Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: ggu1soW+sPP8pVJX7RSsqeQ/6K7xMoDZJhfHN/cZB/o=
Subject key identifier: 16:69:39:C4:E7:82:24:50:EB:FA:12:5E:15:67:67:70:14:FB:3C:2D
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 01A1306B1311C2F9216F74B7D2D6D1CEA2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 1AA5
Signing time: Mon 12 Oct 2026 14:01:25 +0000
Manifest this update: Mon 12 Oct 2026 14:01:25 +0000
Manifest next update: Tue 13 Oct 2026 14:01:25 +0000
Files and hashes: 1: Pt1Psw1-lXzUqfn0X0LMWdzipP0.roa (hash: 15BXKGLsn5CILBGoCHvyltyRe1OA4GGdr684IX7Rfck=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: FQRl6Mlf4jU2BskgwRs71Pk4OG9p0YHIVBZ4M5yc+jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:6b:13:11:c2:f9:21:6f:74:b7:d2:d6:d1:ce:a2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Oct 12 14:01:25 2026 GMT
Not After : Oct 13 14:01:25 2026 GMT
Subject: CN=166939c4e7822450ebfa125e1567677014fb3c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:67:4e:f6:01:61:40:cd:74:70:85:88:ad:
12:6f:7a:ad:a5:97:18:47:e4:07:e9:4c:93:90:48:
2e:4b:0a:46:88:5c:ea:49:aa:37:91:58:ca:fd:57:
93:9c:b3:b3:13:a2:fc:a6:f4:58:0a:c1:39:1c:0b:
4e:04:43:c3:26:a1:04:2f:97:d8:1a:f5:84:da:05:
84:bd:0b:0e:f1:49:5e:77:c0:4a:b8:54:2d:b5:d2:
0b:f1:2c:68:1a:bb:bd:58:79:81:17:52:c6:66:12:
cc:d5:00:72:19:72:7a:60:50:42:ff:29:90:b7:3f:
69:0d:83:11:1d:2f:25:8d:56:d0:41:38:0c:fd:01:
10:fe:e8:3a:09:05:58:ea:6a:1e:a7:ee:dc:26:de:
8d:2c:ab:24:24:9e:7a:49:3e:dc:f9:3e:63:a6:bf:
8b:ab:66:a6:bf:51:cb:fb:f2:c8:91:a5:d1:68:c4:
0b:65:d2:6c:93:e4:cb:65:18:2b:81:88:ac:39:de:
73:8b:41:0f:9b:53:7e:99:77:e5:03:de:e7:c1:b8:
7b:0d:a1:75:84:5e:a0:d9:98:93:ab:f3:37:fd:c6:
ae:7b:a0:cc:a5:d2:78:68:68:38:77:20:4f:ad:6f:
84:44:8f:32:ae:48:89:a1:54:f7:39:7b:2a:97:5a:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:69:39:C4:E7:82:24:50:EB:FA:12:5E:15:67:67:70:14:FB:3C:2D
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:85:fb:fa:ab:ff:93:92:e7:ef:b4:07:31:54:9c:fb:3e:87:
e4:4f:30:1d:de:6d:83:bc:38:54:c5:d5:fa:f7:56:2e:87:e7:
b3:97:f2:aa:b2:a8:68:ad:7a:5f:46:b7:d1:1f:0b:57:c3:9f:
d1:7a:4d:31:f0:d5:6c:48:94:39:64:1b:5f:fd:22:df:6c:e7:
ae:2d:12:52:8e:ec:a4:ef:e3:b5:0c:2a:f2:c0:e2:ca:86:d4:
97:a0:ce:45:f4:8e:4d:bf:fc:1f:c3:2f:36:a7:c2:67:6f:d1:
6d:8a:ea:c4:4a:c3:76:39:8b:d9:8c:e3:82:25:cc:3c:e4:c6:
60:fd:cd:61:75:f7:de:f7:e4:49:c7:7b:e0:51:60:cf:f9:84:
ef:f3:b9:63:4f:24:55:76:b6:31:c9:16:4e:46:d5:35:2b:b3:
25:1f:09:38:56:08:cf:5f:5d:55:05:01:af:73:e6:39:ba:89:
93:4c:2f:ca:25:b7:4b:fb:24:b7:ff:7e:10:83:a3:7e:0d:72:
85:fb:4e:a4:e2:ac:ac:55:c8:6f:6b:3d:68:09:d5:e2:4b:af:
fc:dd:46:a5:7d:a4:56:e8:b4:1b:0d:d1:37:be:8e:28:6d:09:
96:fe:5e:4b:29:7f:59:5e:44:39:48:3e:88:fc:d3:01:1f:c3:
08:57:07:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:20:07 2026 by rpki-client