Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
File: p_xcZck6dAQIaxelTn4NqWCpspM.mft (raw, json)
Hash identifier: vlwgOCgQvxne2CHhWO2aGcT4OyPd25ySgqhHbQrDrzg=
Subject key identifier: CC:9B:C9:49:4B:BF:BA:4C:17:6C:BB:9A:E3:68:3F:E2:73:42:78:C9
Authority key identifier: A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
Certificate issuer: /CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Certificate serial: 01A08AFAB84578C30F27E7A4136302836374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
Manifest number: 15CB
Signing time: Thu 10 Sep 2026 11:01:22 +0000
Manifest this update: Thu 10 Sep 2026 11:01:22 +0000
Manifest next update: Fri 11 Sep 2026 11:01:22 +0000
Files and hashes: 1: p_xcZck6dAQIaxelTn4NqWCpspM.crl (hash: 8t9plC68hDAjtZ7cboCEIPNKvwLmQeiaR2PSgoU7gAQ=)
2: zyvBgcaKIFGMWYv6OuW2zLjcavU.roa (hash: XTPB93PSeuPbkhF2YYl0hqMFZjAqg6tmVvQv1bPxkjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:b8:45:78:c3:0f:27:e7:a4:13:63:02:83:63:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Validity
Not Before: Sep 10 11:01:22 2026 GMT
Not After : Sep 11 11:01:22 2026 GMT
Subject: CN=cc9bc9494bbfba4c176cbb9ae3683fe2734278c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:65:77:8c:db:08:85:a2:72:3a:84:f9:a9:8b:
15:f7:67:96:b8:77:62:4b:d6:95:9b:d6:5c:6f:9b:
69:07:e2:84:7f:98:1e:e1:4f:df:52:12:97:b3:55:
fb:e9:00:66:98:3c:dd:99:38:ef:35:bc:24:0f:50:
d1:df:c6:12:b2:5d:ce:93:a7:96:a4:1b:03:9a:86:
b2:87:ee:e1:c5:2b:c1:8e:83:a2:f7:59:0b:28:a6:
e7:2c:f6:53:63:33:b5:56:c1:17:df:3d:6b:a1:87:
d1:29:f4:05:13:d2:4f:24:4a:73:76:6a:e3:9f:e9:
d2:79:3e:85:9a:4e:42:7a:0c:f4:83:0d:cf:8f:18:
cd:fd:dc:5a:b4:d7:3f:71:08:35:26:52:69:2f:6c:
81:8e:b6:48:32:39:d1:b8:67:b1:17:77:df:f7:68:
7d:37:90:f2:8b:31:11:77:b1:e0:82:da:84:db:cd:
5b:77:51:93:9d:46:98:b5:29:37:ae:25:bf:ab:8b:
93:2f:71:1c:a0:7b:79:34:ea:cc:c0:0c:63:fb:0e:
95:6a:9a:06:71:17:f8:85:1a:5f:30:6b:0a:80:14:
f9:7e:a7:97:8b:98:58:bc:2d:92:69:f4:6a:f8:2c:
d9:91:da:f4:8b:b0:ed:5a:02:0b:7f:a9:b7:d2:37:
17:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9B:C9:49:4B:BF:BA:4C:17:6C:BB:9A:E3:68:3F:E2:73:42:78:C9
X509v3 Authority Key Identifier:
keyid:A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c4:57:a1:aa:83:0f:4e:df:c8:ac:43:4d:39:b9:8f:7d:aa:
95:9d:4f:f8:ec:69:05:f4:46:61:4d:af:2a:4b:a3:bc:f3:08:
8e:04:8b:d6:fa:7f:dc:b2:2c:52:f7:55:54:9e:80:ac:48:9f:
cc:61:06:95:8d:a4:fe:47:c8:85:ca:2f:25:a4:e1:73:cc:37:
34:0f:61:d6:67:23:15:4b:bc:ca:b3:c3:a4:5f:e7:a7:ee:2f:
31:2f:fa:0f:0e:2e:77:58:69:bb:ef:12:38:77:dd:19:4e:5b:
04:01:a3:6a:a0:53:96:1c:e3:27:f3:88:25:eb:5c:a7:9a:e1:
a9:e8:67:13:c9:2b:04:6b:f2:5d:22:8d:f1:09:51:c6:cd:cf:
74:35:9a:98:a0:53:09:69:9c:ba:f3:72:1c:16:11:de:32:8c:
dd:9f:61:13:f4:7c:6c:39:d7:e9:36:eb:7e:40:51:3e:5e:5c:
81:69:55:67:5c:55:3e:39:a3:4a:51:64:64:de:a0:20:e9:1c:
b5:d0:9a:12:e1:2a:0b:e0:a4:9d:0b:1e:2b:25:34:c5:3d:d7:
a4:be:81:05:f9:81:1b:d1:44:0e:ae:8e:81:dd:38:e6:6c:49:
75:00:90:49:26:92:80:c4:4d:cb:ec:3e:46:91:38:d2:4a:79:
ea:3b:b7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:33:23 2026 by rpki-client