Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
File: xvw4sqEAOV-puZGa15LnrLLbLgc.mft (raw, json)
Hash identifier: KaF5ps2bry344S4EKRCxCWYv/IdxiuSe1ShOvZtE+8k=
Subject key identifier: C1:74:77:DC:64:7A:E7:DA:AB:A8:E2:D9:91:B1:81:B6:21:C1:C4:86
Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
Certificate issuer: /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Certificate serial: 01A03D83C545AF88E21C0D4B6AE66BD28B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
Manifest number: 09ED
Signing time: Wed 26 Aug 2026 10:00:40 +0000
Manifest this update: Wed 26 Aug 2026 10:00:40 +0000
Manifest next update: Thu 27 Aug 2026 10:00:40 +0000
Files and hashes: 1: 4kLVVeCRQJrEoKU2Z3FAZr5ZTZg.roa (hash: N+n4RQm/UCrzmjM9BuILs0DGf1giItqSLrBBjPu0qrU=)
2: MAAniPDXI9HsVNZwiBPzQo7C0FE.asa (hash: +t1AssvVOScBcP/9D61rppScOKqy8/J9uspPTrgro+o=)
3: xvw4sqEAOV-puZGa15LnrLLbLgc.crl (hash: kOkCZG2f/HE9hl1Wb9pjVzn5JS2PGnJt8o34eut+Z4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:83:c5:45:af:88:e2:1c:0d:4b:6a:e6:6b:d2:8b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Validity
Not Before: Aug 26 10:00:40 2026 GMT
Not After : Aug 27 10:00:40 2026 GMT
Subject: CN=c17477dc647ae7daaba8e2d991b181b621c1c486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:35:ac:61:2e:45:0a:69:06:0e:06:36:6a:
fa:d4:9b:b4:73:80:45:78:a7:8e:5e:22:88:e5:51:
2b:e2:8f:5c:65:bb:a8:82:a6:de:fc:d3:6a:2a:2a:
a8:52:8a:c9:ec:fa:2a:42:b1:6c:29:92:25:24:e8:
c1:3c:45:d0:01:42:03:14:1a:10:c8:99:d1:88:a2:
c0:b6:56:6a:4a:b3:a7:4d:98:3a:41:24:a3:52:dc:
7a:b9:79:42:0b:32:dd:e8:7d:25:f9:c9:21:cc:78:
ad:ba:ec:9e:d2:e9:31:82:dc:44:5d:65:92:5d:4a:
1e:e5:af:38:84:9d:4f:2a:67:8c:15:89:e2:0e:08:
01:ec:c7:c4:70:5b:52:97:a5:5d:fc:9a:61:2d:18:
67:9e:85:5c:75:6f:0a:08:28:34:3d:1b:dc:fc:1d:
65:84:a1:3e:7c:2a:c9:75:30:bf:a2:7b:ba:05:19:
9e:4d:8d:a8:3a:26:33:3d:e8:42:29:26:2d:28:92:
ca:75:51:2b:f8:c9:eb:a6:bf:50:bb:4e:10:52:5f:
97:03:6e:36:69:f5:5f:e4:bb:83:1b:a4:e6:8f:15:
98:79:c0:01:e5:a8:95:48:5b:68:10:fc:8f:bf:17:
31:6d:1a:38:d9:34:8f:7a:ca:58:98:98:a1:de:a5:
25:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:74:77:DC:64:7A:E7:DA:AB:A8:E2:D9:91:B1:81:B6:21:C1:C4:86
X509v3 Authority Key Identifier:
keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:38:c3:ec:42:77:3b:ab:c5:70:80:43:a5:6c:9d:a5:3c:21:
e2:eb:17:5f:3f:b4:7d:98:38:af:3e:79:3b:ca:78:ce:58:70:
f3:7f:e5:d8:b3:db:b4:ad:37:1e:16:db:af:f6:c2:90:cb:47:
94:55:2d:42:0b:b5:0b:13:3a:a9:f2:f2:08:9c:b9:4c:c2:f3:
bb:22:52:9b:be:17:e2:a9:e3:5b:4d:0f:51:2e:cd:b3:9f:27:
a3:aa:62:94:10:75:ff:37:96:ef:a7:7f:83:b9:8d:7e:57:5f:
f5:a3:18:14:b5:e4:70:33:77:27:ec:be:ea:a6:99:94:2c:4a:
aa:37:99:14:b9:b0:8b:92:69:45:f7:19:1a:41:f8:e5:70:a8:
17:b1:39:ab:32:c1:7c:b8:2f:e9:68:ef:bb:48:d4:ba:51:e5:
4f:e0:ba:55:ad:85:b7:fc:1f:0a:7d:12:77:6a:9d:21:2d:de:
2b:c9:bd:a3:b8:fe:65:8f:82:97:cf:c8:27:45:5b:13:7c:68:
78:17:97:d2:53:ea:26:b7:37:0d:9a:d9:9f:6b:93:05:a3:a4:
df:24:9a:fd:5d:b2:4d:4e:08:44:d5:11:d2:3d:a6:9c:39:c0:
62:89:34:28:c3:30:7a:f9:93:ea:aa:f7:58:3f:a7:98:4e:bc:
ec:95:f3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:55:51 2026 by rpki-client