Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
File: xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft (raw, json)
Hash identifier: 56V21/8GG3xIOsCqH8iGKqP7BMPtC/Mt5VUllDSUYow=
Subject key identifier: D9:66:01:20:BE:92:23:A6:5C:22:FA:6D:33:80:92:04:84:B4:C2:0D
Authority key identifier: C4:3F:C6:B1:40:77:53:93:FC:33:69:AF:3D:0B:CE:20:C4:3E:5D:5B
Certificate issuer: /CN=c43fc6b140775393fc3369af3d0bce20c43e5d5b
Certificate serial: 01A06D26E4A3FEA1EAC89C621B0C91911307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
Manifest number: 6A
Signing time: Fri 04 Sep 2026 16:01:00 +0000
Manifest this update: Fri 04 Sep 2026 16:01:00 +0000
Manifest next update: Sat 05 Sep 2026 16:01:00 +0000
Files and hashes: 1: Wc_H_BQm_T1przFaClfQ_aiSbiQ.roa (hash: MkPhhtBoGp/lssKXEDwA7t5KV65sjPCdBtv5VeMIgt0=)
2: X1apZ7-7CuoQuH1lprwDvLaAj_o.roa (hash: bKHCrK9Bl7HPkt4FDfJna4GmZEpO2EsOS5LM/0L3EJs=)
3: xD_GsUB3U5P8M2mvPQvOIMQ-XVs.crl (hash: W9NFQERjsE2yYAlMSMvOsRX4O7xvuFSoqq0nDVj1BLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:26:e4:a3:fe:a1:ea:c8:9c:62:1b:0c:91:91:13:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43fc6b140775393fc3369af3d0bce20c43e5d5b
Validity
Not Before: Sep 4 16:01:00 2026 GMT
Not After : Sep 5 16:01:00 2026 GMT
Subject: CN=d9660120be9223a65c22fa6d3380920484b4c20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:a8:36:47:85:3c:23:9f:8f:f9:65:11:04:
a7:31:36:57:90:af:de:b5:ad:15:b2:f3:75:92:9a:
ed:d4:96:fe:3d:2a:59:a1:d3:61:dc:47:5a:57:f0:
9a:f7:e9:6b:af:cb:ad:23:e5:dc:fd:97:1f:6e:eb:
03:59:75:13:a2:27:5e:7a:98:3e:4b:96:a2:14:47:
91:8e:bc:0b:29:c0:98:f0:cb:7c:1e:f8:d3:2e:5c:
a6:46:8d:b0:e7:f0:e0:ac:9d:27:2f:db:24:17:05:
53:2a:a6:c6:37:85:be:91:67:77:5b:c0:5e:3e:29:
49:3e:bf:df:da:c3:f9:4f:50:5d:98:fe:b0:e7:85:
ca:52:39:85:37:42:68:2a:81:fe:74:cb:6b:39:b9:
fc:e2:f6:62:a1:8b:58:fd:a8:49:96:fc:92:b6:4d:
39:f1:92:f8:a8:29:97:e3:2d:86:86:1a:d4:26:ad:
93:66:07:09:5f:16:61:ad:60:80:fb:00:79:8d:d5:
94:9a:43:36:fc:4f:2a:dc:e2:44:24:2a:4c:05:0b:
2a:5c:9d:a9:0b:5b:a1:72:f6:95:52:e6:dd:27:00:
6d:e2:2d:18:ca:13:c1:50:23:01:b9:14:e6:62:17:
ef:ea:28:80:8c:7d:7f:c5:5f:08:2a:0c:80:66:5f:
d2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:66:01:20:BE:92:23:A6:5C:22:FA:6D:33:80:92:04:84:B4:C2:0D
X509v3 Authority Key Identifier:
keyid:C4:3F:C6:B1:40:77:53:93:FC:33:69:AF:3D:0B:CE:20:C4:3E:5D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:86:f5:7b:f7:82:06:f5:17:99:9c:d0:1e:26:d2:1c:78:e6:
60:b2:67:f6:df:45:5d:6e:68:bd:fd:44:0a:a3:9d:d7:a8:ea:
96:d3:88:b5:6a:95:0e:82:ae:27:c6:b2:26:36:f0:7c:9a:70:
9e:7d:bb:b9:dd:ed:6b:0e:9b:d4:a5:64:f1:6d:63:e5:7c:cd:
ad:05:ee:d9:f7:ab:57:62:c5:ad:f4:03:10:6d:b4:6a:1b:bd:
3a:97:e9:03:6e:db:a9:e0:80:c1:60:49:1c:3d:ac:13:c7:02:
4b:8b:5f:91:3a:a4:46:0b:38:15:9a:29:60:0e:8b:21:35:36:
9a:6e:8c:2f:11:0c:1e:c3:36:77:9e:72:ea:7c:2d:5c:d9:47:
ba:1b:70:8a:18:c4:5b:e8:e7:d2:8f:a8:9a:84:46:aa:a4:47:
30:1d:35:d2:60:f3:c2:01:54:6f:4c:a3:59:46:df:d2:75:99:
12:3c:5a:8f:4d:c0:2d:9a:88:bf:0c:52:90:b5:78:e8:4d:93:
a9:50:60:74:4f:8d:f3:7e:08:2b:f0:68:62:91:47:42:0e:32:
94:d0:12:8e:d3:26:de:9e:3d:23:ae:d1:13:32:81:cf:6b:c2:
e6:30:77:ca:be:64:e4:bc:74:0e:ed:2c:b4:16:c9:9f:00:f7:
55:0f:ee:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:17 2026 by rpki-client