Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
File: xnQBIsYDCziYVCPXx8Zo7y266Rw.mft (raw, json)
Hash identifier: hoaPheb0fecUEfNEVTx/LZxwD/u7hS2/q5opBP/Ex4I=
Subject key identifier: 1F:A1:75:F4:0F:CB:94:A0:6B:8B:7B:BD:07:41:FA:22:29:53:51:C1
Authority key identifier: C6:74:01:22:C6:03:0B:38:98:54:23:D7:C7:C6:68:EF:2D:BA:E9:1C
Certificate issuer: /CN=c6740122c6030b38985423d7c7c668ef2dbae91c
Certificate serial: 01A0D9BA9D609A80C3DF93ED02EEF54C6B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:01:20 +0000
Manifest this update: Fri 25 Sep 2026 18:01:20 +0000
Manifest next update: Sat 26 Sep 2026 18:01:20 +0000
Files and hashes: 1: 60TOPVfsN5pgJZGd8in-8hmiCDQ.roa (hash: wz0fI5J0oyRKc9opLJ8t6/QjHmyjX9i2OHs+2QaT2hE=)
2: BGqJYKbvXZQ9-EfJqdZJcmAAnEg.roa (hash: qwCTOzoAcAD8dBvfuZm2kT8FIK+IVROmdCz+Tdiv4eY=)
3: IjL5CW9zeWcOtWHWu3HJVWlDRuQ.roa (hash: HqeQTODPPkmuOhSBibsyQNBnS1QebGdzSoSsvCtv9f0=)
4: IjYD_4iJnSpw60hSl6hLQ78-_Ak.roa (hash: I2O8TskpKH95NKy5gMH0QHO0yhDdq5oUwAlZ1jCSCf8=)
5: Mer11hQ15D-jrLouYRlyFBNsr9k.roa (hash: pFGvLBy0OAKz3OIzWOuN1/pjfeO7iP38PaUND1hqokk=)
6: ebSyejuxZjmc3dCqgBY87Hl9RjU.roa (hash: pq+UZYWSdr5GA1Ri1WMIM+xPCym7E3lqGvtGITBuoD0=)
7: xnQBIsYDCziYVCPXx8Zo7y266Rw.crl (hash: u3HWvvqUS7IqyHbg2Qf7fJtqjP/ifcgwY2rWM2U4tCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:9d:60:9a:80:c3:df:93:ed:02:ee:f5:4c:6b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6740122c6030b38985423d7c7c668ef2dbae91c
Validity
Not Before: Sep 25 18:01:20 2026 GMT
Not After : Sep 26 18:01:20 2026 GMT
Subject: CN=1fa175f40fcb94a06b8b7bbd0741fa22295351c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:3e:03:35:16:19:6c:bb:09:32:c5:9d:cc:
02:64:f9:9f:3b:9f:b1:9d:01:a8:95:7d:6a:9b:13:
be:5f:49:9e:28:24:88:af:ec:e4:e1:c8:c8:5b:ac:
03:b6:a7:4f:55:fe:5a:5d:53:b1:ab:e6:10:1e:f4:
d8:91:92:97:95:0b:c5:32:c1:20:8c:a3:0f:9d:f4:
7d:c9:d9:00:fc:5f:7a:81:3e:1f:3e:12:ee:11:55:
0c:0a:78:de:9f:76:e9:7f:f6:cc:86:4a:69:8c:09:
3e:82:d4:f2:8f:0b:26:cd:ff:03:16:af:1c:48:3e:
91:0c:64:e4:8d:70:e1:b9:04:91:4a:5e:b2:64:bd:
9d:c2:0d:f7:55:9e:c8:5f:71:41:c1:c2:3d:54:e5:
24:6e:b5:b1:8f:bb:7d:b0:e1:23:0b:04:6d:4a:3a:
76:45:3c:c5:9c:29:4e:0b:be:d1:8d:d9:5b:f1:5e:
0a:e4:39:90:71:7b:cf:03:57:fe:fa:21:da:ac:d6:
14:99:7f:f5:27:53:10:3b:66:4a:d9:18:65:a6:92:
be:d7:5d:6a:95:89:63:eb:9d:4d:a6:d4:8d:07:e5:
3e:b1:cf:c8:42:e6:be:44:12:32:14:08:ed:ac:88:
59:b5:8f:e1:8a:d5:6c:26:23:e8:e7:f1:3d:3e:50:
36:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A1:75:F4:0F:CB:94:A0:6B:8B:7B:BD:07:41:FA:22:29:53:51:C1
X509v3 Authority Key Identifier:
keyid:C6:74:01:22:C6:03:0B:38:98:54:23:D7:C7:C6:68:EF:2D:BA:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c5:d5:2f:4e:cc:a0:dc:52:0c:70:f8:5a:e3:94:6b:3c:74:
12:2c:f0:bc:70:d6:76:b5:60:ce:c1:46:29:ef:83:c7:b6:19:
be:d1:e0:af:a0:20:99:5c:c4:47:53:39:6f:8b:74:54:83:37:
0e:ba:10:d5:48:38:b4:1d:15:3e:b1:74:1a:22:bb:35:8a:73:
3e:12:6b:ec:39:b6:ae:60:10:3e:49:f6:1a:bd:d4:55:fc:5e:
dc:d3:00:98:f2:ed:bb:00:57:0a:cd:df:ae:e2:e1:57:2b:38:
85:fc:41:da:37:da:65:72:22:8f:7a:b4:4f:d9:17:18:3d:78:
8c:a1:5d:ba:d3:67:b5:b5:21:3d:ec:ef:66:37:a1:d1:1a:9b:
6c:91:43:cb:36:1a:33:d5:42:4b:6b:a0:dd:65:4d:37:57:22:
2f:8d:18:55:0d:df:f7:3e:6f:29:0b:95:a0:a6:84:09:ef:56:
50:62:bc:bf:59:e6:fc:43:88:49:1d:0f:06:f5:ad:f3:0d:7e:
fb:5e:ba:c9:34:e5:25:9a:b5:8b:ee:c0:72:12:49:1c:96:90:
f1:d9:26:9c:aa:a9:e2:b8:6a:21:25:bd:a1:19:56:12:d9:da:
da:26:7e:3d:7b:43:d2:a8:be:51:90:af:c4:50:79:e9:74:e6:
c9:69:48:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:57 2026 by rpki-client