Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: DHVdXaGfwmcFf1aVW/Qbya5KPzrKkJXtfRHEDoApRyk=
Subject key identifier: BB:E7:8B:7F:F9:44:5B:BF:35:6C:FE:45:BB:B7:32:C2:DE:41:FA:39
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 01A181507AD0A6519EB54B6FA5E86CAA38BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 1835
Signing time: Wed 28 Oct 2026 07:01:37 +0000
Manifest this update: Wed 28 Oct 2026 07:01:37 +0000
Manifest next update: Thu 29 Oct 2026 07:01:37 +0000
Files and hashes: 1: UTl2oEnM6aCF2kpB7Ff9DjUy06E.roa (hash: 0Pi09oTT2Bs/Jp2BUgsBTNW54DORQjFSQtJ6rpxdYR0=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: pnKQE41+mAhNhTx5Tut3ziBrKK/9TGWmpmW+Z+NPYYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:7a:d0:a6:51:9e:b5:4b:6f:a5:e8:6c:aa:38:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Oct 28 07:01:37 2026 GMT
Not After : Oct 29 07:01:37 2026 GMT
Subject: CN=bbe78b7ff9445bbf356cfe45bbb732c2de41fa39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:a9:5b:39:d1:aa:d0:aa:2f:cf:98:31:da:
2c:28:55:a9:a3:86:ef:c7:a4:d6:42:a4:21:18:f9:
6f:a1:f6:a3:a6:00:c4:b7:47:14:9f:87:50:af:bf:
eb:d5:18:21:39:32:5a:6f:9d:10:00:51:be:c4:a8:
a8:57:fd:25:70:c3:c0:35:ab:ec:cd:91:50:dd:2e:
53:bc:42:2d:db:8a:03:de:1f:56:9d:8a:7f:ae:15:
98:22:4e:1a:0f:02:3d:ee:68:e1:de:14:51:8a:e7:
40:7a:47:b7:8f:fb:52:1d:bd:c0:21:f8:a8:b3:c3:
c4:e6:25:e0:45:33:81:0d:c9:1d:b2:50:e1:f8:ba:
cf:ab:f9:74:b6:bd:56:17:d5:81:13:87:69:6e:70:
4a:38:96:05:26:e2:08:69:12:5d:b8:bc:4e:de:04:
dc:b5:e1:b0:c3:78:b8:10:25:1a:aa:51:87:52:16:
57:0a:36:4e:fe:94:a4:89:09:16:64:87:ba:e2:d9:
c7:d7:27:e9:19:20:1e:cc:f7:64:52:db:5c:26:04:
1a:45:94:1f:e6:18:50:1c:96:b6:ca:73:b4:de:50:
b2:9a:41:be:d7:d1:9a:68:ee:a2:fb:2f:e3:52:e3:
4f:36:f2:e2:3e:e0:20:ec:c9:b9:e5:da:74:60:73:
15:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E7:8B:7F:F9:44:5B:BF:35:6C:FE:45:BB:B7:32:C2:DE:41:FA:39
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ac:16:51:b4:80:84:df:33:15:6a:5b:e7:24:c7:40:53:92:
a3:b9:da:93:a1:4e:f8:65:b6:0a:45:2e:7f:c2:a6:75:dc:a0:
5e:35:c5:bc:02:ac:7d:4d:22:68:75:51:68:19:f1:7a:92:8c:
b3:73:c8:fe:ec:43:0e:a3:65:f0:c2:b8:bf:1b:66:0e:bb:d3:
65:36:5d:dc:59:74:06:cf:95:3b:5a:3e:2c:a8:97:8d:b7:b2:
ed:19:1d:3f:e1:e9:97:48:5f:b2:9d:ff:06:46:50:ec:4b:18:
39:d7:17:8b:4b:4f:57:a9:d5:8c:0e:ae:b6:1b:c8:61:c1:94:
db:1a:a7:c6:f1:b2:dd:5b:8b:9f:a4:4d:d3:a4:15:08:f3:60:
18:38:b1:01:a2:58:79:4a:09:47:ba:70:a2:77:d5:08:3c:41:
c2:95:c7:be:85:9e:4c:90:dc:df:67:f7:d5:d5:7f:c2:57:17:
e1:ac:4f:96:c4:3d:19:ea:7a:81:ef:2a:8e:4d:6f:60:e5:82:
32:7c:8e:7d:80:b4:63:80:33:69:1a:67:03:8b:71:b9:ee:cc:
eb:4c:4b:d5:46:89:d0:17:11:46:ce:29:91:77:45:4c:25:ca:
ca:9e:be:bc:f3:e2:74:a9:32:f1:db:a8:f9:fe:d0:c6:0b:52:
cb:1a:a4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:24:43 2026 by rpki-client