Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: PA28rFqksgIFDzlLuS3nSAqMMHABIO/CQv0K4TUqDgU=
Subject key identifier: 08:F2:06:6D:F0:8C:7D:BD:85:A1:6A:B2:E2:AC:00:E7:EB:F0:5F:67
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 01A1754BFFD1053465238EA161F8F7DCCBC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 1ACC
Signing time: Sun 25 Oct 2026 23:01:17 +0000
Manifest this update: Sun 25 Oct 2026 23:01:17 +0000
Manifest next update: Mon 26 Oct 2026 23:01:17 +0000
Files and hashes: 1: Kd-PJMG0I6gP3eU-IVUAKt_gccg.roa (hash: guDscC6GtnjjQhv/AcT64xIdqM0iuOGm1U4WIDOTt8E=)
2: lSFi-1eTKmeoYvO7iogn6X4tIpU.roa (hash: //ICRxBUp7hn0Q5ceoMLISlFLfZ4l/LvL7doeO/ruS0=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: jc6ntoKrJex+dMHuRA5wx69xqUup6BjbK/LQOj/fd4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:4b:ff:d1:05:34:65:23:8e:a1:61:f8:f7:dc:cb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Oct 25 23:01:17 2026 GMT
Not After : Oct 26 23:01:17 2026 GMT
Subject: CN=08f2066df08c7dbd85a16ab2e2ac00e7ebf05f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:35:22:fa:98:85:92:b8:53:8b:f4:97:f9:
b9:0a:c1:0a:0f:58:55:c8:c3:5a:33:c8:22:60:49:
13:82:ae:c1:8c:36:be:ec:b1:99:13:54:75:9b:e3:
3f:96:fa:f8:1f:2f:ae:e9:13:19:0d:73:bb:b4:a6:
60:4b:65:e8:a5:cd:a3:82:05:4f:a9:b7:1c:c7:f3:
21:8e:8d:22:6c:be:13:cf:63:37:1c:4a:75:4f:19:
12:53:59:3e:c5:5f:0c:9f:37:00:3d:dc:c5:c2:96:
e1:45:91:e0:13:cb:e0:45:01:a3:a3:4c:0d:a9:dc:
09:94:af:23:22:db:e4:77:30:4b:8b:74:cf:54:33:
4a:11:61:e0:18:51:91:96:dd:8f:bd:06:c9:96:af:
00:ae:23:3e:47:ae:c0:c4:6d:3a:72:29:95:06:f6:
fb:50:13:c6:0e:79:9f:35:ad:95:3e:4d:b1:a8:6e:
67:0b:37:89:99:33:83:5b:95:0b:28:72:e9:11:ab:
48:5e:d1:17:a6:47:c2:40:c8:9b:52:5c:ea:81:d5:
f8:b1:cb:0f:31:14:0a:e1:97:a5:1b:cc:fc:c4:7e:
5c:b4:27:d3:dc:6e:4c:ad:a0:03:64:9c:d2:70:b6:
f0:f0:ba:2c:68:21:1a:62:78:e9:c1:dd:73:79:0b:
8d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F2:06:6D:F0:8C:7D:BD:85:A1:6A:B2:E2:AC:00:E7:EB:F0:5F:67
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:85:56:a4:d7:42:33:a4:2f:e7:ec:c1:50:6d:0b:31:08:96:
14:45:73:b0:01:2f:77:1b:a6:2c:5b:1e:55:a4:61:89:94:bd:
d7:f6:22:d7:b1:39:5d:83:b7:8b:da:e8:cf:9b:1c:c4:90:4e:
3a:f8:10:f7:75:c2:5c:d4:b5:1a:6d:4d:bb:3f:ea:0b:79:6d:
bd:0e:ab:25:a7:ac:e3:50:e0:fa:8f:9f:af:36:be:9c:a7:84:
e7:32:8d:ba:fc:51:a7:08:83:ce:e5:ae:2c:c0:5d:3c:0b:81:
1e:c5:50:f2:37:3c:28:5f:59:8b:84:69:76:a0:fd:f6:28:75:
10:10:c3:38:84:f1:61:fd:6f:2b:f4:ef:70:b9:2c:9f:cd:4f:
a0:ad:4d:59:29:c9:ee:b7:5f:43:a5:36:28:6c:96:b2:dc:02:
9f:8f:a2:4f:6a:d7:55:1c:b9:4d:a1:f1:e1:3c:3d:5a:b0:dc:
6e:39:08:b5:82:e0:46:09:df:0a:7d:f4:8d:0b:30:17:8d:11:
17:1e:60:33:e0:c1:2e:ec:ff:53:2e:a1:0d:53:c1:61:d5:86:
7a:70:67:55:a2:5e:27:05:ec:66:1e:bc:de:23:b8:39:d9:57:
f1:29:a8:16:e2:c2:81:00:77:31:2c:20:ae:8e:eb:22:ee:3e:
1d:cb:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:51:30 2026 by rpki-client