Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File: xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier: 0+QiK2gWdgVU2sHVd4255g7sVH/88nz0sc9cYZ/ybYM=
Subject key identifier: E9:3E:33:59:A6:33:F3:DB:86:A1:9C:9A:C1:E3:61:D6:79:43:5A:55
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 01A17A043DE8C8A066248D130BED58A77766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number: 1AE4
Signing time: Mon 26 Oct 2026 21:01:00 +0000
Manifest this update: Mon 26 Oct 2026 21:01:00 +0000
Manifest next update: Tue 27 Oct 2026 21:01:00 +0000
Files and hashes: 1: EvezJV6Vs9jqKeUbJVzpq1KiVDU.roa (hash: 2svyQKGgqn/3aPQxfvJ2sTwJRY+qNPgcGyhkMpZSELI=)
2: NCLucTkvi3guFUx3Unodz7qu3f8.roa (hash: XS6lokDQlSUVgmf31X4rX8+KGasUvIdfEySA8Treukc=)
3: _wgviRVG1K_5o-U9fJ7o7ZJk_RE.roa (hash: 8X8kwr6+94gamc2uAWENoz4y3O77vpqIsVr/rcSuqCo=)
4: ezXML66PH_53DvtrZpee7wJgcq8.roa (hash: 8PYXc5RxO1awIA2fhoLa9kTXnH71YLw1uLcJ1CNtRqs=)
5: h5hIPsJLhskffy-sowI0XWx6XlE.roa (hash: SZZgcDO6xitZpi8SqVoNBovZysldQ3yiUtrtfkP4Ct8=)
6: tqRuH8AtUL10GIVamWVHWz8fxNg.roa (hash: RZkT6lVI+WQmmrPn0pAsOsM6VyHGnWPmG3xanKfDovc=)
7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: XCiilpshl4Hmj1n1R4ZhqCQNzb1bnEVHHPIUdSwojuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:3d:e8:c8:a0:66:24:8d:13:0b:ed:58:a7:77:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Oct 26 21:01:00 2026 GMT
Not After : Oct 27 21:01:00 2026 GMT
Subject: CN=e93e3359a633f3db86a19c9ac1e361d679435a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:e3:63:46:76:ed:bf:00:c2:99:ad:27:e8:
60:c9:fe:88:ec:f6:dd:d1:34:f5:bd:49:9e:84:ca:
69:ed:fb:74:21:a2:d3:e7:9a:3f:15:4e:70:5e:c2:
01:28:5c:7c:c3:53:a8:c8:af:11:03:e7:32:03:08:
4a:ab:d5:a0:60:b3:d2:70:d9:64:9b:fc:bb:da:a4:
9d:18:fc:ac:45:49:b1:ef:45:4b:ad:5a:83:4a:e1:
fe:86:14:74:63:49:ce:3c:4b:21:b5:bf:72:e0:f0:
40:99:ba:34:51:74:95:f3:7f:78:17:cb:c3:d7:0f:
4e:6e:a7:44:97:25:2e:58:4d:aa:ea:f1:6b:1e:7c:
a7:47:d6:ba:2e:69:05:35:61:4a:c9:5e:89:22:e3:
4a:02:2f:2c:6d:3e:f4:09:86:32:eb:b9:af:2e:a8:
0a:42:67:97:b2:ba:a7:c6:bb:88:cb:d9:3d:de:1a:
ef:77:b2:b2:42:36:3e:5d:5f:f2:f4:74:44:72:4b:
44:e5:07:e9:fe:15:a7:88:18:2b:af:06:85:a1:c5:
49:01:8d:ab:26:ed:80:88:75:1c:14:38:c9:b0:2f:
bc:02:ef:53:f1:6b:21:9d:13:8e:d6:7d:2c:92:88:
9e:7a:1f:93:20:60:a5:d1:c7:d4:17:38:b6:0b:16:
d6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3E:33:59:A6:33:F3:DB:86:A1:9C:9A:C1:E3:61:D6:79:43:5A:55
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:73:30:ce:f9:25:2d:90:38:bc:3c:08:15:f2:ee:f8:39:bb:
f4:3b:80:92:dc:0f:d4:bc:e1:7c:cb:fb:fa:e6:1d:d3:ab:3f:
6b:c4:bd:9a:dd:95:63:1c:65:41:46:1c:2a:42:14:77:cf:d6:
b7:8a:b1:e1:f0:a5:cf:f0:9d:e2:fa:e9:1a:2b:52:13:f1:e0:
fe:34:30:a0:ae:10:60:fb:17:04:b8:d2:5a:ac:17:bd:90:1c:
a0:20:79:74:9a:60:a9:63:94:c9:1f:84:ac:4c:1e:71:35:2b:
24:e4:ea:5d:76:ec:19:90:26:08:f9:e4:63:3d:1f:5e:f9:89:
00:a5:2e:30:36:6d:c9:4a:8e:5f:c2:8f:33:06:fa:26:ce:f3:
e5:ec:75:29:bb:4f:fc:6b:6a:67:2b:af:6c:55:54:31:3a:bb:
c7:03:a6:e6:77:4f:ab:b8:6e:f3:fb:60:54:5c:8e:e2:96:c7:
54:2f:92:4f:2c:68:94:61:59:57:09:f7:11:a7:f1:df:18:22:
57:2d:80:01:88:df:88:e6:ed:b3:2f:8b:96:82:3a:cd:62:0c:
61:da:f2:9c:47:fd:79:1a:21:6f:88:2a:f4:c3:f3:37:a5:8e:
95:c8:76:7a:d6:de:47:99:ab:df:c0:ef:44:75:27:1b:fc:22:
93:44:36:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:01:33 2026 by rpki-client