Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier: 0z7k2zGz341JuLk1AdPS+iKYpdgEsd/O8+akhYNSYEE=
Subject key identifier: B3:CF:A6:4A:F4:3C:78:6E:C6:E4:E1:52:3C:43:1B:E3:D9:33:DF:9F
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 01A1483C7A16AE7D7D7052C64408345298F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number: 09E8
Signing time: Sat 17 Oct 2026 05:01:25 +0000
Manifest this update: Sat 17 Oct 2026 05:01:25 +0000
Manifest next update: Sun 18 Oct 2026 05:01:25 +0000
Files and hashes: 1: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: TijCHZan5mSEUGMXuAAIqp3S5ihOek32Mp7KwoEAOZY=)
2: yPfyngOSudI1ySWIfQxdWtyiNIs.roa (hash: 5dFd12MxUEVgWmbdpshfSJRZnDjbazIniCXkVZMmEDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:3c:7a:16:ae:7d:7d:70:52:c6:44:08:34:52:98:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: Oct 17 05:01:25 2026 GMT
Not After : Oct 18 05:01:25 2026 GMT
Subject: CN=b3cfa64af43c786ec6e4e1523c431be3d933df9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:93:39:24:37:29:cc:01:53:5b:15:a2:bd:14:
52:15:78:ac:09:7f:dc:51:1f:90:45:e6:60:d0:6e:
b6:c1:9c:0e:86:5a:3f:b1:75:ec:11:ff:1f:72:fd:
82:69:dc:e1:0b:1f:c6:fa:31:08:f1:50:ee:8a:1d:
e6:5d:7b:2a:b6:89:d5:cb:6a:45:e3:75:ab:60:28:
bc:b8:2a:5d:1d:d1:e6:a2:ce:8b:e1:9f:26:3e:a0:
9c:9a:e9:40:45:41:fd:2f:c7:95:69:94:94:c5:1f:
d4:39:bc:58:5d:65:f0:16:a7:89:70:80:41:b6:0d:
65:95:e1:92:80:2b:f7:a1:b6:b7:84:87:e6:7c:18:
5f:f8:98:dc:ba:e4:c3:34:d1:fc:80:78:7d:fa:06:
7f:ee:de:c3:4e:7e:8b:f2:af:fa:d9:dc:ea:4c:fe:
96:ea:12:fd:86:96:d9:9e:70:bd:7f:78:c1:b4:55:
21:9b:10:65:ac:17:2f:a8:01:7a:49:6e:56:e8:51:
fe:66:13:d8:d8:df:3d:0a:3a:31:bd:90:1f:c2:81:
1a:58:01:88:7a:9c:45:64:b6:bd:be:49:af:b9:66:
19:e9:0d:ea:42:75:0b:4e:d2:37:ff:bd:a4:2a:e9:
7e:5a:63:d5:c1:d4:c3:7d:eb:41:bf:83:77:dc:6e:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CF:A6:4A:F4:3C:78:6E:C6:E4:E1:52:3C:43:1B:E3:D9:33:DF:9F
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:34:5d:2d:c3:5d:d8:51:cd:88:13:b4:a6:f1:d9:c8:e2:34:
af:47:44:53:f7:15:d3:5a:46:46:6d:e7:6b:de:ad:66:78:c3:
0c:c8:1c:59:ee:62:a7:93:22:0b:80:35:5c:47:70:95:b6:c5:
d2:e5:df:0d:a5:92:36:07:55:47:44:b4:d7:8e:63:48:cd:e8:
ad:f9:34:09:c9:71:8b:e2:38:64:d9:c8:41:ce:64:c4:3c:f6:
9f:ee:ee:68:b7:50:cb:1b:1a:cb:1a:dc:85:d3:86:d7:17:4f:
1f:fa:b5:b3:04:25:89:e8:b7:ae:42:4a:b4:4d:d0:f2:60:32:
05:d3:0c:2b:82:17:a4:55:2c:b1:81:22:e1:b5:21:99:45:44:
7b:b4:7e:9f:83:ef:e5:4a:82:c4:da:82:7e:32:d0:dc:32:e7:
f8:31:fd:9f:ac:00:80:1c:a2:d3:99:d3:c9:f1:b4:de:d8:d0:
c5:72:ee:3e:c1:8c:4f:7c:38:fc:2e:e9:7b:fa:b7:61:5a:97:
84:2c:57:99:f1:b5:f7:9e:3d:84:17:04:33:a4:81:70:b5:e8:
2c:bd:22:0c:6e:69:d5:03:17:61:f9:75:7e:b2:f5:9d:ae:78:
f2:da:e2:2e:3a:29:c0:5f:c6:e4:fe:67:a2:49:2c:01:d1:bc:
f6:d6:05:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:51:13 2026 by rpki-client