Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: IWkzSVx5Blv3PldWcoKjRxn/kGEFAmM2VHg+nL66ti0=
Subject key identifier: 55:29:C1:43:AF:A4:53:DA:F5:2D:DE:D4:A6:48:2C:CC:83:D5:24:64
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 01A0EC9C5685DA20218A07684AB2EC89F8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 1A7C
Signing time: Tue 29 Sep 2026 10:01:03 +0000
Manifest this update: Tue 29 Sep 2026 10:01:03 +0000
Manifest next update: Wed 30 Sep 2026 10:01:03 +0000
Files and hashes: 1: Z4BDlr57O_FweazPHma0rDQN-Eg.roa (hash: RRUvm/U5FkAyaYrRTEjgZo8457PWupRX0eiUbSuUq0U=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: TscjVHv5A/ZNvUaHLToF6/8j+vUW1P5mm60/UcshUxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9c:56:85:da:20:21:8a:07:68:4a:b2:ec:89:f8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Sep 29 10:01:03 2026 GMT
Not After : Sep 30 10:01:03 2026 GMT
Subject: CN=5529c143afa453daf52dded4a6482ccc83d52464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:65:07:b6:c6:18:3b:21:e5:59:4d:3b:2a:d9:
f8:a1:c6:87:6f:a5:57:8a:d2:99:6b:52:7b:47:5c:
47:97:c3:2d:a1:78:ea:64:30:1b:93:e0:28:e2:d5:
3a:b4:78:2d:bb:91:1d:93:c7:eb:54:27:40:39:cd:
9d:8d:6a:89:e6:14:95:f2:81:3c:1d:be:51:c0:bd:
be:63:89:2c:6e:75:ca:a4:76:19:00:39:1b:80:f2:
54:b5:b2:5e:e1:cc:51:7e:d9:c8:1e:36:11:4f:ef:
39:79:11:51:4b:95:ec:7f:8a:1a:15:08:28:da:e1:
c5:bf:d4:f2:88:4c:28:e1:59:87:71:8c:cb:67:85:
0d:c3:61:f5:12:b2:af:02:1f:c6:14:c3:1b:19:1a:
a6:08:24:ae:8f:14:92:4e:10:f8:3a:02:ab:15:dd:
c1:f4:0b:05:75:98:6a:2a:33:34:61:09:d2:28:e4:
b3:4d:de:f8:63:17:ab:49:5d:63:55:cd:0d:a7:54:
f8:0e:5f:77:b8:52:11:61:ca:c1:92:a8:d7:8c:37:
72:81:1e:4e:b3:f1:0a:49:39:3e:5b:33:d9:28:89:
ca:38:9d:39:df:55:6f:00:de:dc:c0:dd:b8:d6:0f:
8a:92:1a:73:d5:74:74:87:aa:e1:89:c5:13:ce:cf:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:29:C1:43:AF:A4:53:DA:F5:2D:DE:D4:A6:48:2C:CC:83:D5:24:64
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ae:7a:f9:2e:46:eb:a7:79:20:7e:39:f2:a5:99:04:36:3e:
f6:40:e4:1c:40:59:74:48:89:98:ca:7b:fd:f4:7a:59:09:af:
30:ab:8b:45:98:0a:37:99:25:6c:f9:c1:39:f9:03:93:dc:95:
2b:1a:8f:36:ed:b1:f5:2e:ee:83:17:01:ce:07:8c:97:9c:ff:
cc:81:8b:42:2e:6e:c0:e1:06:68:3c:5a:29:64:62:a1:2f:f6:
f0:aa:56:23:23:5b:81:15:2a:e1:8a:15:e7:08:be:e7:43:06:
6c:71:57:25:b4:2f:d2:d9:8c:3f:ed:6a:56:c9:7b:8e:63:c6:
df:06:c8:4b:bb:d4:96:ee:3a:fc:21:7b:39:8b:9d:4d:0a:21:
97:7c:51:90:7a:56:59:1e:69:fc:4d:16:46:5e:89:d0:3b:9b:
fc:f3:9e:3c:81:e4:13:44:b5:2b:15:16:66:0b:34:ad:0d:17:
4e:93:4c:62:24:c2:3d:69:67:fe:c7:0c:b6:fa:6f:5c:3f:49:
a5:5d:7c:d8:9b:50:37:80:99:78:c0:2b:29:e1:11:fc:1f:de:
e4:e1:dd:3e:69:3f:da:99:e2:25:64:17:c3:fb:41:16:80:2a:
25:10:13:55:a3:b1:7a:ba:98:35:d7:c2:8e:25:0c:75:b7:14:
ec:e4:23:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:29:33 2026 by rpki-client