Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
File: xg8yRv3WG6G1eS_hrsStypjXWlw.mft (raw, json)
Hash identifier: pLtbR8Z3CMVa5sBDs6wqS0BUyu2cWU6XYn67IckQ7lI=
Subject key identifier: 63:21:4B:A3:DE:D9:04:91:D9:8B:84:52:36:3F:F8:37:00:BF:61:97
Authority key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
Certificate issuer: /CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Certificate serial: 01A151E403B45F24D106C7A8B72EEE821EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
Manifest number: 0490
Signing time: Mon 19 Oct 2026 02:00:59 +0000
Manifest this update: Mon 19 Oct 2026 02:00:59 +0000
Manifest next update: Tue 20 Oct 2026 02:00:59 +0000
Files and hashes: 1: MmQGKSoH5LF3BVkr3ibrE-H9I9E.roa (hash: yWJCfOrBqqRptAvrnSvVrhM/S/WywcoV/IXeHHMd0es=)
2: xg8yRv3WG6G1eS_hrsStypjXWlw.crl (hash: vnoHOW3Pbp8gfWGPK1Dp9VFZRxBqCjeC3VDZgri5fFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:e4:03:b4:5f:24:d1:06:c7:a8:b7:2e:ee:82:1e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Validity
Not Before: Oct 19 02:00:59 2026 GMT
Not After : Oct 20 02:00:59 2026 GMT
Subject: CN=63214ba3ded90491d98b8452363ff83700bf6197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:d9:59:12:8a:0e:0c:78:98:f7:a2:3d:00:
c0:15:6d:78:d3:6d:0e:21:0f:8e:2c:43:a8:09:27:
f9:5a:5c:a3:7c:a2:59:1f:ec:ab:0d:83:2a:31:db:
7d:5b:4c:dc:7f:66:29:75:78:6c:61:2d:45:9c:32:
e6:b8:d9:cd:69:18:10:8a:db:32:af:18:42:cb:be:
9f:c3:b3:26:b2:04:80:89:73:12:26:cf:f4:3e:ce:
10:91:f6:1c:31:c3:3b:d0:1b:ce:cd:1d:fc:c0:ae:
bf:a8:15:9c:8d:2e:a7:b9:3a:71:76:02:ad:2e:6e:
3b:ee:06:b8:a0:7e:dd:3b:44:8d:a5:48:da:94:0c:
16:a2:ef:9e:fd:7f:7d:32:ea:eb:16:b1:f9:74:75:
80:20:1f:66:2a:5b:d0:2f:1e:c5:ba:d8:7e:ca:bb:
ca:b0:47:06:93:b1:ba:09:f3:18:a0:fb:96:3d:58:
9b:71:1e:89:7a:fa:49:78:11:ef:16:b3:fe:0d:d1:
45:47:12:2a:db:b1:e4:16:5a:16:fb:4e:b4:35:3b:
ba:c7:88:5a:26:6f:5c:42:3b:f0:c2:b7:f4:25:cf:
95:6f:fe:24:5b:89:45:6e:12:47:09:bf:5d:93:5b:
54:86:ad:a7:33:69:48:d6:c6:57:cf:ff:2c:8a:c0:
69:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:21:4B:A3:DE:D9:04:91:D9:8B:84:52:36:3F:F8:37:00:BF:61:97
X509v3 Authority Key Identifier:
keyid:C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0d:25:2d:07:e5:39:86:f2:70:0f:fd:08:65:bb:8f:0a:cf:
a8:18:7f:60:c1:77:a2:b3:9d:e6:26:ce:be:ae:40:e2:9c:eb:
b8:c2:85:61:24:34:2e:c1:17:c2:6c:04:6a:5b:db:d0:a4:d5:
5d:c8:cc:dc:29:de:f1:97:16:a8:b7:0c:64:59:df:21:46:37:
fb:1a:67:6d:5b:5c:90:f3:0f:b1:0e:cd:43:28:d7:ae:38:6d:
60:e5:c0:c1:21:62:4b:3e:77:e6:47:35:ca:33:fb:b1:d7:c6:
4b:ec:62:2e:07:3b:35:df:83:25:7c:86:39:df:ca:82:38:4d:
45:18:70:ee:23:02:22:ae:aa:7c:e5:ce:06:a9:3d:63:8f:b7:
bc:09:ca:43:d3:6e:c8:ec:63:ca:39:1e:bf:10:aa:ca:34:1b:
0e:8c:27:6c:96:bd:a4:a0:7a:68:fa:60:32:f1:4d:7f:93:5c:
08:f1:4e:b4:e2:42:04:76:6d:7f:24:0d:fd:7f:bd:28:35:b1:
67:17:47:06:fc:a8:48:b3:16:2a:c8:14:4b:2b:09:70:33:dc:
7b:92:42:1f:42:10:44:12:c5:d1:e9:a7:13:9a:87:64:43:aa:
d9:69:17:d8:49:32:5d:49:39:75:8d:a4:47:ee:23:c8:01:47:
9c:d0:94:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:50:54 2026 by rpki-client