f5:59:96:36:f2:76:31:83:d4:40:f0:
cd:40:e4:78:b7:08:69:84:f2:74:0a:f0:08:85:47:2c:08:d2:
4a:c4:09:5f:8f:26:fc:8c:8d:2e:78:b0:ba:31:a5:6e:2f:8e:
78:89:fb:c6:64:1a:62:8f:53:1c:9e:69:6d:a4:06:ee:74:f0:
0e:3f:b7:b2:2c:0a:b1:c1:59:6d:ec:05:54:b3:32:0d:b6:b8:
06:cb:97:78:6e:fb:0c:ac:0e:44:97:fb:36:20:fe:27:58:bc:
e5:7a:03:06:27:7c:b6:3c:57:51:38:98:0e:2f:2d:56:ab:87:
39:0e:ab:10:c7:ac:cc:d1:19:49:bd:34:16:16:1e:9c:89:db:
01:10:b6:85:af:1d:36:89:a2:f4:24:7f:68:38:e8:2c:ba:f5:
df:a2:80:8d:0a:73:f9:f2:b2:9d:09:1d:09:36:ac:1c:33:d0:
c9:34:5b:e3:f6:50:6a:24:3e:0f:c0:81:47:06:f1:4e:4a:ae:
55:11:cc:26:a1:99:d0:68:44:5f:a9:7e:22:ce:a1:13:54:21:
35:e4:5a:4a:2e:73:7a:27:1e:1c:52:85:41:65:d0:d7:6f:a6:
97:fa:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:38:51 2026 by rpki-client