Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
File: xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json)
Hash identifier: JqVdKu9mXXCVCHRUNtWAH39iHZ9Uqzo2i7Myao9OyR8=
Subject key identifier: 90:F3:E4:4F:61:14:78:45:EC:9F:05:1F:CF:6D:B6:82:00:4A:F4:2F
Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147
Certificate serial: 01A1107200EBF592DD3115A727DB8A9FFB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
Manifest number: 12D9
Signing time: Tue 06 Oct 2026 09:01:09 +0000
Manifest this update: Tue 06 Oct 2026 09:01:09 +0000
Manifest next update: Wed 07 Oct 2026 09:01:09 +0000
Files and hashes: 1: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: 9Cm6p4htZJK26tLs36iGvUysy5j+6YEEaYmnesw9ltY=)
2: zWTdP30QPHHdohheUhhfVW3hF4c.roa (hash: /i9LH6nCZuFhrfLjUwLanr2mJf1UJXJyn992vVslFf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:72:00:eb:f5:92:dd:31:15:a7:27:db:8a:9f:fb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147
Validity
Not Before: Oct 6 09:01:09 2026 GMT
Not After : Oct 7 09:01:09 2026 GMT
Subject: CN=90f3e44f61147845ec9f051fcf6db682004af42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ac:3f:3c:f1:e3:02:e7:39:7c:89:7d:53:5b:
40:39:9e:1a:3e:da:7d:fb:e5:99:3e:fc:c4:2f:73:
09:d1:b6:40:74:74:04:b7:ce:0b:36:65:da:90:40:
55:1d:df:01:bb:fe:86:cb:be:e3:0c:dd:b4:55:e8:
37:48:57:e4:eb:4e:1e:da:c3:25:04:17:d3:d0:a6:
14:d2:73:7a:a3:44:6f:d1:c2:3c:40:61:fa:91:f2:
16:62:80:cf:1e:82:c0:5e:3a:ac:57:ea:f2:2f:50:
63:d9:3c:42:4b:b0:67:a4:ff:32:cd:83:6b:58:66:
dd:73:0e:56:82:20:26:76:15:1e:92:e9:29:b3:31:
44:af:22:60:f5:f5:89:6b:61:67:04:9d:7d:36:50:
7f:85:17:bb:7c:18:de:ca:27:c1:c3:a6:76:81:c8:
06:7d:e8:f0:7c:08:84:0c:28:cf:a9:e0:9e:46:82:
ea:93:81:d5:11:49:1e:0f:af:12:e5:8d:7e:87:3e:
ce:f7:11:14:c8:9d:41:90:38:50:1b:33:cc:63:3f:
24:85:1b:53:c9:70:90:eb:83:2b:b7:c1:ea:7f:a9:
06:83:bf:b0:6d:60:1f:22:d8:33:21:c4:b5:97:8b:
45:fe:c2:ea:ef:3b:df:02:8a:c6:4e:1e:44:09:67:
ed:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F3:E4:4F:61:14:78:45:EC:9F:05:1F:CF:6D:B6:82:00:4A:F4:2F
X509v3 Authority Key Identifier:
keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:17:c7:e3:3c:c3:b1:2b:6c:59:10:c2:8a:17:bc:29:fd:95:
af:8c:ec:6d:fd:de:42:16:e0:58:31:7e:bf:ed:36:cc:14:fb:
03:d3:96:59:20:69:d3:d5:7d:94:b8:8a:6b:1c:3f:5d:d6:c5:
9e:35:d4:f1:1a:82:aa:47:25:7f:96:4e:93:22:64:5f:9e:78:
27:ab:47:80:8f:1a:38:93:f5:6b:dc:34:46:dd:95:a5:72:87:
c3:2a:d5:77:37:cc:d8:ce:19:dd:b0:42:9b:22:4e:32:ae:80:
7d:51:fa:09:40:05:65:e7:0f:93:99:9b:b0:41:06:ea:13:7e:
23:89:47:7c:e9:23:23:0f:75:9d:43:dd:5a:89:b0:b2:00:08:
58:0e:71:f5:12:67:4c:ef:7e:00:1b:dc:cd:86:ee:f4:a5:50:
be:e0:5e:20:db:64:4b:dd:27:f1:4f:44:c0:d3:1c:6c:35:c1:
d9:24:33:51:08:a3:6a:76:c6:5d:5a:c7:91:83:9b:7c:90:46:
ae:e8:f5:c0:7a:2e:d4:97:a4:e6:64:2e:75:4e:94:dd:dc:3f:
94:23:4b:0d:28:dc:78:8f:8f:a7:98:2b:32:3e:53:84:f0:c2:
62:61:d0:b8:8f:93:c7:54:b6:6b:80:35:19:71:d3:44:da:eb:
aa:b4:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:22:00 2026 by rpki-client