
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File: xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier: AsR14LFQZv3H7/xmk79/XoF8YZ3KqGLuKMnijevgizQ=
Subject key identifier: F7:00:91:3A:BE:9B:D0:6C:0F:DE:4E:39:AC:5B:75:55:27:D3:95:A2
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 01A0EA76F153C68C2C91B852A9AF72ED9284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number: 1AB1
Signing time: Tue 29 Sep 2026 00:00:58 +0000
Manifest this update: Tue 29 Sep 2026 00:00:58 +0000
Manifest next update: Wed 30 Sep 2026 00:00:58 +0000
Files and hashes: 1: bnPEqM7jNSwDSsLoYqaQdeOAVmc.roa (hash: RzuAcC2bIf2stLK6Oo7aC6xahH/u0bP2SAQTbqYBz+Q=)
2: gFBkxLXifB1pizDwpQxGt50lx-w.roa (hash: CRzzcHfWnFO/NYye+zBKmrkrfDfUSQ88HqZjIhac8Z8=)
3: jdER3phX5mbgg6aj7xFihDYqyto.roa (hash: Gf4TEMTFntYzNK0gZEShHChZxR+vxTAfCM1wkhuszWc=)
4: l85MsveVC4VRyta1Pr3Wv2Mz9Uc.roa (hash: 1339z7QQmPfUk60TSdZgZE0hq+KiRCqz1Ride8dk8So=)
5: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: vLbBpYLCmdW9KlnzOVScBQbvOdrxQFtncEzt+UbW94s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:76:f1:53:c6:8c:2c:91:b8:52:a9:af:72:ed:92:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Sep 29 00:00:58 2026 GMT
Not After : Sep 30 00:00:58 2026 GMT
Subject: CN=f700913abe9bd06c0fde4e39ac5b755527d395a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:4f:63:aa:a8:98:ca:a2:d9:2a:c0:75:58:
73:59:3b:00:12:a2:48:59:e1:a9:c3:51:b8:30:72:
1e:ea:75:95:b1:9a:95:5b:1e:a3:10:1d:d3:ce:71:
55:81:ea:62:20:1d:a8:43:3f:e8:5e:6c:11:54:01:
d4:8f:eb:36:a2:13:4f:2a:80:fa:31:81:fe:d6:37:
18:83:9f:a5:f1:83:39:a1:2d:5d:47:2c:6e:3c:0d:
14:9a:a6:1b:29:f7:05:55:af:fb:84:1e:cd:f8:bf:
6a:d4:80:84:32:01:4b:7b:ad:22:20:8c:64:cf:16:
3b:0f:2c:5d:c8:63:6c:bc:ee:41:2f:16:a2:9c:6c:
93:3c:99:27:27:60:c3:ef:85:37:68:d8:ef:23:92:
20:87:3b:9c:c1:a9:95:e1:3c:95:31:0a:94:35:20:
92:02:4c:10:08:a8:27:64:50:90:c7:94:29:3a:48:
3f:9f:e9:96:1d:b0:24:8a:68:32:9c:6b:f7:61:80:
04:b4:6e:6a:54:2e:16:90:3a:23:ec:b3:62:56:e5:
0b:cb:44:30:84:40:a7:1f:4b:28:4c:ee:56:af:43:
92:c1:d8:59:93:ae:81:4c:48:e7:2c:a6:6f:1c:a6:
16:4f:ed:99:7d:1b:3b:cb:23:33:82:e4:7d:ad:bb:
80:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:00:91:3A:BE:9B:D0:6C:0F:DE:4E:39:AC:5B:75:55:27:D3:95:A2
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c0:c8:82:c2:eb:dc:b2:e0:a3:21:0c:1d:45:2f:66:18:e4:
e2:81:96:7e:76:35:b4:f8:c4:95:e9:c9:ef:59:ab:a6:3c:4f:
da:29:58:d5:3c:ce:f1:a4:26:19:7c:b4:c6:a9:4a:b7:aa:60:
73:54:cb:1b:cf:a0:dd:37:94:17:47:d2:cb:8c:54:76:a9:1f:
07:2f:cb:cc:1c:4d:76:1d:02:2e:8d:99:43:01:9a:25:95:8b:
2c:20:6a:00:2a:36:5d:46:ba:2d:94:d2:be:1a:60:7f:5f:51:
f4:1b:c0:52:8a:03:7a:2a:85:f5:6d:fa:53:f2:cd:42:eb:4b:
3b:83:f7:4d:6a:27:11:2e:28:7a:a2:61:df:e4:c8:39:ca:57:
cb:67:4f:6e:33:6d:05:7a:7d:5b:d3:f0:a7:5e:87:b2:ef:c7:
16:cb:8e:8c:b3:99:7a:e9:dc:39:c4:3c:fa:b6:e2:88:ca:a6:
7f:21:95:38:59:34:cf:74:d8:7b:00:97:aa:70:a6:15:b6:8e:
71:df:ac:5a:53:5f:0e:65:ed:66:cb:ab:5d:4a:0f:39:da:c1:
7d:71:6e:d5:ed:47:48:c8:df:ed:6f:74:e1:0b:4e:2a:7a:78:
2b:e4:f8:29:8a:78:ee:b3:de:46:b5:8e:7d:20:47:70:83:0f:
0c:a8:03:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:54:59 2026 by rpki-client