Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: CfTx1vSGBNuuC6RZpSmXaqeJMxYZ6sxyxueYap470EY=
Subject key identifier: EA:DE:16:3F:3D:F9:2A:A8:34:CD:00:E5:DB:8D:23:B2:1D:35:D8:0D
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 01A0B65269C86764459DA037DF0D2921FE7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 19FB
Signing time: Fri 18 Sep 2026 21:00:49 +0000
Manifest this update: Fri 18 Sep 2026 21:00:49 +0000
Manifest next update: Sat 19 Sep 2026 21:00:49 +0000
Files and hashes: 1: mTuVuiw3HM2pBIheqITWSq5I3n0.roa (hash: Ipl/v3cZkycb4zTv5tbg7JdjHKPt6S5to0wny64/QVQ=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: FbJGO5HYolPP4f04VG5kxBk9rtgoH5v2JTUs36ameR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:52:69:c8:67:64:45:9d:a0:37:df:0d:29:21:fe:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Sep 18 21:00:49 2026 GMT
Not After : Sep 19 21:00:49 2026 GMT
Subject: CN=eade163f3df92aa834cd00e5db8d23b21d35d80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ec:fa:c0:ad:15:6e:a2:c6:c3:bd:b6:c0:a3:
71:cb:4c:ad:1d:d3:7c:9d:62:86:1a:65:fd:4e:2c:
e5:3a:94:ee:70:bd:2e:03:60:99:d9:50:01:7e:c1:
62:90:10:07:24:e9:1d:c9:4e:d0:1d:5f:8d:5e:3e:
77:90:30:18:83:67:1f:fb:20:8e:0a:e8:4a:3e:c7:
cf:c5:4a:a8:b5:0d:93:6f:20:37:ae:fa:f4:68:b7:
ea:d2:0d:3d:20:d0:06:d0:96:97:6b:c3:13:1e:b0:
4b:e5:0b:fc:f4:cd:6a:e2:15:bd:f3:88:9c:02:b5:
5b:79:75:47:67:a6:bf:1c:72:28:c5:bf:12:54:ac:
04:42:39:18:48:a3:74:f0:d2:87:79:7f:1f:3e:10:
0f:94:b2:74:2a:24:27:c7:59:03:7e:30:88:fb:01:
dd:04:ec:12:8d:1e:a5:94:81:00:de:ba:ac:e0:c6:
f9:7a:5d:04:44:9c:86:79:bd:46:ce:f2:7d:fe:2c:
6d:8f:4b:b1:84:de:fa:29:42:ff:8b:68:eb:0e:27:
f4:4e:07:c5:25:f3:88:e3:cd:51:c1:e2:6d:72:77:
52:87:ba:22:c2:5f:c9:4d:1d:33:44:b6:b4:23:8c:
b9:15:35:62:2f:1b:75:a6:35:1c:da:f1:91:09:80:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DE:16:3F:3D:F9:2A:A8:34:CD:00:E5:DB:8D:23:B2:1D:35:D8:0D
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5c:2d:92:d2:6e:ca:e4:6f:b8:a3:05:80:38:9f:09:d2:f5:
39:9c:a2:92:4f:7e:f3:6b:c2:d1:49:57:96:d7:67:c7:e9:c3:
1e:83:3b:f4:d5:8f:8f:80:67:2a:76:a2:dd:46:ae:8f:29:17:
b0:30:79:14:e8:3f:b2:74:b5:9a:10:5a:b9:7a:e8:76:8d:9e:
a2:11:b7:ac:5c:55:00:6b:5f:36:81:af:97:90:0f:c2:43:67:
be:60:08:ab:c4:1e:41:80:8b:97:82:1b:7b:cc:02:07:55:7a:
3e:83:7c:1b:b4:89:ea:5e:a3:e5:32:93:72:2e:7c:a6:4a:23:
2e:95:60:f4:15:23:b0:3f:a8:f3:d1:b6:60:7b:a9:83:4f:51:
e7:70:46:bf:fa:a3:5b:b7:24:3b:ac:97:78:fb:48:25:c5:97:
00:16:7d:2d:23:18:78:b6:b4:ae:83:08:5f:5d:87:1b:38:22:
30:a6:29:de:46:49:f0:2c:3a:19:3b:89:ac:b2:22:2f:1e:9f:
68:df:5a:e7:09:6c:5f:e2:6e:be:bc:41:5a:b7:2e:0c:fc:3f:
c9:85:66:00:7b:67:03:1e:0e:88:4c:73:6e:85:09:d8:e8:0b:
7b:33:18:6f:46:85:97:c3:40:ed:07:07:27:a9:49:b6:a1:ad:
7b:f3:6a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:36:47 2026 by rpki-client