Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
File: xtGGU_v7b9VzLclAwdZdd6sLv6M.mft (raw, json)
Hash identifier: RK7gFOeQCC2hlX5nI0QG5bWRp5+2ZqqWjrmmW9i6or8=
Subject key identifier: A4:A9:55:3F:6B:4D:94:1A:0B:CA:35:95:EA:01:E7:CC:FA:20:3E:F4
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 01A1521ADD91F9930FF36D6063D0A2A232A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
Manifest number: 1AB7
Signing time: Mon 19 Oct 2026 03:00:54 +0000
Manifest this update: Mon 19 Oct 2026 03:00:54 +0000
Manifest next update: Tue 20 Oct 2026 03:00:54 +0000
Files and hashes: 1: 97KVldYgGhap-PIhxg4UP_8vQl4.roa (hash: MPC6osU/B0Fn0OYT9dmGK1jI/9UDaNR5q8EKjxqQPPU=)
2: WhU2FG_YfuoZ_VZTcnjmU40srVQ.roa (hash: BAnkjbBy2V49PU0APqtNgpwG/H/bwZfoszvGgpJtLbI=)
3: xtGGU_v7b9VzLclAwdZdd6sLv6M.crl (hash: us04I+FSXswhHurkf3ZQ2f/9Qt/cGLNvLqYkB0/9m70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:1a:dd:91:f9:93:0f:f3:6d:60:63:d0:a2:a2:32:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Oct 19 03:00:54 2026 GMT
Not After : Oct 20 03:00:54 2026 GMT
Subject: CN=a4a9553f6b4d941a0bca3595ea01e7ccfa203ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:c7:93:b8:80:54:ab:2f:66:3a:05:a4:f1:
d0:5b:08:fc:9d:82:d1:38:41:96:ce:7a:b6:3c:b3:
2c:86:5c:02:45:41:db:31:6b:2e:eb:a4:ae:6e:80:
a3:64:83:63:24:9b:3a:c3:50:2a:f4:79:ff:ef:92:
7d:e3:8f:be:77:30:72:7b:04:3f:ab:9f:7d:47:36:
e0:f2:64:a3:1f:44:9b:0f:60:b2:33:0b:de:b8:cf:
53:d7:e9:db:23:7a:b4:db:a4:d3:dd:4c:fb:ca:d5:
b2:48:37:a6:0b:96:4e:b2:b8:4c:b9:cb:21:da:89:
16:be:84:13:5e:2b:59:27:5c:5d:5b:81:95:e2:88:
31:04:08:1c:a9:92:0a:3b:87:ab:cb:50:73:15:74:
26:6d:2f:2b:55:71:2f:b6:c4:c5:fd:c5:8b:58:f9:
5d:8a:87:67:4c:b6:d7:ce:7b:63:34:f5:c8:50:31:
48:5c:97:58:a8:19:e4:cb:07:51:a6:dd:4b:a4:14:
e3:23:47:35:12:dd:93:fa:c0:35:59:41:2d:8f:14:
83:71:53:be:70:40:06:8a:a8:75:fb:27:8f:be:21:
50:b3:dc:56:21:b1:61:a7:31:0c:c7:ff:e9:8e:b2:
02:0b:b4:94:96:82:5b:a2:18:c0:16:7c:15:68:fc:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A9:55:3F:6B:4D:94:1A:0B:CA:35:95:EA:01:E7:CC:FA:20:3E:F4
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:15:ba:5c:fa:31:32:9e:fc:3e:61:5a:cb:33:22:d0:1a:78:
5b:77:63:73:67:98:0a:3e:d0:01:c3:8b:51:c1:2e:25:e3:1f:
74:89:2a:6d:bb:bf:58:d9:1b:7e:3c:79:a8:41:1c:4d:78:99:
61:16:78:ff:d2:bf:71:a7:24:4c:7a:f4:15:fc:f7:d9:5d:7b:
27:70:0f:60:92:a9:6f:95:e4:d9:00:d0:7c:b0:71:47:3d:76:
e3:62:82:64:f5:85:6a:eb:56:f5:7d:7c:f7:63:d8:8b:94:be:
d8:c1:44:d5:76:d6:b3:d9:87:bf:c6:51:14:f8:45:c7:ae:36:
ec:b8:2d:77:80:a9:ed:89:18:23:e3:af:4f:e2:74:91:7b:1e:
05:3e:ee:da:e8:44:70:5f:6e:68:0b:24:21:51:c5:31:db:09:
09:d2:77:db:fc:8a:11:5b:42:fa:9c:15:b7:11:3e:ad:3e:9e:
8b:7b:a5:6e:5a:25:a7:d2:b1:d3:b5:43:8d:78:78:56:cf:00:
b5:fb:69:69:b5:d9:90:2f:85:31:3d:43:11:5f:fb:79:8d:9f:
32:42:ca:5e:1b:07:fe:0e:bb:7f:92:e5:cb:8e:57:0c:00:de:
47:64:f8:ec:db:c3:97:8b:2c:38:b4:4d:68:9a:4f:41:53:08:
fd:c6:e6:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFSGt2R+ZMP821gY9CiojKhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZDE4NjUzZmJmYjZmZDU3MzJkYzk0MGMxZDY1ZDc3YWIw
YmJmYTMwHhcNMjYxMDE5MDMwMDU0WhcNMjYxMDIwMDMwMDU0WjAzMTEwLwYDVQQD
EyhhNGE5NTUzZjZiNGQ5NDFhMGJjYTM1OTVlYTAxZTdjY2ZhMjAzZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu7Hk7iAVKsvZjoFpPHQWwj8nYLR
OEGWznq2PLMshlwCRUHbMWsu66SuboCjZINjJJs6w1Aq9Hn/75J944++dzByewQ/
q599Rzbg8mSjH0SbD2CyMwveuM9T1+nbI3q026TT3Uz7ytWySDemC5ZOsrhMucsh
2okWvoQTXitZJ1xdW4GV4ogxBAgcqZIKO4ery1BzFXQmbS8rVXEvtsTF/cWLWPld
iodnTLbXzntjNPXIUDFIXJdYqBnkywdRpt1LpBTjI0c1Et2T+sA1WUEtjxSDcVO+
cEAGiqh1+yePviFQs9xWIbFhpzEMx//pjrICC7SUloJbohjAFnwVaPxzSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSpVT9rTZQaC8o1leoB58z6ID70MB8GA1UdIwQY
MBaAFMbRhlP7+2/Vcy3JQMHWXXerC7+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHRHR1VfdjdiOVZ6TGNsQXdkWmRkNnNMdjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZDY5NDMtY2E3NS00MzcyLWI3N2Yt
NWM2NTAyYmZmYTFmLzEveHRHR1VfdjdiOVZ6TGNsQXdkWmRkNnNMdjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84ZDY5NDMtY2E3NS00MzcyLWI3N2YtNWM2NTAyYmZmYTFm
LzEveHRHR1VfdjdiOVZ6TGNsQXdkWmRkNnNMdjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRW6XPox
Mp78PmFayzMi0Bp4W3djc2eYCj7QAcOLUcEuJeMfdIkqbbu/WNkbfjx5qEEcTXiZ
YRZ4/9K/cackTHr0Ffz32V17J3APYJKpb5Xk2QDQfLBxRz1242KCZPWFautW9X18
92PYi5S+2MFE1XbWs9mHv8ZRFPhFx6427Lgtd4Cp7YkYI+OvT+J0kXseBT7u2uhE
cF9uaAskIVHFMdsJCdJ32/yKEVtC+pwVtxE+rT6ei3ulblolp9Kx07VDjXh4Vs8A
tftpabXZkC+FMT1DEV/7eY2fMkLKXhsH/g67f5Lly45XDADeR2T47NvDl4ssOLRN
aJpPQVMI/cbmyg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 07:39:35 2026 by rpki-client