Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json)
Hash identifier: DXG1/tLTg+4K6fegxXxRYxvJUL5h/osY4eZpiqmi1Xk=
Subject key identifier: 7A:8E:6E:5C:A8:6B:F2:37:32:5A:19:FD:56:66:A8:D5:6B:64:27:97
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 01A0E0CF10F0D5502E7AD20BF9C558FFD3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
Manifest number: 0AC7
Signing time: Sun 27 Sep 2026 03:01:01 +0000
Manifest this update: Sun 27 Sep 2026 03:01:01 +0000
Manifest next update: Mon 28 Sep 2026 03:01:01 +0000
Files and hashes: 1: 5Qm3w6W4KV4G70UEua6vpofuK3w.roa (hash: 7gjCA6HtXiqMWysrEHmsQXBLEFr30GX2eXmg9EbiYCA=)
2: mI3qnrq6SLm_VsmkKACilXewKTo.roa (hash: Q4wc/dtQ8g68gQZvC3Ka6nudxiroE6HA9EnDTB3krUA=)
3: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: /+ja39qDc0pGdGDBNkLJE3pl/sIdzLxoGw02N4PDdjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:10:f0:d5:50:2e:7a:d2:0b:f9:c5:58:ff:d3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Sep 27 03:01:01 2026 GMT
Not After : Sep 28 03:01:01 2026 GMT
Subject: CN=7a8e6e5ca86bf237325a19fd5666a8d56b642797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:70:a1:cb:44:1b:e1:94:93:c3:a7:94:5f:
98:ff:c3:41:d1:ad:92:77:46:32:79:36:f6:2d:d0:
f7:86:aa:84:2b:b2:f8:4c:0a:90:18:23:9e:8b:67:
a7:0e:af:ee:a1:17:d1:60:1d:17:ec:52:51:b6:49:
ec:d2:c7:b3:2d:f2:14:e9:85:a0:28:8a:c2:12:9b:
76:4a:cd:6e:78:74:75:4b:d9:fb:33:08:88:74:f7:
b4:d9:7d:bf:4e:fa:b2:67:a2:d2:4b:86:5a:c2:ba:
06:8d:1f:2a:66:e5:f8:37:e8:49:63:1c:92:33:85:
75:bc:cc:37:c3:f3:e2:45:04:7f:9f:63:75:14:6a:
0c:cb:10:5a:3e:9d:ca:90:d6:4d:f8:cc:12:d7:90:
c6:32:4f:e4:0a:d9:14:94:5d:01:66:0a:50:ae:1f:
38:5e:f0:ca:af:ad:75:fc:f8:b2:33:18:45:1b:f3:
63:95:3a:c5:8c:8b:0b:c7:56:a7:44:3d:f7:70:7c:
4a:0e:50:9a:1c:61:70:17:57:82:36:49:fa:fb:d7:
59:5e:b8:2e:8d:17:d2:ca:f5:95:dc:63:c8:d4:8d:
c7:59:c6:66:f5:a1:85:ba:4a:4d:6d:97:8b:d1:69:
09:6b:17:db:05:b5:64:1a:db:df:b1:df:e2:54:33:
45:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8E:6E:5C:A8:6B:F2:37:32:5A:19:FD:56:66:A8:D5:6B:64:27:97
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:71:cb:fb:2a:6f:53:7a:ee:98:dc:5b:28:4e:1b:b2:5a:20:
87:c5:1d:8d:e1:6a:fd:69:a6:03:dd:96:46:b8:fe:ab:40:1e:
1c:ed:03:42:50:56:db:4a:20:9d:2b:55:9f:31:2a:5a:90:fb:
89:fc:c4:d7:c8:2e:3a:7e:ec:32:c3:8a:c2:9d:f2:2d:ca:dd:
bd:c0:cd:de:06:bf:ab:cf:23:fc:0e:ea:87:89:db:c0:b0:cb:
6e:eb:bd:8d:f0:44:07:85:b7:8e:81:75:be:15:52:8d:cd:43:
09:28:c0:57:70:b7:97:ca:5d:18:7a:d2:1b:ac:e3:47:ce:d0:
94:8d:b2:82:fd:92:50:51:ee:63:e6:24:ea:d4:40:25:37:f7:
54:23:3a:a8:62:41:b7:ae:12:4a:d7:ad:df:16:4e:1e:75:d9:
c4:af:1f:86:8a:e4:a5:b1:4f:d1:98:1b:e1:9d:2b:50:78:88:
d3:58:29:5e:43:79:b1:77:29:24:a5:8c:f1:c3:4f:3e:a8:45:
76:c4:00:d8:82:7d:62:b7:45:06:af:1b:a6:ab:8d:12:52:64:
cb:8f:b4:b5:97:43:7a:05:d3:4b:d2:6b:0a:18:0f:31:11:97:
22:bd:15:58:74:d7:e6:91:92:5f:0f:02:30:6f:35:01:0a:c5:
b9:50:a0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:25:33 2026 by rpki-client