Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: eEZMwUbfHUzuVJf8Mtis0VyGRpIGoJnXyWwdmqqASD8=
Subject key identifier: 4D:5A:BA:2E:BB:F7:83:DB:5F:43:A5:42:49:27:ED:7A:46:B4:CB:E4
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 01A00281F11710738EBFDD8220765C307179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 1A0C
Signing time: Fri 14 Aug 2026 23:01:05 +0000
Manifest this update: Fri 14 Aug 2026 23:01:05 +0000
Manifest next update: Sat 15 Aug 2026 23:01:05 +0000
Files and hashes: 1: Kd-PJMG0I6gP3eU-IVUAKt_gccg.roa (hash: guDscC6GtnjjQhv/AcT64xIdqM0iuOGm1U4WIDOTt8E=)
2: lSFi-1eTKmeoYvO7iogn6X4tIpU.roa (hash: //ICRxBUp7hn0Q5ceoMLISlFLfZ4l/LvL7doeO/ruS0=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: NbBkRuNyZqShU0/zADaCYSRXU1+/Dst6XKcRWz9wPmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:f1:17:10:73:8e:bf:dd:82:20:76:5c:30:71:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Aug 14 23:01:05 2026 GMT
Not After : Aug 15 23:01:05 2026 GMT
Subject: CN=4d5aba2ebbf783db5f43a5424927ed7a46b4cbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:a1:fe:69:7d:83:b7:09:46:28:f2:f4:12:
2d:18:0f:97:b7:2a:2d:7e:43:5d:82:38:6c:9a:1d:
ff:c7:3d:ac:56:0b:b7:75:21:33:7d:bb:d2:25:bf:
7c:51:71:38:89:fb:e7:ff:1d:46:51:1b:a6:26:de:
5b:fc:94:b6:bc:cd:25:e6:df:f0:86:47:f4:7f:b6:
58:0d:f5:25:81:31:a8:de:d9:97:7e:0d:6d:98:ce:
a3:4b:59:cd:27:f6:90:f4:61:d4:91:9e:2c:07:8f:
a1:ca:86:34:23:2b:14:12:2a:e0:ce:16:26:9a:c6:
c5:74:30:8d:44:54:8a:37:ce:5e:fc:96:b4:8a:7a:
b5:5b:9a:c1:57:0b:7f:87:d8:7e:6f:77:fd:e7:37:
7f:cd:69:d4:38:fe:d2:70:52:c7:db:b7:4f:f6:c1:
ca:28:46:1d:43:4d:43:30:b8:f2:09:2c:39:72:e0:
01:a0:a6:5a:90:cf:a7:a5:2d:ad:d9:2e:fe:a0:14:
cf:f1:dd:5c:12:2f:54:90:b1:b5:85:ce:de:19:32:
fb:73:ab:e3:0a:ec:23:52:10:26:f0:fa:33:c3:c6:
d6:7b:ec:ae:ec:b7:b6:ac:5e:8e:f8:a0:80:8a:66:
1e:86:0d:85:4c:f8:cb:a5:44:7a:7d:3c:56:9e:4a:
98:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5A:BA:2E:BB:F7:83:DB:5F:43:A5:42:49:27:ED:7A:46:B4:CB:E4
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c1:21:41:ff:bf:db:ca:49:f7:94:47:27:8f:36:2c:42:52:
83:48:ee:f0:63:61:79:8b:9f:6a:2c:7b:57:2c:fc:c9:01:7c:
32:45:bd:cd:c8:55:23:b2:cc:ce:ea:45:93:f9:79:71:37:ad:
51:38:d8:0a:3f:72:79:d6:a1:d0:91:37:98:2f:53:15:a6:ff:
de:1d:75:76:86:25:30:f1:d9:ce:50:88:aa:18:10:50:2b:9d:
34:c7:21:d8:8e:62:70:bc:c5:1b:49:bc:8e:e9:fd:b1:e1:df:
97:28:cd:80:14:47:cb:12:4f:a5:cf:3e:75:53:a2:52:db:e7:
96:6e:0c:bb:7d:9a:ab:6b:1a:7a:8b:26:4f:35:e4:2a:76:5f:
ad:6c:52:39:39:58:35:0a:48:eb:89:97:4f:fe:46:fe:f8:86:
0c:90:14:e2:ea:ad:aa:7d:e5:76:58:41:91:ba:68:02:68:f0:
40:58:5b:d4:f8:aa:c1:f1:57:8f:86:85:6d:73:5b:c3:46:d9:
85:1d:a4:2f:97:6e:dc:7c:62:9e:30:54:7d:aa:7a:bd:4c:8b:
63:7e:8e:02:53:dc:e5:f6:f9:43:c6:19:2c:2e:6b:32:1a:75:
0a:2c:a5:c4:ae:47:f0:52:4c:0d:e5:51:ac:60:ce:ae:b8:27:
96:7f:28:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:02:36 2026 by rpki-client