Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: pEdx5FZLD/zuYapFlt2JvVQaa1eThFdc91oPFNfS2wc=
Subject key identifier: 62:5A:C8:3B:A8:A1:4A:41:B2:F4:41:8F:45:4D:A6:D1:0E:36:19:90
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 01A08DC471A746C3DB3FE18414E0722E96C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 0D78
Signing time: Fri 11 Sep 2026 00:00:56 +0000
Manifest this update: Fri 11 Sep 2026 00:00:56 +0000
Manifest next update: Sat 12 Sep 2026 00:00:56 +0000
Files and hashes: 1: Hi_yIbXB_AqEZvECw_6A2niKbbY.roa (hash: V9KwW6TEefSi+Nbg4IOw24z7gPz8KPWyVOeCLVyS3EY=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: GDR0ukfITZm42XqdaTASAZDpl/h03VivnY5XPR6Qzgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:71:a7:46:c3:db:3f:e1:84:14:e0:72:2e:96:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Sep 11 00:00:56 2026 GMT
Not After : Sep 12 00:00:56 2026 GMT
Subject: CN=625ac83ba8a14a41b2f4418f454da6d10e361990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:10:44:54:9a:39:03:e5:3b:af:37:8e:6f:
93:b5:f1:e6:7f:6a:13:26:c4:8d:c8:02:80:d2:24:
8f:48:02:80:fa:5f:71:65:cf:aa:72:9e:7f:56:ac:
d9:c5:9c:32:c3:8c:a3:6d:f5:ce:75:77:90:ec:fb:
30:90:88:4c:79:ac:7a:24:18:c9:34:77:e0:a5:08:
00:6f:ee:c3:00:2e:b7:0f:13:89:c0:1b:5e:70:58:
2a:3a:80:07:87:8b:bc:15:ad:de:1a:2c:09:7c:96:
dc:52:c3:90:d1:76:d2:38:59:47:19:73:47:2c:3b:
4a:6c:94:21:1c:60:b8:5d:a6:87:56:9f:75:6a:30:
43:88:db:eb:da:0f:7c:b3:dc:a5:e4:f6:c5:fd:ca:
e9:21:d9:0f:f9:0d:ee:c9:4c:8e:81:85:24:aa:e7:
e4:d0:27:bd:1b:f4:b6:59:0a:22:54:df:05:4d:65:
9f:22:1f:7b:e6:7d:7e:76:59:1b:a6:56:59:74:5d:
83:be:0c:18:3a:4d:c4:0f:5a:57:d7:55:94:b2:12:
86:1c:70:62:4c:7a:6f:49:c9:b9:df:e2:06:d5:48:
68:68:10:fc:a8:64:f4:db:16:e3:fa:87:9f:3d:85:
57:94:d8:ee:8a:c8:40:ca:ee:95:f1:47:2a:5b:f9:
a2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5A:C8:3B:A8:A1:4A:41:B2:F4:41:8F:45:4D:A6:D1:0E:36:19:90
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2a:d6:ff:30:ff:02:bf:73:97:97:2d:c9:a2:6a:27:93:17:
20:c3:fd:2b:29:b8:2d:6b:42:2b:9b:02:35:cd:14:98:7d:dd:
27:ae:aa:28:00:db:2d:84:7c:84:7b:b3:7b:11:68:8b:33:00:
98:f6:e1:b6:52:30:bd:f5:4b:94:f6:24:51:6a:37:8d:54:54:
2c:aa:80:df:e2:aa:dd:04:55:1e:a0:d8:3f:51:3e:31:94:eb:
82:0d:35:fe:ff:18:df:a4:db:3c:51:b8:54:cf:86:01:95:78:
ef:2a:53:e2:f4:d3:be:7a:1c:ab:35:7e:ac:6c:68:fd:91:aa:
49:e9:7a:26:ad:90:8e:86:e6:19:3e:82:89:dd:8a:88:0a:12:
be:e8:2b:9b:6b:2b:5e:f3:22:3e:a4:72:25:c0:14:7f:57:91:
b5:75:37:a0:10:5f:8c:58:bc:34:d4:c3:cd:44:f0:9b:d4:02:
92:c9:b0:dd:bf:dd:ac:cb:d2:b9:be:6c:d8:bc:67:9c:78:2e:
06:0e:d1:5f:37:4c:0c:46:66:f8:ed:59:d0:13:21:ee:5e:f8:
82:e5:c6:35:b0:cb:6a:45:a9:d9:85:68:49:8c:2a:32:4b:c8:
2e:eb:fa:7d:f6:0b:0c:26:0f:34:11:ec:0c:cc:1b:d5:80:ea:
84:e5:13:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:51:57 2026 by rpki-client