Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: +9V9GSG3EeFI4eT1dUnH4mgbhKBjbkm0ROXmYTL0usw=
Subject key identifier: AD:B3:CC:3B:3A:30:49:DC:9C:06:26:AD:F8:E1:43:E7:6E:64:0F:BA
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 01A0CEFF638A6E5BAAEE3A06BDB1F7BB7C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 16:00:38 +0000
Manifest this update: Wed 23 Sep 2026 16:00:38 +0000
Manifest next update: Thu 24 Sep 2026 16:00:38 +0000
Files and hashes: 1: FX91S7TqeS_5eNXFwkhAJLeDMDY.roa (hash: 7/g0n2srHScQb2lUJNavUfjGDwgVOP/uF61M1Zy+4aU=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: hik7xNns3zY8nv4MFmtp7TFKoDorkONIGIiepctyWnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:63:8a:6e:5b:aa:ee:3a:06:bd:b1:f7:bb:7c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Sep 23 16:00:38 2026 GMT
Not After : Sep 24 16:00:38 2026 GMT
Subject: CN=adb3cc3b3a3049dc9c0626adf8e143e76e640fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:91:9b:4c:cf:b7:23:e4:2e:25:f7:67:c7:
de:52:d7:82:55:10:e2:65:f3:6d:04:2f:61:2b:f6:
ee:76:dd:51:29:b4:98:71:c4:02:e2:0d:a2:fe:25:
7f:b3:07:45:96:2e:b7:a0:03:3c:50:8a:39:97:46:
37:5d:f4:65:c1:ec:5f:90:e2:1c:e3:e3:03:03:ef:
23:0c:ee:e1:29:5f:f6:c4:54:82:f1:2d:47:b2:01:
39:4f:33:f0:81:f6:97:7e:e1:e1:a9:d9:d2:6e:ec:
9c:a0:c7:62:3c:55:c2:c3:64:d6:1e:cd:e4:81:11:
33:c1:84:2f:ba:3c:7c:2c:69:71:0c:dc:0c:ef:6b:
7f:f0:2a:62:63:64:6f:35:3f:88:13:5f:44:6e:45:
7f:fd:c4:e6:9d:9b:a5:80:80:56:bc:63:ed:1e:fa:
cb:7f:ac:38:c5:1f:ea:d8:65:97:38:b7:bd:7f:da:
fe:68:a4:6a:69:dd:11:52:63:88:40:48:f4:af:3c:
60:60:46:f2:46:f4:a2:bb:0c:55:88:b9:df:33:8c:
bc:d3:9f:74:be:9e:34:fe:2f:d5:fd:4b:c2:89:0a:
72:ec:b6:14:b7:cc:86:18:f8:3b:09:f2:00:a7:9b:
1b:54:77:7b:ae:13:16:8b:3a:a3:15:32:ef:28:c2:
2e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B3:CC:3B:3A:30:49:DC:9C:06:26:AD:F8:E1:43:E7:6E:64:0F:BA
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5d:21:e0:cd:db:19:b8:f2:4e:ea:4d:e3:1b:4d:11:73:26:
4f:98:1f:cb:a8:55:37:75:2f:4a:60:13:06:da:17:7a:a2:b3:
f8:11:d8:e0:51:ad:a7:e7:f2:b4:49:b3:f3:01:29:1b:67:20:
52:0c:f5:ba:37:c7:0b:e3:7b:2e:36:51:fb:eb:d6:d7:50:f9:
cb:a3:ba:d6:fe:e5:ac:98:84:55:58:59:c1:15:78:d8:04:62:
8b:77:ad:d5:3e:f6:ed:de:5a:2e:74:30:d9:f3:7c:16:4c:0f:
94:b9:ee:08:a2:5d:33:1f:fd:19:e5:2d:f5:5e:df:c2:d6:ec:
0a:b1:4a:fb:b2:5c:c0:91:e2:b5:cf:44:47:89:47:30:21:da:
e7:0f:06:04:66:9c:59:3d:7e:b2:dc:52:89:a8:ae:ac:c4:13:
99:39:37:1a:a3:cb:09:fb:08:0a:9c:aa:cf:9e:87:00:4b:83:
ed:ab:72:3f:bb:bd:8e:d4:ad:a6:16:9c:26:95:93:66:68:0d:
1c:3c:3f:cb:34:11:9c:5b:f3:6f:20:2c:c2:f0:68:fc:b0:ae:
56:32:3d:69:e2:c0:d9:fa:e4:31:1e:58:77:62:8a:6b:d6:f1:
b8:cf:05:e8:2d:43:c1:59:a2:8a:d8:48:87:9c:f8:91:ba:4d:
1f:68:c8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:34:22 2026 by rpki-client