Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
File: xhMz0OgQeIbQMFx72BvdNUiVJ64.mft (raw, json)
Hash identifier: O2Gg9HXlgY6JOgcxwCavyzKA9ooZkmfrauxS5uoaqgU=
Subject key identifier: F2:6E:AF:24:DB:D4:01:80:DF:E3:11:E3:90:4A:A2:60:B2:7D:51:2C
Authority key identifier: C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
Certificate issuer: /CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Certificate serial: 01A110A8B8CDDE011A483658FA6A43089D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
Manifest number: 1A8E
Signing time: Tue 06 Oct 2026 10:00:55 +0000
Manifest this update: Tue 06 Oct 2026 10:00:55 +0000
Manifest next update: Wed 07 Oct 2026 10:00:55 +0000
Files and hashes: 1: 5ie9J9ix6eo_LjO_d-h0wTlK5sY.roa (hash: hY4eQy4LzjSe1EFCcdEhDwEocsy77V2cxczGFy9ZGiM=)
2: D0Omi7eTzuK_0HEfZBlA62fHv-s.roa (hash: 0MjChUFTQrOrybRBrDN8jiZf3suuubHFJss7LSX+W2A=)
3: xhMz0OgQeIbQMFx72BvdNUiVJ64.crl (hash: 5GJTochC0UaP9scSkwlV3JDGXlEaUKz3Wq3S7nG9Ttk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a8:b8:cd:de:01:1a:48:36:58:fa:6a:43:08:9d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Validity
Not Before: Oct 6 10:00:55 2026 GMT
Not After : Oct 7 10:00:55 2026 GMT
Subject: CN=f26eaf24dbd40180dfe311e3904aa260b27d512c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:38:dd:42:f0:3f:06:a5:bb:2d:ea:43:0b:30:
f3:3c:af:5c:e0:d6:8f:d3:27:ba:d5:32:1e:c1:03:
48:9e:77:02:58:e3:57:f3:af:09:07:09:3e:15:a6:
b2:31:4c:f3:e6:0b:ac:7e:8b:a9:5a:ea:11:a8:f9:
38:16:a7:2b:84:23:28:6f:93:7d:c2:31:a2:57:25:
0f:21:dc:ff:0f:4a:13:3a:6a:42:df:af:82:6e:1c:
2c:b3:9f:e1:d2:a0:92:4b:22:be:06:98:78:72:1d:
93:b0:90:38:14:8d:68:dc:e0:d9:f9:92:dc:bc:ef:
38:b0:6e:25:a8:5f:c0:3c:c6:d2:3e:b3:24:16:3a:
cb:ce:23:ff:f9:b8:04:cd:cd:e1:56:9f:3f:c0:19:
8e:ef:40:1b:ce:2a:a2:95:c1:36:09:aa:bc:fd:e3:
f0:89:50:bd:0b:e7:8b:23:e3:d8:13:4a:bd:51:93:
46:73:5a:86:aa:7b:db:20:80:f3:57:39:0c:45:13:
90:51:48:73:02:1e:86:46:d6:c3:54:d7:44:c5:b4:
a6:a9:8e:cf:61:ad:42:3d:0c:6a:1b:41:e6:ad:84:
71:e4:87:8e:ea:56:9b:d9:48:2b:62:d6:44:f4:03:
6d:b7:eb:4d:54:bb:71:23:45:04:34:a5:3a:a9:8d:
1e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6E:AF:24:DB:D4:01:80:DF:E3:11:E3:90:4A:A2:60:B2:7D:51:2C
X509v3 Authority Key Identifier:
keyid:C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b9:ef:cd:b3:1c:34:c1:9f:d7:c9:e8:3a:6f:d6:da:72:a9:
f3:eb:d5:4f:2b:21:4f:93:53:98:72:c4:75:b0:75:15:b4:f7:
76:a7:27:bc:cb:35:7a:06:7b:0a:3d:94:af:03:b6:5c:7e:93:
ed:a5:0b:63:a1:2d:fb:a5:06:07:64:a2:43:8a:c4:a8:a0:21:
2d:24:e6:4a:86:a6:00:82:a6:52:64:64:2e:92:14:26:0e:20:
ef:99:d4:f8:3d:2a:82:d6:52:ca:c0:dc:a4:0e:d1:46:44:f6:
d2:67:65:be:a4:69:8a:0c:ee:f0:61:03:92:3c:54:45:6e:3e:
7d:04:98:05:44:ad:c6:3e:cf:89:9b:7f:de:6b:2e:e3:3c:04:
a9:74:da:88:82:ba:3f:cd:ad:fa:3c:ec:df:bc:59:a0:72:ff:
c5:1a:8e:28:bd:8b:87:57:93:3d:e3:fd:2d:da:ee:57:17:53:
66:1d:ae:44:73:f8:bb:e1:8a:4d:63:64:44:7d:13:c7:1b:f6:
28:0a:86:a5:04:5f:b8:18:3b:1f:d1:b8:37:82:a8:06:62:ab:
2c:ee:4d:ad:4d:b0:f6:23:cc:47:e0:04:41:3d:7b:17:a7:34:
4e:d9:08:b9:22:7d:4c:86:9b:57:b2:53:d8:4b:71:d7:c9:f3:
6e:a8:00:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:48:21 2026 by rpki-client