Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: SYjQF0qIOxHv5GrZ9CxW1RG75YAm1apRr6saUYoODfQ=
Subject key identifier: 3C:4A:E7:83:E1:47:FE:34:CB:8A:2E:52:21:A5:EE:5D:E2:0E:DF:EF
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 01A19B7D37B4B4EF42C70F22432372939EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 1AD9
Signing time: Mon 02 Nov 2026 09:00:37 +0000
Manifest this update: Mon 02 Nov 2026 09:00:37 +0000
Manifest next update: Tue 03 Nov 2026 09:00:37 +0000
Files and hashes: 1: 0GfPX1iH-4jrdeocNq_6rEuAOsw.roa (hash: ZXWqDRXmQQYRidDZbFeir8xCY/Br5x9u3HuJDCrOxDI=)
2: E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa (hash: Uscjfda3vNy/cunwHUUok4ph0ZEvFOV3pV/NuXcyZJ4=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: VUP6z0woLZ07lSv//DFQYyZW0kOWSrjfTMCMvufv0OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:7d:37:b4:b4:ef:42:c7:0f:22:43:23:72:93:9e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Nov 2 09:00:37 2026 GMT
Not After : Nov 3 09:00:37 2026 GMT
Subject: CN=3c4ae783e147fe34cb8a2e5221a5ee5de20edfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:36:62:ec:18:5d:7d:d2:f2:43:01:64:7b:
00:22:fa:53:a9:b2:e9:a9:26:c2:ee:a3:0f:61:a3:
86:82:77:7a:ad:a0:11:c6:71:61:3b:02:c3:dd:33:
8a:4f:5e:c4:d1:ad:f8:f0:a3:4b:b0:ff:22:ee:53:
94:03:0e:5c:e2:2f:fd:1c:8d:09:6c:75:37:b0:0f:
17:57:66:e3:2b:68:6a:31:17:4f:2b:31:c7:e0:b6:
5f:ee:dd:54:5d:d0:4c:23:4b:de:05:2d:76:e5:03:
bb:19:ab:99:91:f1:71:91:c4:98:25:4f:61:4f:7d:
c2:32:76:78:50:d4:dd:a9:93:2c:da:52:a7:bb:f2:
54:e2:fe:22:28:4f:3b:63:9a:70:eb:15:da:e1:7c:
cf:80:57:20:3b:fb:7c:2b:7b:7c:58:55:33:79:c7:
21:95:e8:c3:7f:87:84:ab:14:b9:cf:d9:64:b4:c2:
a1:e7:ef:e7:85:46:6a:e2:be:15:79:af:d3:8d:88:
0f:c6:92:00:2a:08:c5:cc:49:83:7e:51:30:db:4e:
78:fa:7f:7a:79:2c:09:f3:7b:f5:e9:1f:19:30:a7:
f4:5f:4a:00:fb:00:c8:10:bf:1f:6c:ed:cf:47:94:
4d:ad:59:23:6f:c6:c2:6b:1d:ec:58:e6:3b:ee:c4:
01:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4A:E7:83:E1:47:FE:34:CB:8A:2E:52:21:A5:EE:5D:E2:0E:DF:EF
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e5:2b:3d:0f:92:1d:64:68:45:c4:1d:7d:1f:f8:27:a9:42:
66:88:63:5d:a7:db:75:b8:25:5b:91:22:45:ac:3f:a2:48:f4:
f8:b3:c8:63:b2:0e:96:36:b1:ea:f9:cc:f1:b8:30:3e:c5:8f:
de:0c:81:6d:9f:ed:e5:24:e8:17:7a:4b:13:b7:d2:54:11:7d:
5f:91:77:14:a3:c0:2f:78:d6:7f:87:35:97:1e:ad:c4:e9:97:
2e:24:31:32:a0:e9:ef:13:48:10:ca:49:1a:1c:a7:a1:62:f2:
6e:db:82:aa:20:6c:1a:a6:18:04:d6:32:22:ec:f6:8c:c2:e7:
f0:d9:4a:b7:1a:b9:72:58:7c:3e:f3:1f:85:bb:c4:b6:25:de:
bb:b0:08:2f:80:00:24:71:6f:c9:74:4e:9e:c3:44:46:74:f8:
6c:6b:ac:55:c9:b3:53:71:35:85:0a:8f:6b:89:d8:e9:c2:d6:
0f:ce:5d:d6:b9:e2:1b:59:08:f2:e8:d1:c5:2b:cc:6d:56:c6:
8c:a9:59:78:f9:3a:6e:a8:a4:b2:42:42:78:26:92:18:bb:d5:
e0:c4:8f:1a:d7:33:d9:c9:e7:4a:3e:e2:25:46:1b:90:06:dc:
f4:89:ad:fc:e7:e5:87:28:b3:6e:43:6e:da:ed:39:09:12:73:
3a:f0:66:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:38:33 2026 by rpki-client