Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: XEZ9xluGmPJnCLbyM9wzherE1xeE9CneSIqOTtBtPvo=
Subject key identifier: E9:C2:22:65:AB:E1:68:0A:67:71:27:F8:24:76:26:AD:A2:F6:AF:4A
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 01A08FE9A7EE848A5BBC9D7AE232740ACFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 17B8
Signing time: Fri 11 Sep 2026 10:00:49 +0000
Manifest this update: Fri 11 Sep 2026 10:00:49 +0000
Manifest next update: Sat 12 Sep 2026 10:00:49 +0000
Files and hashes: 1: UTl2oEnM6aCF2kpB7Ff9DjUy06E.roa (hash: 0Pi09oTT2Bs/Jp2BUgsBTNW54DORQjFSQtJ6rpxdYR0=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: PxQ621wbbfk3PZYg4M9L2xsjaK8dIcGD6a7ftW+uWVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:e9:a7:ee:84:8a:5b:bc:9d:7a:e2:32:74:0a:cf:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Sep 11 10:00:49 2026 GMT
Not After : Sep 12 10:00:49 2026 GMT
Subject: CN=e9c22265abe1680a677127f8247626ada2f6af4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:7a:c3:e7:1b:a4:67:89:14:4c:79:b5:5e:
be:c3:71:80:9b:68:3c:47:a9:49:cf:c8:c4:82:41:
c8:d1:87:78:cf:9d:09:40:d1:da:7b:a9:a3:a9:2e:
7c:20:a9:f0:cf:d0:96:49:2d:ff:aa:7d:e9:47:b2:
ba:09:8c:4e:5b:96:b3:f6:46:3c:97:0d:50:c8:94:
a7:a0:8c:ab:d0:d5:8c:c5:c2:52:41:64:53:60:10:
65:d7:81:5b:69:3e:6a:92:74:9d:ce:76:e5:ab:1d:
0f:2b:b6:fc:fd:2e:94:35:92:3b:84:7b:e3:a2:a8:
64:77:48:cb:ec:ae:d8:d3:eb:ec:cc:e4:a3:0d:c5:
63:76:8c:72:be:75:17:6b:e7:a3:d5:9a:23:1d:c3:
e5:9e:3b:a9:f3:15:f5:61:b5:28:6a:ff:50:c6:4a:
a2:61:40:54:91:53:fc:c1:45:78:f7:c0:04:c9:bf:
b5:5f:ec:97:49:d8:92:6f:40:75:7d:70:a3:f4:d2:
63:d2:f8:28:ad:50:63:5f:9b:3e:bf:97:7c:a2:44:
f3:19:8c:d9:2b:20:60:d3:8c:d2:62:f9:19:9f:ef:
48:bc:8e:04:3e:47:51:b4:95:42:98:e9:a0:c8:c5:
5a:3a:4d:9b:20:31:7d:99:79:de:e1:ba:c7:a8:10:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C2:22:65:AB:E1:68:0A:67:71:27:F8:24:76:26:AD:A2:F6:AF:4A
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7a:62:fa:e0:52:e2:c1:0a:9e:34:bf:c0:ac:d7:d7:99:39:
55:c6:5b:b1:80:1a:66:2d:12:8e:85:a2:7e:52:af:60:ae:35:
16:fd:22:35:63:92:81:69:a2:81:53:08:c9:3b:9f:53:68:da:
d3:4d:61:ea:87:c8:9b:38:29:25:df:b1:dd:98:b9:a9:8d:b2:
6b:18:b8:05:cb:b0:c6:ba:e4:20:50:0c:05:b8:06:6f:27:17:
38:76:0e:76:ac:57:d0:fc:c2:7e:3c:95:32:7e:1a:fd:28:50:
9b:fc:58:f5:4c:6c:8b:21:89:19:68:87:1c:78:57:8c:f1:fa:
ef:ce:ec:1e:3e:35:be:3e:ef:7a:c3:30:7d:bd:bd:e7:c2:d4:
8a:89:ce:c3:ec:52:da:6b:85:bc:7b:bf:64:00:7b:83:f0:54:
cc:dc:e5:51:f4:7f:26:eb:b5:5b:57:a0:b2:6b:04:b6:d0:5d:
18:1d:ff:24:a8:42:fd:ea:fd:76:f0:40:da:81:a6:9a:e2:07:
fc:94:53:48:33:48:53:59:cb:90:cf:5c:66:25:7e:05:bf:96:
0d:b2:5e:e7:3d:41:3c:82:17:50:c0:8f:49:ee:e9:86:c4:7e:
5e:44:67:9b:d0:11:cc:3d:e5:9f:2f:46:bc:8b:19:fa:50:7a:
96:4f:70:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 20:37:46 2026 by rpki-client