Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
File: xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft (raw, json)
Hash identifier: pz2zBo/8zy+twYWjKFzN7G/yx21cHfVAzZ9s5rmuRUk=
Subject key identifier: 47:89:F6:23:D3:18:14:18:DC:33:61:49:4B:9C:96:9E:93:7F:82:2A
Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Certificate serial: 01A08AC369691CDBEB1EC69FD141D7522A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
Manifest number: 199F
Signing time: Thu 10 Sep 2026 10:00:57 +0000
Manifest this update: Thu 10 Sep 2026 10:00:57 +0000
Manifest next update: Fri 11 Sep 2026 10:00:57 +0000
Files and hashes: 1: amTwSoJu04--PPMgX7cWGoLl7yI.roa (hash: LHgYpMKmWJ/zte9nRlTYZiOamXW79eIiHdCMO+n1Kpc=)
2: xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl (hash: 2gpkSUXXhMpKdfO+RRJ8n3lDkUP4NuHPx5hPrCuSfGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:69:69:1c:db:eb:1e:c6:9f:d1:41:d7:52:2a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Validity
Not Before: Sep 10 10:00:57 2026 GMT
Not After : Sep 11 10:00:57 2026 GMT
Subject: CN=4789f623d3181418dc3361494b9c969e937f822a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:47:5f:f3:44:ec:86:2d:38:26:3d:ae:99:cd:
56:ea:e9:c6:81:4e:cf:07:d6:11:cb:a1:a6:7d:41:
e0:e6:37:65:d6:7f:32:8c:37:79:1f:3c:07:79:1a:
6b:08:50:93:b5:e6:4c:d9:65:48:da:48:ad:dd:30:
4a:1b:5b:31:28:0d:65:1d:12:31:a3:96:14:6c:41:
56:fb:37:f1:68:a3:06:5c:3d:a8:ca:1b:73:4a:66:
7c:b9:3d:a4:4d:ea:cb:a9:9d:00:35:db:b1:c5:44:
6a:c9:0e:5b:44:93:dc:42:ce:df:58:a2:be:55:9f:
c3:cb:89:df:5e:8d:78:dc:90:9f:d8:5c:c3:dc:61:
fd:fc:d3:d6:14:db:56:c5:ad:26:e8:8b:61:7b:47:
8c:b9:55:04:d4:73:60:3f:7a:d0:6f:78:39:08:06:
09:2c:59:3b:05:26:6d:0b:b5:c6:14:00:d0:90:f5:
32:9b:66:a7:12:05:e7:fe:f9:d1:18:c8:6a:7d:2a:
06:9c:33:91:e6:da:79:a2:e7:93:f2:64:33:3a:10:
d1:88:45:dd:63:76:f2:d8:72:4f:b4:ab:26:c7:36:
81:72:2f:4a:5a:9a:cb:0c:2b:91:19:f8:50:b0:d5:
f7:9d:58:65:67:16:2f:62:04:a3:b2:e1:b4:5b:f3:
2c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:89:F6:23:D3:18:14:18:DC:33:61:49:4B:9C:96:9E:93:7F:82:2A
X509v3 Authority Key Identifier:
keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:11:03:b8:1e:c5:dd:47:2c:9f:ed:8a:60:c4:1c:16:a7:82:
e5:07:2b:7a:54:d5:15:12:af:3d:e0:91:7a:da:d5:64:96:7d:
13:a6:ee:23:57:97:5a:9c:e5:4d:7e:cd:02:c1:d1:b2:f5:69:
bb:42:df:89:8d:73:50:f2:71:09:fd:e7:c7:c3:d3:ab:a1:9c:
ad:44:b9:28:ee:b0:43:0e:d7:a8:08:55:fa:10:19:bb:1c:40:
0e:0d:d3:cc:ab:9a:a9:87:53:d6:41:fb:b6:10:24:2e:8e:4c:
42:3c:4b:55:22:6c:31:63:15:98:70:ef:c7:61:d6:b8:ca:a6:
35:d6:94:d7:73:20:cc:2f:c3:8c:3e:f2:c3:17:93:75:a9:1a:
74:13:c7:cf:bb:6d:6b:e6:3d:5b:ed:9d:f7:2b:44:39:e9:8b:
f0:ae:9b:90:bc:a1:85:43:97:32:a0:66:07:f7:b2:0e:93:f5:
62:8b:bf:5d:12:f4:60:77:29:09:e4:ce:cd:5b:35:fb:6a:d5:
2b:62:06:0c:96:d3:de:69:09:09:06:ea:70:19:0d:29:ed:9e:
ac:9e:80:bd:a8:9c:0d:a5:6d:9e:cb:bb:6a:1c:b0:db:55:e4:
64:47:20:95:7a:53:a3:cb:aa:c5:ca:ff:1e:dc:fd:f8:ae:4a:
3a:a4:44:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:47 2026 by rpki-client