Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier: hk3KW+NHcQu0p+M5VA8nSZNaK0mTMBYkIVExmZdBVBM=
Subject key identifier: B2:F2:ED:BA:82:65:9C:DE:03:E3:83:DF:01:F6:50:62:69:77:A1:48
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 01A08FEA59CD078A3AD5A2E79E479C5B9062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number: 1A54
Signing time: Fri 11 Sep 2026 10:01:35 +0000
Manifest this update: Fri 11 Sep 2026 10:01:35 +0000
Manifest next update: Sat 12 Sep 2026 10:01:35 +0000
Files and hashes: 1: 3q5RWSGOxCn-4vQQtjRT8k1IAvA.roa (hash: MIWK18fPNJwt93Pk47XkLTue9uAHSbtiIrZzbMWjVSU=)
2: D7FIPfz-CzdgoxC2ZfO03Afc5XA.roa (hash: ez1YIU6Tx3muI0r5J6f9+6WO/D4t4YugqUqFYhktxYk=)
3: Dx0dpQ_AbPOHo68C5ZHoBOIeMpQ.roa (hash: JCGvmXb4UTtEBOFvTPRpl2liGZ4WCIfGLFxvNxNlUlQ=)
4: RnSc6gSUeDQDtCWXcClmqxy0TiY.roa (hash: +n8JNrN3miwL2GACthuyyp7bhT+soPbrQhQAhrWLdUU=)
5: UBa5jx_ljBddT4tcu2z4LiFhOrk.roa (hash: zIhepUpUWuaAk7nANePm+39a2QbrU+z3WqdtyUCFmrk=)
6: b68J68814HG70-IxOZC5l9IfQFw.roa (hash: 5V2eWlG8SHwx9mjWWlI/4oOe8kmHY5VMZdFbe9QXZ+A=)
7: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: CkwaKdRFl1mB5So5fPPYpEfE9aif7VZRe9yPYjWYJpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:ea:59:cd:07:8a:3a:d5:a2:e7:9e:47:9c:5b:90:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Sep 11 10:01:35 2026 GMT
Not After : Sep 12 10:01:35 2026 GMT
Subject: CN=b2f2edba82659cde03e383df01f650626977a148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:af:af:7f:11:2a:f5:d3:b5:f4:54:27:6a:
e3:df:a8:4f:8e:bb:ec:90:ea:0a:4a:58:23:5e:57:
a8:47:4f:c3:ba:e3:40:3d:ee:9f:0d:cb:38:89:c1:
82:a5:ea:e4:60:57:f9:3c:7e:c9:52:ba:44:0a:f6:
31:e0:65:f9:70:ae:33:1f:cb:c2:0b:17:ff:d1:03:
6b:a5:2e:e9:a5:0a:bb:39:30:d2:5f:47:bf:a3:83:
83:02:4b:ce:8e:ed:05:21:cb:84:f1:c7:b7:e3:63:
5d:de:a8:52:97:0a:2c:f0:cd:45:ce:46:27:7a:83:
8d:60:47:8c:14:af:6b:62:dc:42:8e:9b:2e:df:20:
e3:34:4d:1a:8e:75:93:48:40:8d:49:28:e2:f5:b8:
33:7c:f9:fd:16:c2:36:b9:b1:3c:80:02:86:df:74:
83:67:c5:3e:c0:98:33:01:fc:9f:01:06:6b:62:8d:
d5:79:2b:e6:c4:ef:91:86:8d:51:9f:0e:45:f4:91:
7f:f3:fc:e8:a0:2e:7d:55:bd:f7:a3:02:96:10:19:
d1:3d:99:c1:58:3e:da:91:df:5e:3a:a1:f2:e6:aa:
80:12:fa:69:8c:41:23:b2:18:57:fc:f9:b5:7b:ca:
62:54:99:d2:05:e7:6d:8b:10:c2:95:ae:63:6c:7d:
0d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F2:ED:BA:82:65:9C:DE:03:E3:83:DF:01:F6:50:62:69:77:A1:48
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:55:ac:d1:cc:c0:9d:27:fc:37:d7:23:82:88:5a:86:f3:14:
fe:0c:a6:09:6f:dd:4c:5b:a4:6c:78:97:6f:9f:0c:f1:b3:cf:
af:31:82:bf:5a:74:01:79:77:d0:f8:0c:f3:78:60:75:78:49:
ec:c7:bb:f0:08:3c:61:24:5b:12:60:ce:fc:d7:ef:fb:86:97:
ec:65:70:c2:6f:af:10:2b:80:26:23:ae:76:2e:a0:24:14:86:
25:17:b5:31:f2:78:d9:c6:2d:5e:bf:60:54:d5:09:38:9c:7a:
5d:10:42:57:0a:39:ba:9e:d3:35:e6:1d:e4:89:06:9a:51:0b:
9b:1a:26:1e:45:7d:67:c3:4e:3b:e7:59:b8:ad:22:da:a1:8b:
c3:6c:65:b6:fa:1d:a0:84:78:c1:6c:c4:eb:6a:10:e6:7f:ea:
5d:ba:ad:a9:c5:61:ee:4a:65:91:fb:79:1c:04:2f:fc:ea:ee:
8e:9b:c5:08:49:a5:a3:f1:16:a2:18:ff:9c:df:f3:c1:72:08:
64:27:5b:28:ab:f4:52:19:10:99:7a:13:3e:3a:fc:6a:49:99:
c9:c2:a5:4b:e3:3e:77:c6:b8:2b:55:73:6d:35:30:18:aa:87:
ba:dd:9c:f4:50:e8:04:49:08:c7:80:a5:9e:f0:74:f4:2e:d9:
27:5b:5d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:29:43 2026 by rpki-client