Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: +OR0vT0F0zzTBK4f9fJSwHHaXD617p7RTN2j9ZzOhas=
Subject key identifier: F9:F7:A0:DB:98:1D:DE:EB:C3:8F:7C:E4:91:D1:CE:03:10:DA:6C:1E
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 01A104A58EBB4321C376E677C1790BCFD930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 130E
Signing time: Sun 04 Oct 2026 02:02:01 +0000
Manifest this update: Sun 04 Oct 2026 02:02:01 +0000
Manifest next update: Mon 05 Oct 2026 02:02:01 +0000
Files and hashes: 1: 1HMsGfdsMj6bVCe_HqSPHKmPGQA.roa (hash: Aa+3horScinkb91IcV06nuOTEkzdcEAPUq8TBlQGMDg=)
2: Q6q5ifTmogwJicn2e4z2f5_1UN8.roa (hash: ZCT+LPivkmFqXHHIYRE3kEHzKOk9mVM2bvW0OtpppFg=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: /CIFsyuAqUIn/60DuiyoFYy4vZfHpF2OMh/QXEC1AuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 02:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:a5:8e:bb:43:21:c3:76:e6:77:c1:79:0b:cf:d9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Oct 4 02:02:01 2026 GMT
Not After : Oct 5 02:02:01 2026 GMT
Subject: CN=f9f7a0db981ddeebc38f7ce491d1ce0310da6c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:73:dd:fd:f4:c6:f4:59:e8:ab:74:91:98:
0b:c4:f9:25:69:3a:0c:25:44:da:c3:c5:ad:4d:bd:
f9:24:6e:88:51:68:f5:44:66:cd:37:bd:35:72:2c:
bc:28:b7:c2:9f:5a:5f:57:9a:ea:0e:d5:ab:aa:0e:
51:f7:fa:c1:8e:3e:cb:6e:b0:b7:a3:e9:87:bc:02:
43:85:58:5f:44:0e:2c:3a:74:ff:fa:77:49:35:6f:
ff:5f:5d:31:c3:11:94:75:35:ef:09:1a:4f:c4:2e:
be:9d:84:82:dc:aa:f0:d1:74:49:65:d0:5f:9d:1b:
49:b4:9a:58:c6:63:54:0c:6b:1c:6a:e5:7d:a7:61:
2d:d8:a9:6d:1d:14:2d:f8:72:08:dc:06:ad:bd:b2:
3d:6c:ff:32:38:b1:05:ca:7d:86:51:93:14:d2:02:
65:07:9e:3b:7d:cf:6a:2f:1f:53:88:60:84:0b:5b:
c1:f4:a3:c6:ea:95:49:58:b8:36:58:fc:9a:dc:a4:
0b:ff:89:98:93:be:f3:22:92:1d:43:e1:7e:e7:67:
d1:38:46:54:0a:6f:a1:c4:b3:16:47:4e:68:2c:9a:
43:ef:36:bd:fa:73:48:b2:13:60:61:4b:ff:9c:4f:
34:d0:26:32:c9:16:43:f3:3f:57:98:26:17:a3:67:
a8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F7:A0:DB:98:1D:DE:EB:C3:8F:7C:E4:91:D1:CE:03:10:DA:6C:1E
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:2e:22:4e:17:20:13:d4:fb:e4:5a:bd:cc:11:0b:83:04:f4:
83:c7:93:08:79:58:38:7b:c5:77:71:86:13:72:13:e8:7c:9c:
d2:64:ff:e6:48:74:52:74:33:c4:6b:f8:40:86:40:33:13:af:
06:6e:9a:58:e5:aa:51:0f:a7:11:ab:e7:0d:ea:90:04:74:98:
fd:da:16:a6:98:e8:64:8d:a6:65:e6:92:65:93:e4:ae:0d:f6:
4a:07:d1:1e:f6:da:17:19:2d:cf:4a:4f:f2:7a:f8:65:6d:8a:
19:44:51:9d:7b:71:68:ef:80:49:b7:d8:d9:56:6a:30:a2:a3:
2f:73:f3:1b:1c:4a:07:3a:51:3b:80:9e:21:eb:ba:47:20:e9:
e9:2f:42:c7:1e:56:b7:c7:ac:b9:5e:98:63:0a:b4:98:13:aa:
9c:cf:a7:f9:69:cf:f5:4d:8f:b2:e5:1d:72:4e:e5:a5:f0:78:
5d:7f:5b:a1:f3:78:59:8b:3c:3a:9e:b2:34:df:d9:c3:a5:cb:
f8:7f:a2:2d:c7:86:b6:f5:fc:fb:86:5e:c3:64:fa:1c:be:9a:
d3:57:0c:c5:95:25:02:67:51:c2:55:63:67:26:6e:8e:9c:75:
5f:c2:38:17:f4:94:c6:76:e4:cc:bd:69:d3:62:fa:6e:49:0e:
83:55:1d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:20:31 2026 by rpki-client