Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: f7/dpCnNpqcA7oXlWPitEDLKrJuGjRvUHL0miQFSvok=
Subject key identifier: 12:50:D3:F5:5D:29:B5:CD:5E:D9:08:A9:53:75:2C:C0:B3:2A:76:58
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 01A06CB8F3730629FA1179A5EE6464DBFFBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 1A3B
Signing time: Fri 04 Sep 2026 14:00:55 +0000
Manifest this update: Fri 04 Sep 2026 14:00:55 +0000
Manifest next update: Sat 05 Sep 2026 14:00:55 +0000
Files and hashes: 1: 8bjq5CLAkMYnJtGthdYrockLCPY.roa (hash: eDG4zg9ilYUKjh0gJA5+ITJl6INuXH1V6df209hapIs=)
2: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: AM6LPgtf1Gt7IqM6vYDx1yYVV9jtoC67FwMtEdAjBUs=)
3: y6q-4aOfHflX0pozAnd7z21SiEw.roa (hash: BNrcMKA3+AgY/9eYfHPZuG3AM/va4c4zSTiZb/uHiLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:b8:f3:73:06:29:fa:11:79:a5:ee:64:64:db:ff:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Sep 4 14:00:55 2026 GMT
Not After : Sep 5 14:00:55 2026 GMT
Subject: CN=1250d3f55d29b5cd5ed908a953752cc0b32a7658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:67:ce:17:32:bc:de:dc:4a:e6:23:fe:f4:
5e:b0:9c:2a:83:d5:3b:c0:75:6d:7b:eb:9d:fd:22:
82:1e:0e:89:71:39:6b:11:9e:c1:9a:3b:d2:20:33:
40:26:62:a5:12:2c:d9:a6:08:fb:a5:6f:71:3c:35:
15:50:b3:66:8d:19:7d:98:87:13:ae:05:55:42:3a:
c5:90:c7:1e:4c:7f:b4:06:f5:73:2e:b9:42:54:df:
0d:46:d7:65:f7:4f:90:a6:e0:22:de:4e:52:cb:ce:
3c:55:1d:56:8a:58:1d:ea:25:5c:6c:a5:19:a0:b1:
74:55:04:6b:a3:56:20:02:68:3c:57:79:f1:71:eb:
9c:f7:ef:5b:9a:f4:fa:3a:9e:5d:53:0e:55:69:fa:
f6:60:c8:b1:86:8c:49:9b:5d:53:f8:02:c9:15:4c:
3e:9a:f0:28:9d:8d:b2:f5:6f:c1:42:41:c6:12:07:
d6:84:44:dd:43:1a:37:a8:73:6f:51:34:21:af:00:
c3:cb:3e:2e:b4:6b:c9:50:2d:f9:57:1f:c2:7d:67:
35:59:72:d0:31:26:22:81:d5:91:e8:61:69:a2:ae:
f8:fa:4f:13:d8:7e:fb:98:18:cc:92:95:ea:a9:f0:
38:fb:4f:1d:85:0a:15:d2:28:c0:56:d7:86:fa:fa:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:50:D3:F5:5D:29:B5:CD:5E:D9:08:A9:53:75:2C:C0:B3:2A:76:58
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b4:65:7d:02:11:85:da:9a:3f:40:ec:95:43:bb:af:12:91:
6b:64:b3:bc:d4:3a:eb:50:06:f1:79:96:35:18:23:dd:77:6f:
91:d3:98:a4:3b:9b:3d:d1:65:4a:e3:4f:6d:ac:ce:8e:ee:3b:
6e:64:b3:6a:ac:48:a4:3f:11:22:50:25:69:67:c0:4b:74:c8:
e8:8b:c5:28:bb:c7:da:ba:0d:ec:81:6e:95:f0:27:6c:93:19:
09:a7:20:a2:3c:a9:ce:a1:7c:b0:76:38:ab:2b:95:1a:63:50:
58:00:93:34:ed:ed:c6:f2:41:7b:e6:69:2f:c6:24:bd:bc:e1:
4d:52:46:99:43:d1:89:0a:7e:31:26:f5:5f:48:17:4e:f6:6f:
32:87:c9:11:03:bb:f1:34:49:27:b8:76:7b:f3:da:f0:5a:60:
16:3d:b0:92:66:c5:29:4b:0e:6a:8f:1a:55:ff:41:6c:61:f9:
fe:9f:a7:e4:92:2f:e7:a3:02:9f:db:6c:6e:a0:c7:08:aa:3d:
75:d8:11:76:8f:79:61:d7:d3:ac:23:fb:d5:dd:20:31:f8:68:
f3:d8:70:46:61:77:a8:da:82:e6:22:a8:fa:fd:52:79:1e:41:
80:d3:33:32:fe:56:78:1c:01:35:10:8e:12:81:ad:43:48:37:
68:35:ed:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:09:53 2026 by rpki-client