Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/xQqgWl6FmBSzRABcMDNiiIuOYOs.mft
File: xQqgWl6FmBSzRABcMDNiiIuOYOs.mft (raw, json)
Hash identifier: iXKiVMRoiZTz1fW8NO0TZLLpD8+1FR8Gxcl8XgysSDA=
Subject key identifier: BD:7A:57:83:1E:46:7E:86:9A:27:B7:43:6B:AC:5B:0C:5C:DE:5B:6B
Authority key identifier: C5:0A:A0:5A:5E:85:98:14:B3:44:00:5C:30:33:62:88:8B:8E:60:EB
Certificate issuer: /CN=c50aa05a5e859814b344005c303362888b8e60eb
Certificate serial: 01A1521B35B49102358493EA69B2C4603CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQqgWl6FmBSzRABcMDNiiIuOYOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/xQqgWl6FmBSzRABcMDNiiIuOYOs.mft
Manifest number: 79
Signing time: Mon 19 Oct 2026 03:01:17 +0000
Manifest this update: Mon 19 Oct 2026 03:01:17 +0000
Manifest next update: Tue 20 Oct 2026 03:01:17 +0000
Files and hashes: 1: 1jL26ut9i72o2F_y1kqJYC-SeDw.roa (hash: wtiEByOmIaDIFzO/v4C1S8MN9NcEcNuf15+fPUnmuEA=)
2: tsGRmsREpXc_Z_NdGNIekdKShcM.roa (hash: 8YVUb9LnzwGB0Dnc3npjvfCOtQTyy3Jp4dEuAqxypaY=)
3: xQqgWl6FmBSzRABcMDNiiIuOYOs.crl (hash: ARsnVzNG5wjrNpig9vB+RUEtGO9xRweHtm7dwvxXdM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/xQqgWl6FmBSzRABcMDNiiIuOYOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/xQqgWl6FmBSzRABcMDNiiIuOYOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQqgWl6FmBSzRABcMDNiiIuOYOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:1b:35:b4:91:02:35:84:93:ea:69:b2:c4:60:3c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50aa05a5e859814b344005c303362888b8e60eb
Validity
Not Before: Oct 19 03:01:17 2026 GMT
Not After : Oct 20 03:01:17 2026 GMT
Subject: CN=bd7a57831e467e869a27b7436bac5b0c5cde5b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:5f:51:9d:dd:5d:cb:c0:f7:55:86:15:d0:
fe:49:98:c0:17:85:c6:ee:a2:b2:8b:2c:33:ea:78:
72:22:f4:6c:1d:4c:7d:41:ca:d5:de:07:90:b8:99:
7b:c5:5c:e3:e0:b3:46:e4:01:04:c7:d4:77:50:fd:
86:b7:3b:f2:79:45:b6:33:1c:35:a4:2d:37:f0:e5:
eb:2a:40:db:ce:a2:32:59:5f:15:42:8b:63:a7:b4:
8d:4e:02:9c:88:b9:e8:72:34:7f:b3:cb:08:42:97:
fe:5c:59:6e:b3:36:46:f2:12:9b:47:fa:18:77:83:
14:04:e6:b4:2c:5a:41:4b:28:99:6e:a6:59:3f:3b:
d5:e3:c2:3c:6c:86:32:81:11:7c:fd:40:62:bd:f4:
08:c1:04:1e:27:b4:54:f7:00:fa:db:74:e4:51:2f:
98:89:79:4d:bf:f3:c0:35:5e:98:3f:1b:7c:ec:61:
8c:a1:50:db:cb:be:0b:ff:d1:ae:5c:11:3f:85:a8:
97:66:a8:d5:81:1e:ef:29:c8:19:bd:79:01:f6:1a:
07:bd:f5:8c:79:42:d1:e6:b2:56:ae:c6:e3:12:13:
37:eb:c7:4c:37:ed:fc:71:23:9f:ed:82:8f:2a:bf:
ca:90:8f:24:3b:54:97:fe:fe:3d:e0:94:e6:75:3d:
ad:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7A:57:83:1E:46:7E:86:9A:27:B7:43:6B:AC:5B:0C:5C:DE:5B:6B
X509v3 Authority Key Identifier:
keyid:C5:0A:A0:5A:5E:85:98:14:B3:44:00:5C:30:33:62:88:8B:8E:60:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQqgWl6FmBSzRABcMDNiiIuOYOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/xQqgWl6FmBSzRABcMDNiiIuOYOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/xQqgWl6FmBSzRABcMDNiiIuOYOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2e:fb:15:1f:53:f7:f1:d7:5a:eb:b0:c1:0b:23:20:83:6c:
5d:56:84:70:3d:2c:e7:1b:ac:7d:87:ce:43:c4:ec:cc:d2:8c:
dd:78:92:1b:ca:cc:19:4f:a6:ac:8e:d8:49:e6:c8:09:2d:4f:
9b:11:9b:ef:0d:4c:46:d6:91:58:f5:c6:a9:94:22:d5:f6:db:
15:21:59:3c:66:82:b2:9a:a6:92:84:e4:38:09:8d:44:5f:e6:
a0:ab:4f:33:5c:a7:30:fc:ec:ca:de:93:f8:6e:b1:e2:3c:1e:
9f:bb:2f:f1:de:03:62:62:a9:15:7c:37:8e:72:3d:36:64:0c:
19:3f:19:30:d2:c9:0a:4d:95:89:ff:a8:13:5e:38:20:b1:90:
9f:c3:96:28:90:c2:4a:3d:fc:27:54:2c:ca:e8:cd:c5:18:63:
eb:2e:4c:28:d6:32:8e:d8:23:3d:52:a9:37:e6:48:69:da:0d:
9f:72:eb:67:3c:18:d2:8d:0d:1b:c3:a2:7f:aa:8b:d7:3e:c5:
d4:7c:e6:b7:13:98:63:ab:20:ef:74:6d:f1:43:0a:3e:5c:e3:
ad:64:a6:cd:43:96:f2:18:7b:19:d4:1e:96:b9:38:49:91:1a:
41:28:12:cc:9a:75:c3:5f:2d:8e:25:5f:9a:02:0a:0f:f8:91:
8d:9f:5d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 13:36:04 2026 by rpki-client