Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
File: xnSbIhBmFd8RMq2lGekgcJLy26o.mft (raw, json)
Hash identifier: ZrAdBbrroZKYa3m2wRUutb5iHmfow3tiErwpnqDSY5E=
Subject key identifier: 44:B9:AB:0A:6A:4D:41:EC:6B:6B:C4:7D:A2:21:94:A8:6E:0A:38:CD
Authority key identifier: C6:74:9B:22:10:66:15:DF:11:32:AD:A5:19:E9:20:70:92:F2:DB:AA
Certificate issuer: /CN=c6749b22106615df1132ada519e9207092f2dbaa
Certificate serial: 01A0ED0A8747768B07F80CFF1501900CECE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
Manifest number: F4
Signing time: Tue 29 Sep 2026 12:01:24 +0000
Manifest this update: Tue 29 Sep 2026 12:01:24 +0000
Manifest next update: Wed 30 Sep 2026 12:01:24 +0000
Files and hashes: 1: eIdFh6Y2hgdzeMtjgTPa_J9JiIQ.roa (hash: gOJ1QVyv1enp2QMYeZEi64KYRWZktKrcxHdJcaTNmH4=)
2: xnSbIhBmFd8RMq2lGekgcJLy26o.crl (hash: PdaEK8B0vNa+8KSiF1hXS0gvcI5BqSy2UFe0rxnAsoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0a:87:47:76:8b:07:f8:0c:ff:15:01:90:0c:ec:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6749b22106615df1132ada519e9207092f2dbaa
Validity
Not Before: Sep 29 12:01:24 2026 GMT
Not After : Sep 30 12:01:24 2026 GMT
Subject: CN=44b9ab0a6a4d41ec6b6bc47da22194a86e0a38cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:60:79:5a:1a:17:5d:7d:e2:dd:ef:8a:90:91:
e8:b9:e0:78:b1:5c:89:28:8a:09:1e:bd:1f:9a:c7:
90:ad:ae:3b:b9:42:b3:ea:ef:e3:c5:8b:53:25:1f:
e2:bf:4d:b0:a1:a4:2c:35:fe:9b:16:36:10:8b:46:
7e:91:74:ee:ba:e3:3e:89:70:66:ac:46:30:da:ed:
73:e4:d6:c5:57:c0:bb:cc:7f:d5:1d:c4:e0:e0:81:
87:0f:c1:bd:97:ea:fc:11:5a:29:9e:0a:5a:af:7e:
e8:62:df:2c:af:9f:78:e0:87:77:c5:8a:da:be:eb:
a8:8e:33:70:92:04:01:0c:4f:66:80:ca:d2:26:94:
d9:ec:00:bc:3f:93:58:84:14:70:c9:c4:20:79:b1:
4d:c6:67:80:85:9f:8c:54:a7:6d:a7:59:82:8d:70:
3e:6f:1a:7f:ad:1f:2e:51:08:56:f9:20:7b:3b:48:
c0:16:4c:04:3e:67:98:00:56:05:61:68:59:bf:33:
c7:46:1f:b8:7b:18:6f:93:0d:26:89:e6:e3:74:8c:
22:0b:d8:1b:9a:9b:19:50:ac:8f:88:b2:6f:1c:a0:
46:52:1f:af:48:aa:c1:40:00:d3:85:3d:b3:89:95:
28:ab:ba:06:5d:dd:a6:6d:e4:e7:2a:20:21:2b:0a:
55:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B9:AB:0A:6A:4D:41:EC:6B:6B:C4:7D:A2:21:94:A8:6E:0A:38:CD
X509v3 Authority Key Identifier:
keyid:C6:74:9B:22:10:66:15:DF:11:32:AD:A5:19:E9:20:70:92:F2:DB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b5:3b:a8:9b:fc:d1:22:b3:7d:5a:b9:3f:14:2c:3b:12:94:
dc:8a:c8:3a:e1:41:79:87:cb:b2:fb:eb:19:6c:02:7e:52:bb:
b9:4f:c7:a1:2b:78:48:16:81:4f:6b:c8:c8:f3:c5:aa:b4:48:
04:2a:3a:cd:eb:82:02:0a:5e:e6:99:e7:d3:77:33:dd:11:f0:
fd:92:07:ef:6d:17:7a:d1:26:4a:9d:bf:73:e9:7d:01:99:8b:
78:ed:8c:3a:4b:95:ce:ac:08:32:bf:52:58:f8:a5:dc:b7:51:
75:87:68:d3:9d:36:08:d1:72:4e:7d:81:78:d2:7f:92:ac:c8:
84:77:bc:42:e5:89:79:da:91:d7:5e:7f:a7:1c:3a:38:80:5b:
1b:88:6d:11:a0:b5:65:99:b8:94:2e:ae:ea:88:31:3b:e0:e0:
93:71:7e:89:56:f4:b9:b5:73:41:3f:a9:46:93:f3:7f:30:d1:
d7:20:d7:c1:c9:cb:20:e2:eb:04:71:e3:cf:46:52:57:37:d3:
02:4d:c5:80:57:e0:a9:44:7d:90:22:a1:b9:0e:90:7c:02:30:
ca:5b:92:27:25:89:a4:e9:29:a1:a9:77:60:1b:dd:ba:cc:2e:
0c:e9:6c:7f:10:89:a3:89:aa:f9:c5:a7:43:af:ae:d4:ef:38:
4b:af:8d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:23:44 2026 by rpki-client