Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: WzM/XS9RSeGtg+zLtadOshIl7528SIR8uebwtvEi0yg=
Subject key identifier: 06:7B:88:BD:CB:AE:D8:CB:BC:F0:0D:81:75:21:D7:DA:63:FD:AD:59
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 01A111847B97000FD0DC00F08B618C92497C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 1A90
Signing time: Tue 06 Oct 2026 14:00:57 +0000
Manifest this update: Tue 06 Oct 2026 14:00:57 +0000
Manifest next update: Wed 07 Oct 2026 14:00:57 +0000
Files and hashes: 1: LXxDQYBI8a2bgUeaO6Um5RWeWus.roa (hash: eyN2GAZCoXjAEdKeBKmxr2YBtVYHGsGtrSqCUIPElRo=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: diVFLCUDdd74VOn+erWtvzAKq6UwddZiK6D2swxP4UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:84:7b:97:00:0f:d0:dc:00:f0:8b:61:8c:92:49:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Oct 6 14:00:57 2026 GMT
Not After : Oct 7 14:00:57 2026 GMT
Subject: CN=067b88bdcbaed8cbbcf00d817521d7da63fdad59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:6d:bd:47:26:df:6d:fd:d9:6d:43:2e:d8:
41:ad:27:c3:ba:b4:c6:a6:97:50:a3:6f:31:70:2d:
ac:50:db:06:24:c9:6e:d4:a2:33:2a:84:93:6b:97:
80:7c:14:1a:be:7e:50:42:7a:d0:8c:79:35:03:1d:
1e:80:e1:b3:46:0f:80:0c:63:f5:64:4e:fb:80:59:
e3:7b:45:97:91:2b:e7:32:15:47:6b:eb:60:d9:02:
00:a9:e5:c3:81:48:81:0f:71:e4:b9:ae:1a:b0:c0:
da:85:5a:f8:dd:1f:7d:d0:0d:a5:6a:57:41:de:ad:
00:4c:79:54:88:2c:a1:06:a4:1c:68:f1:0b:2d:8e:
ca:22:e9:98:ec:1d:e5:e2:ad:1f:18:ce:86:66:90:
a4:30:97:9a:a3:e2:52:95:f3:df:d6:a5:ad:b6:99:
88:61:cc:c0:f6:4d:ee:57:cd:42:1e:ad:4e:13:99:
0d:bf:f0:58:43:de:bf:99:25:1e:4f:f9:24:5b:5c:
05:12:17:38:51:b4:8c:31:64:b3:64:ca:cd:5d:0d:
2e:86:66:db:45:45:f6:7e:07:2a:81:e4:34:ca:63:
ae:73:02:92:c5:9c:a3:a1:f4:41:f4:0b:46:29:98:
0d:89:dc:ac:9b:43:92:07:b7:66:26:0e:6e:14:80:
32:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7B:88:BD:CB:AE:D8:CB:BC:F0:0D:81:75:21:D7:DA:63:FD:AD:59
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:12:5a:a4:9b:af:57:9e:4f:30:a2:c9:9b:b9:3f:b4:f6:e9:
73:ee:bd:af:5d:f7:ec:21:37:18:41:ca:a3:76:a6:bf:74:5f:
a8:4f:ef:ac:03:69:a4:a1:3e:9f:82:e7:12:38:d9:f8:60:4f:
0e:8f:77:ba:c5:35:88:ec:57:e9:51:eb:60:38:e9:89:67:66:
50:e7:25:1a:18:fb:82:4a:e0:e6:b6:30:49:5c:7c:0b:d5:0c:
68:5f:f4:9a:f9:15:9e:e5:f2:2b:7b:19:ad:3e:c7:af:3c:67:
eb:b3:2a:99:18:e4:06:db:5c:a0:00:e6:4c:d5:95:10:b6:6f:
be:a2:d6:e5:36:33:2f:07:f7:8e:b8:26:1b:3c:2e:e7:1d:f0:
a9:e1:cc:64:b5:d0:62:12:90:1f:cc:b6:f5:ff:2f:5a:90:97:
cf:05:e9:10:75:e0:7e:e0:5a:70:4f:f6:ef:84:12:af:3a:b5:
cd:1b:77:95:49:e9:e6:40:45:2b:19:e6:4d:f9:b7:4e:65:71:
56:a8:34:02:88:6a:88:c5:cc:73:99:2b:34:0d:28:e8:d3:20:
cf:e9:ff:23:0f:24:4d:08:08:cd:ff:01:3d:e9:32:2b:00:5b:
ad:56:82:e0:4b:9e:ca:5f:27:05:22:24:b2:7f:1a:77:25:08:
e9:3f:29:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:04:57 2026 by rpki-client