Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: tNeM05J9sC7nHdm0HwzyVR/FeAVNg9eyb8JEqvTGvgc=
Subject key identifier: AF:FA:F1:49:EA:50:8D:49:4F:96:5F:99:6F:9D:B6:BF:B3:F7:55:17
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 01A0D91777F21AE84C14E371DAD8A425C3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 1A6F
Signing time: Fri 25 Sep 2026 15:03:08 +0000
Manifest this update: Fri 25 Sep 2026 15:03:08 +0000
Manifest next update: Sat 26 Sep 2026 15:03:08 +0000
Files and hashes: 1: Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa (hash: rjml5J5gqgFMe9KzjlWTkxUk0orx3tU+r2zl+R9xROo=)
2: wcLWWQG314JWSm8pfpN9yL_5EII.roa (hash: D4VS38hxLq9k1urmiJ5Azd8OYDvuYJ5hUnqD5WiA9F0=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: T1hswnJpO69KRLBk/ARIeonEEVOkbPWPZ2DwkwC0GUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:77:f2:1a:e8:4c:14:e3:71:da:d8:a4:25:c3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Sep 25 15:03:08 2026 GMT
Not After : Sep 26 15:03:08 2026 GMT
Subject: CN=affaf149ea508d494f965f996f9db6bfb3f75517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8f:86:9d:bc:5f:e2:3c:fb:95:84:da:63:23:
d9:57:53:88:e5:95:a0:66:18:ba:6f:4b:7f:4a:ca:
64:f2:97:16:0c:2f:8d:e1:83:ac:be:6a:f9:a5:0c:
f8:ed:b8:8c:c8:f2:93:f1:87:74:17:d4:2c:10:41:
2f:fa:86:dc:5f:68:06:2c:93:30:76:a7:1d:b0:6f:
84:77:c0:9b:52:c2:85:61:d0:c1:54:a5:e3:57:95:
45:d0:c7:8d:31:90:42:49:b4:96:46:97:53:4d:a8:
ac:13:c0:83:49:6b:8a:e7:e5:6f:2d:c2:4a:01:08:
cb:08:80:b2:6f:77:4b:38:8c:a6:e5:bb:c3:bb:2f:
b5:b0:0a:31:e5:ee:03:6d:db:a9:72:fc:65:c5:97:
95:c3:14:e4:44:90:66:07:b1:ba:a4:70:2f:79:fa:
27:41:22:f3:6f:5d:38:60:ba:c5:8f:c9:21:57:aa:
bc:33:3f:d5:ec:ff:a5:23:2e:f3:ff:e5:33:c3:e3:
47:ab:6a:6e:8b:37:6a:a7:1f:ab:83:d5:9b:de:05:
28:f8:22:fb:7b:a2:f7:dd:96:3c:50:af:9b:1c:8b:
55:be:1a:95:8a:e0:5b:e0:c9:7a:61:bb:91:40:63:
ec:e6:7d:91:2a:0d:bb:9a:95:14:33:9b:0c:8a:80:
8a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FA:F1:49:EA:50:8D:49:4F:96:5F:99:6F:9D:B6:BF:B3:F7:55:17
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7b:b5:da:c9:18:82:b9:71:1e:24:be:9b:c5:d0:d5:1b:cc:
25:31:27:4d:04:ca:85:87:60:9d:ec:d6:e5:a9:38:0d:8c:72:
2a:01:3f:71:53:c7:f1:8f:c1:2c:15:36:ac:f3:19:f4:b0:c3:
cb:2c:c3:0c:3f:14:15:72:41:08:99:66:fd:ce:c1:9a:cf:ef:
82:4a:ed:81:da:ec:42:69:28:be:9d:cd:19:58:e2:3e:4f:01:
58:7c:df:f0:a1:c8:56:8f:57:1b:74:ab:83:a5:a6:aa:54:0f:
09:25:4d:05:ff:ab:8f:37:f6:94:9b:37:8a:b9:9c:f1:bf:81:
93:5f:8b:4b:88:76:81:36:7c:50:69:34:4c:b3:c7:9f:e9:cc:
f3:35:e8:0c:a9:ac:7f:bb:2b:e2:91:92:eb:62:ef:10:e3:42:
44:ac:d9:f6:f8:89:e1:44:5a:6b:83:2c:20:10:bb:1a:d9:b5:
e9:cc:7c:e4:54:e9:28:41:fc:bd:09:93:3f:52:5a:be:16:e0:
ce:f9:7f:ec:82:ef:f0:0a:7d:a0:f5:78:9b:fd:2b:71:36:f7:
07:16:e5:23:69:ee:35:09:a6:5d:d2:aa:48:1d:92:21:27:42:
e9:61:76:fd:ba:70:cd:52:9b:3a:5c:b1:da:5c:f0:53:35:30:
a2:62:3d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:34:52 2026 by rpki-client