Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier: 8uFdUGh6DcnfFpcGObZTlUc95eMo5898eDZkqNccLK0=
Subject key identifier: FE:54:E2:EE:5E:B6:98:BC:C0:31:27:B9:05:49:11:65:51:5E:8B:6F
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial: 01A03B95A41CBD5E5B2991BA5EF932F0A659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number: 1A25
Signing time: Wed 26 Aug 2026 01:00:57 +0000
Manifest this update: Wed 26 Aug 2026 01:00:57 +0000
Manifest next update: Thu 27 Aug 2026 01:00:57 +0000
Files and hashes: 1: FXTyPwjMGAiU5KxW_Bfbg2AROHw.roa (hash: OnE+aJgFklXNXWETHHDMbnfVlcK0uF/bBVveHl9Em7A=)
2: T3lGsdRYO3Jiv8YeumY1-URxH8k.roa (hash: 2iZU0Zg9KB5iXER8e3UtbINmEwCtWsu/Q8hRWGFKAwI=)
3: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: 7LS7qadaI1s/B1ZEtzvTSoDgrfw5IUt/vcFLoNxt5oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:95:a4:1c:bd:5e:5b:29:91:ba:5e:f9:32:f0:a6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Validity
Not Before: Aug 26 01:00:57 2026 GMT
Not After : Aug 27 01:00:57 2026 GMT
Subject: CN=fe54e2ee5eb698bcc03127b905491165515e8b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:ba:3d:c7:37:fc:83:56:88:5a:fd:55:c9:
20:25:17:18:d4:88:1b:19:f4:fd:b9:98:c4:8f:c6:
27:35:dd:09:5d:f6:78:49:8a:59:e2:f8:1b:d5:68:
6e:21:e5:ef:3c:78:d7:e7:57:98:a3:e6:34:4f:85:
f8:e8:c6:5d:1f:02:22:2b:9a:80:82:ec:71:22:a1:
97:e7:c3:2f:7d:a1:07:9d:56:11:f9:9d:c9:2a:ef:
62:34:a7:eb:f1:90:d3:23:3c:71:63:42:5e:5a:a8:
7f:a8:43:2e:fd:aa:0a:b6:bc:20:a4:cb:41:ef:7a:
b1:2d:93:1a:45:20:9e:52:6d:fa:cc:74:02:47:cd:
4f:74:4a:c8:c8:0e:9f:30:08:65:6b:ce:35:98:81:
62:fc:c4:cb:de:c5:4e:6f:bf:02:a1:da:c1:04:d6:
e7:ca:2b:0b:53:c6:b9:d1:a1:f1:e0:96:68:e1:26:
bf:ad:ae:62:9f:54:ca:c4:aa:af:7e:36:bd:f0:f6:
39:7d:4d:53:f7:5f:bc:7c:b2:28:e4:35:81:75:06:
bb:07:41:e4:64:a6:10:89:7f:4f:e4:64:b6:22:3b:
6f:45:8e:a2:c4:50:eb:88:ae:c9:cd:8c:00:d7:11:
ef:e3:f0:5b:b6:08:ca:16:5e:74:d4:6d:9c:38:fe:
65:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:54:E2:EE:5E:B6:98:BC:C0:31:27:B9:05:49:11:65:51:5E:8B:6F
X509v3 Authority Key Identifier:
keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a9:ae:88:75:ee:b4:98:ba:14:8c:6a:b2:d2:f8:ed:c2:93:
8d:20:00:e2:9b:42:63:f1:cf:d0:63:ad:40:b4:e0:f6:51:2a:
3f:b2:79:b2:d1:e3:65:56:71:d4:42:40:93:77:19:fa:e5:5f:
9a:b7:66:cc:2e:00:14:03:c7:c6:c8:45:90:71:32:95:91:45:
10:db:73:49:63:b5:f1:ef:12:33:1d:2e:26:43:02:a2:b7:f5:
94:a7:6d:60:8e:b8:d2:7e:eb:9a:4a:9b:9f:4d:5d:55:6c:f0:
96:05:82:60:61:53:27:e3:3c:4e:c7:b2:ed:9a:a7:46:37:73:
db:0b:64:eb:ac:84:03:3b:00:a7:1f:79:04:1a:5d:21:5b:c7:
a1:e2:27:f9:2c:22:15:dd:be:97:a3:d4:e6:2c:b8:ee:f9:7f:
de:ee:a3:50:2d:0a:30:c0:e6:77:57:3a:72:a0:ba:ec:16:2c:
0c:5b:03:8b:ca:56:4d:84:3d:59:f8:d4:6e:76:72:92:77:be:
45:fb:2a:34:fb:5f:cd:0d:06:f6:f0:4f:00:23:96:2c:65:74:
81:5f:7b:c2:79:6f:ce:b2:ce:1a:6b:f9:2b:0b:9a:27:b9:c5:
11:9c:de:78:d7:e4:97:b2:6b:3c:bd:a0:0e:7f:26:f9:e3:9d:
17:57:69:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 09:47:15 2026 by rpki-client