Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: Y4yaNVewmK/KrrqGk2eNPFC4NQW7a6C5ja+Z0S4qaR8=
Subject key identifier: 20:FB:C6:2B:43:93:58:52:5E:D3:E2:7F:7B:1D:43:8B:D8:4C:82:2B
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 01A08FE95FDDA30D06A7FA73D7BABF31AF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 0765
Signing time: Fri 11 Sep 2026 10:00:31 +0000
Manifest this update: Fri 11 Sep 2026 10:00:31 +0000
Manifest next update: Sat 12 Sep 2026 10:00:31 +0000
Files and hashes: 1: tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa (hash: 3SzovpialpEoSK1tVIj0K+EFB6CyFsxOHbtKDkoQSb8=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: sP7lM5C0s8Yvo/PKul2Jo0RPQYV3OBQTmAkFNjll29g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:e9:5f:dd:a3:0d:06:a7:fa:73:d7:ba:bf:31:af:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: Sep 11 10:00:31 2026 GMT
Not After : Sep 12 10:00:31 2026 GMT
Subject: CN=20fbc62b439358525ed3e27f7b1d438bd84c822b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:50:17:04:0a:c4:f2:02:1f:f6:e9:c7:77:
f7:d3:3c:25:44:24:64:53:28:d6:b5:03:d1:b8:71:
a7:3e:88:03:ea:85:41:bd:ad:89:f6:5e:c6:5b:2c:
c9:14:37:a2:1c:45:f6:75:59:ba:ff:59:59:00:6e:
5e:be:90:9e:a0:2d:42:fe:33:53:88:50:df:dd:69:
a2:29:7c:51:f6:45:f3:54:c1:f9:64:b5:95:83:9e:
ba:17:2b:af:51:39:bb:db:35:e4:35:48:a0:c7:e1:
d6:79:9c:44:f2:c0:21:65:b0:e8:97:ca:34:78:0f:
a2:10:af:92:d6:d6:f7:9a:71:d6:52:ca:73:29:3e:
c9:d8:94:1a:6e:94:ce:ad:5b:95:94:fc:9f:8c:b9:
ee:b2:89:8b:02:60:6f:55:92:5b:ca:70:26:9e:42:
87:93:ff:ed:6e:ac:b9:1b:4d:cd:58:3f:ff:45:ce:
e0:7d:5e:28:5c:a1:c9:5a:be:aa:60:24:ac:e5:ad:
17:60:32:23:91:a4:1a:1d:5d:1d:54:66:6d:ba:e3:
fb:39:f7:23:cc:cf:f4:df:32:c2:e2:25:25:48:7e:
58:87:42:53:93:0b:4b:9d:8a:44:c4:4c:37:7c:8b:
7b:bd:75:89:7d:a9:3e:60:7d:cd:bc:78:a7:e8:1e:
6a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FB:C6:2B:43:93:58:52:5E:D3:E2:7F:7B:1D:43:8B:D8:4C:82:2B
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:31:a9:4f:0b:bc:41:32:8f:ee:6c:cf:1c:34:0d:72:da:3d:
c0:54:b0:eb:67:cf:4c:80:93:33:76:f2:4e:33:cf:b1:a2:da:
08:31:13:87:88:6d:91:2b:d2:6b:3b:48:52:d8:b0:89:4c:c5:
de:48:bc:f3:b3:50:26:4d:4a:19:09:97:22:da:f8:e8:48:03:
f4:2e:de:a8:33:82:72:8e:bd:b2:7e:65:6f:af:3f:b5:8f:78:
92:85:c4:16:f3:5b:b5:f8:d2:31:e4:96:1d:08:2c:31:57:2f:
8a:0e:a3:c5:91:a0:de:1a:66:05:38:34:1c:36:59:99:6f:48:
58:4a:ed:a7:7d:10:07:57:28:8d:07:99:98:fb:20:54:27:ae:
8c:10:21:1b:54:53:e6:fc:88:0c:7b:77:5d:e0:2d:b6:cd:8f:
65:0a:ba:ad:fc:70:b8:0d:39:c0:f6:66:0c:d0:e5:37:d1:0d:
41:75:5f:3c:2d:14:9e:d1:d6:23:81:9f:27:df:b6:ee:4b:bc:
eb:60:4c:d8:5b:e4:c0:e2:e1:c0:da:57:a4:db:c4:88:91:cf:
bf:68:d7:28:3a:c9:bf:05:a8:88:71:d4:19:81:23:b9:ba:37:
61:bc:af:cd:f3:b2:02:69:50:17:d8:87:59:e8:68:11:58:09:
21:c1:d8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:02:48 2026 by rpki-client