Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: MScijgnibLYA26RXwRh6xpIqOnp+XU9FBNIKk/QpYiY=
Subject key identifier: D0:44:6A:8B:5B:19:93:45:BD:87:D3:44:5F:C4:C3:E5:40:43:85:C4
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 01A176CC5F9C74F56D1F874AF7435078F13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 1A56
Signing time: Mon 26 Oct 2026 06:01:07 +0000
Manifest this update: Mon 26 Oct 2026 06:01:07 +0000
Manifest next update: Tue 27 Oct 2026 06:01:07 +0000
Files and hashes: 1: AorOXJjA6o7VIXG2KhmRn45N0UY.roa (hash: opct1yXiFy361tzWw8bb0wIPcRKu5irJGelwFQC/fvQ=)
2: ErvwJYNq58NBwdxg4NllytvGu58.roa (hash: L/oQiFOQUaagNx6+74y64js5tlg2OsPgxLI2bOEuDOs=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: O1xj4dxvPVwp2qv5LIGIhPz/mxZO26l6X+bLHJUzl10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:cc:5f:9c:74:f5:6d:1f:87:4a:f7:43:50:78:f1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Oct 26 06:01:07 2026 GMT
Not After : Oct 27 06:01:07 2026 GMT
Subject: CN=d0446a8b5b199345bd87d3445fc4c3e5404385c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d4:46:b3:13:fd:54:06:7b:21:6f:4b:47:f9:
17:6d:ec:09:7a:21:00:5f:83:9c:02:f9:06:31:09:
31:83:0d:b7:df:30:a9:a8:d1:30:80:b7:72:85:e3:
49:09:b5:73:c9:4a:2b:8c:f3:fa:81:78:e1:47:12:
0f:27:57:e8:ed:6d:f9:40:cc:d9:5f:54:50:23:3f:
3b:1d:94:c7:a1:6f:4e:09:3b:0c:d2:64:49:e0:78:
20:4d:1e:8c:9b:fe:6a:fa:d1:4e:a0:8f:e4:ed:60:
a7:6a:30:f0:26:d5:ad:ca:d4:2e:c9:b3:79:40:c0:
b3:99:f6:bf:5b:90:95:63:ae:0c:c6:d6:e2:a2:47:
a4:c0:0c:b4:ca:ed:4c:ac:bc:b2:ac:4b:b4:11:2d:
f4:9d:f7:0f:a2:83:d9:56:d1:8d:c9:03:36:98:7d:
62:30:96:de:7a:9a:39:7f:7d:8f:5a:1d:26:2f:87:
4a:68:f3:ad:44:db:1a:51:31:b2:44:14:1f:b5:60:
80:e1:9f:bf:80:49:7f:28:df:1b:cc:79:85:ef:0c:
37:9b:ab:71:6e:58:d1:bf:57:2d:ce:8f:81:ea:ea:
f4:5a:0f:20:dc:13:01:a5:3e:86:92:53:d0:9a:f9:
19:6f:35:bf:3d:86:b5:52:af:c6:e0:10:49:f7:c9:
46:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:44:6A:8B:5B:19:93:45:BD:87:D3:44:5F:C4:C3:E5:40:43:85:C4
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f3:1c:40:de:79:10:4e:86:c9:4d:d2:ef:02:41:63:a4:f3:
15:9e:fc:c7:2f:c8:42:f5:5f:5f:8e:44:75:88:bf:fe:ff:c5:
d7:dd:1a:00:fe:fd:ba:cb:d4:ef:9b:79:33:c6:be:59:ba:0e:
d9:10:b3:50:b5:af:e4:a2:b8:10:64:2a:cf:1b:f8:6b:1c:ef:
ff:54:35:25:07:8c:7a:91:b0:4e:f0:4a:25:81:77:60:ad:2e:
5c:3c:d8:d7:27:f9:4f:1c:d0:dd:e3:2d:a5:c4:2f:8c:15:2c:
d2:1e:9f:21:80:7c:cc:4e:d6:cf:c9:dc:06:34:16:25:60:a2:
d1:3a:6a:02:9d:38:05:db:1b:b2:f1:25:72:26:f4:fd:6d:13:
50:20:1d:d0:84:85:70:42:c5:8c:7e:ff:23:45:41:fe:24:75:
bb:60:50:39:71:0f:73:3f:be:cf:e9:ae:dc:00:74:24:0d:54:
c2:2d:aa:98:93:dc:92:8c:98:31:74:b9:b5:9f:12:55:88:0a:
41:09:31:da:80:e4:85:fe:65:95:c5:e4:90:40:91:f4:49:86:
f3:fc:80:f2:6d:d0:76:a6:4f:86:4a:8b:ec:9c:6b:33:9b:d6:
b7:88:f8:ec:24:5c:88:08:27:c3:33:00:91:89:25:cf:85:83:
64:ec:99:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:59:34 2026 by rpki-client