Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier: Ru9ZVtI4DuR2wPllbLPk08IdEb+rVpL/pzgzmwMjKe8=
Subject key identifier: 26:B5:49:6D:B2:CF:2A:6F:0B:B4:3F:E3:EE:36:3E:F5:A4:41:74:9B
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 01A17F989594D1FA13F64DF6466066992F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number: 1AD1
Signing time: Tue 27 Oct 2026 23:01:08 +0000
Manifest this update: Tue 27 Oct 2026 23:01:08 +0000
Manifest next update: Wed 28 Oct 2026 23:01:08 +0000
Files and hashes: 1: 1Ig-mrb2OdmpHJoyTriuFLCAFOM.roa (hash: KdPgqm5poN0MvVvBBtL672/b7UpHgyK24wQKJ709yoc=)
2: 3q5RWSGOxCn-4vQQtjRT8k1IAvA.roa (hash: MIWK18fPNJwt93Pk47XkLTue9uAHSbtiIrZzbMWjVSU=)
3: Dx0dpQ_AbPOHo68C5ZHoBOIeMpQ.roa (hash: JCGvmXb4UTtEBOFvTPRpl2liGZ4WCIfGLFxvNxNlUlQ=)
4: RnSc6gSUeDQDtCWXcClmqxy0TiY.roa (hash: +n8JNrN3miwL2GACthuyyp7bhT+soPbrQhQAhrWLdUU=)
5: UBa5jx_ljBddT4tcu2z4LiFhOrk.roa (hash: zIhepUpUWuaAk7nANePm+39a2QbrU+z3WqdtyUCFmrk=)
6: b68J68814HG70-IxOZC5l9IfQFw.roa (hash: 5V2eWlG8SHwx9mjWWlI/4oOe8kmHY5VMZdFbe9QXZ+A=)
7: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: q9QgKfNiRUk//brV1n0ExO5qI1M1mT/uHiX8sn5wP0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:95:94:d1:fa:13:f6:4d:f6:46:60:66:99:2f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Oct 27 23:01:08 2026 GMT
Not After : Oct 28 23:01:08 2026 GMT
Subject: CN=26b5496db2cf2a6f0bb43fe3ee363ef5a441749b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:af:8f:15:84:68:57:ea:cd:4e:c3:d3:a8:
e1:9b:e1:77:8e:34:cb:a4:98:c5:d8:99:fe:77:35:
6a:44:98:8f:73:a4:89:45:fe:07:de:9e:0a:1a:17:
d7:37:51:7c:c5:16:f3:2e:7c:f6:38:03:cf:e5:eb:
96:0b:dc:e8:4c:77:88:e0:a1:44:a9:7a:3d:a6:4e:
d1:8c:63:49:5f:ff:e8:96:d5:f2:4e:b1:91:f6:f4:
93:87:cb:f5:4a:58:a4:c6:b1:1f:0a:8c:31:e3:43:
3f:d8:af:11:34:27:c9:99:88:29:e7:5a:66:97:00:
1b:f1:35:72:d4:da:4c:c3:f9:3e:9a:ad:66:ce:24:
af:f3:da:1e:e7:57:25:80:ba:79:e5:d9:cd:85:4b:
33:70:83:7c:9c:81:d5:7f:b6:36:c8:1f:15:3d:3d:
ee:f4:63:5d:de:74:b6:0a:88:c2:d1:d9:da:39:16:
b6:c9:ca:8c:57:27:cd:0b:bf:67:53:eb:df:ce:66:
d0:4a:ff:d5:8a:67:c1:ec:5b:af:49:24:a4:44:7a:
eb:45:bb:8e:70:58:41:74:84:40:65:37:74:b9:60:
6f:71:8e:0c:92:56:90:19:09:ae:e8:eb:0a:f9:6a:
c7:63:b7:78:f9:72:3d:46:84:87:ee:a2:bf:31:77:
a5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B5:49:6D:B2:CF:2A:6F:0B:B4:3F:E3:EE:36:3E:F5:A4:41:74:9B
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:92:55:a8:ac:78:98:ad:35:09:41:c4:eb:a8:0a:59:b2:1c:
0b:65:e9:23:af:2c:59:14:2f:e0:3a:a6:fd:33:93:f0:63:18:
96:9d:20:c7:0c:f1:1c:a6:7d:ba:79:1a:74:05:69:74:88:9d:
45:c9:98:1a:42:35:c6:98:4a:1c:b6:d9:d0:ec:eb:15:13:87:
ca:42:58:f6:2d:15:78:4c:ba:5b:29:7c:85:9c:24:ad:12:e2:
57:af:f0:b4:5a:f7:53:08:00:a2:e6:fa:f6:d7:5a:cb:f0:e3:
71:cc:ad:3d:60:8e:fe:cb:30:07:04:3e:ba:0d:81:79:1c:19:
44:b7:99:df:99:d4:bd:8e:48:b5:49:04:10:0b:49:dc:de:b7:
70:47:7a:68:27:e1:a6:70:b0:39:15:9e:3b:99:ab:05:f5:99:
34:a4:d8:e5:0c:d7:04:d3:88:65:0a:19:59:4b:5c:7d:4e:08:
c2:59:38:a1:0a:68:76:2e:36:dc:60:79:21:83:ec:bd:88:49:
34:2f:1d:64:bc:b9:81:ce:68:b5:b2:cb:3d:16:9e:93:af:bd:
c0:ab:53:2e:f8:a7:ca:20:cf:55:c1:3f:18:9d:04:73:ff:7f:
5b:d7:0e:40:a4:06:29:04:80:33:01:a9:ca:be:ca:f5:cb:e2:
f2:22:cd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:21:13 2026 by rpki-client