Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier: WbYk/jyqzZBoyFdV84cOvu2W+5AOaob6Jkad1xdc7oY=
Subject key identifier: C3:71:D3:DD:45:38:23:7E:EB:79:C5:E7:CA:46:AB:83:3F:92:72:65
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial: 01A08C0D9D41148B5BFE3C9BD03F687AB564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number: 0FAB
Signing time: Thu 10 Sep 2026 16:01:37 +0000
Manifest this update: Thu 10 Sep 2026 16:01:37 +0000
Manifest next update: Fri 11 Sep 2026 16:01:37 +0000
Files and hashes: 1: wj36KuC4KkbAWGdbhxPcToGipcw.roa (hash: /SiPmXieUUyR1/NuMTzivGKUx8ZGueEIDbGfwzhdLBk=)
2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: iApnM0PsN/O9NiXzm/BH2mmq8uvYgeNcG2AEErnfYys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:9d:41:14:8b:5b:fe:3c:9b:d0:3f:68:7a:b5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Validity
Not Before: Sep 10 16:01:37 2026 GMT
Not After : Sep 11 16:01:37 2026 GMT
Subject: CN=c371d3dd4538237eeb79c5e7ca46ab833f927265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b8:5b:19:13:48:d5:93:e5:00:5c:b9:3a:fb:
6a:79:f8:e9:91:92:27:09:b0:cb:a8:f2:cc:d9:e7:
d7:f6:ef:0f:04:02:09:51:f0:28:53:6e:d8:49:d0:
80:df:b6:a0:8e:40:7f:da:55:0c:1e:18:cb:7f:0b:
ff:62:17:51:23:dc:5b:4c:3a:5e:20:62:88:41:7b:
08:ff:df:96:f1:6e:8a:0a:a4:24:4c:16:76:1f:59:
a6:a3:ed:83:5e:7b:26:47:96:00:a5:28:6f:b8:e2:
87:c5:ec:24:86:46:66:9a:2e:b8:3b:b9:c4:e2:95:
2a:80:e7:66:59:c4:07:a1:a3:5c:5d:ee:94:29:ad:
fc:01:10:73:5d:46:79:80:18:bb:80:f0:97:6a:e5:
a5:2a:30:98:98:c3:f8:59:5f:b9:b0:f0:12:d4:10:
56:da:07:42:15:c1:ba:ec:26:21:22:d5:cc:07:39:
79:66:3a:3e:1e:d7:e5:9d:7f:f2:c7:da:21:c5:a7:
6c:3d:72:13:ed:e5:61:2e:ec:69:12:c6:07:9f:01:
d9:59:17:6a:23:c6:26:52:a8:41:45:3c:02:79:3c:
08:f0:55:0f:c0:5f:57:b9:a1:c3:ef:57:44:9c:21:
fa:76:10:a8:6a:88:6b:11:05:b0:ff:4b:c9:aa:0b:
de:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:71:D3:DD:45:38:23:7E:EB:79:C5:E7:CA:46:AB:83:3F:92:72:65
X509v3 Authority Key Identifier:
keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1e:0e:1c:0f:85:95:02:d9:0c:5d:72:7d:00:81:55:36:88:
39:9a:b9:96:7f:ba:fa:0a:56:f7:f2:05:0a:d5:7b:10:9f:08:
5a:6c:f6:ea:5f:e2:32:7b:59:aa:8b:1c:2c:7c:35:0f:54:b4:
df:ee:f1:e0:db:cf:f1:cf:4b:d2:42:96:ad:78:fe:2c:b7:37:
52:b0:e6:85:a0:58:b0:09:87:85:ab:d5:f9:67:9d:c2:32:57:
77:1f:80:3f:e9:3b:9d:85:02:a3:61:53:cd:f9:6b:50:8b:b0:
2a:47:66:8d:22:31:bd:c2:e7:50:d5:27:f0:7f:ea:e4:9f:ba:
10:4a:b3:f7:ea:d3:ec:21:b2:9f:11:10:7f:0b:d6:ee:1a:16:
32:29:8e:2d:96:18:3e:1c:12:3c:5f:0d:12:fa:67:ff:16:9a:
c0:eb:bf:4c:e7:3b:c7:ed:de:c3:a3:00:e7:4c:0f:01:81:f3:
18:c0:96:75:d7:c2:28:d0:cc:f6:74:70:c3:80:41:3c:55:7f:
c8:c4:41:88:86:5c:8f:6b:26:af:10:29:de:f8:b8:82:5f:05:
d7:9b:c6:90:15:10:ea:e1:e7:54:41:d8:da:a1:e4:82:fa:dd:
99:02:65:40:f7:f6:18:c4:74:ba:5b:0a:b9:3b:45:23:cc:4d:
7d:b5:65:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:05:33 2026 by rpki-client