Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
File: xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json)
Hash identifier: 6Y6KBN8I+a9fFpQ2VovF66IRKsynPP4YoLKZUBBeOFQ=
Subject key identifier: A7:8C:75:3F:D8:AF:4E:AA:D9:A3:CB:7C:CD:95:4A:74:28:98:81:7F
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial: 01A177A826CDABD1B2C6071B221BCCBFF3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
Manifest number: 10E0
Signing time: Mon 26 Oct 2026 10:01:10 +0000
Manifest this update: Mon 26 Oct 2026 10:01:10 +0000
Manifest next update: Tue 27 Oct 2026 10:01:10 +0000
Files and hashes: 1: J94Ph5ck7enH36KLAo0q7sehkDs.roa (hash: tFAQN7l0foOD5FNqpnDpo4ufVC2+YXU4Iia2mg6KkgY=)
2: oe9_BUEcNMQXUPeMx0Pcsnv2N20.roa (hash: 4+asMob/DRGngq6GAVzO2x+uYasSdWuu4BCpYVlKFoo=)
3: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: Fw/rxufzYmP4+Oqu8KsJ0h1GRiAMO7KdidydeectADA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a8:26:cd:ab:d1:b2:c6:07:1b:22:1b:cc:bf:f3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
Validity
Not Before: Oct 26 10:01:10 2026 GMT
Not After : Oct 27 10:01:10 2026 GMT
Subject: CN=a78c753fd8af4eaad9a3cb7ccd954a742898817f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:71:25:b1:0d:ff:47:40:42:fb:02:c5:42:20:
57:64:01:4c:f4:bf:0b:5e:79:eb:4e:80:29:d8:57:
39:e8:f6:90:1f:11:c4:0c:56:c7:e3:74:1b:ed:6a:
57:19:a2:e2:1c:ea:95:f1:b3:1d:e4:54:cc:70:86:
63:f4:bd:ba:a7:a4:a7:cc:32:6b:bd:3e:1c:59:ce:
b6:c9:50:3e:9f:5a:0b:76:07:00:87:db:02:53:cb:
80:f0:01:92:41:e3:43:46:a7:8a:2c:fc:9b:23:20:
ed:13:e5:0b:4e:4c:f0:8b:82:4f:7d:90:82:09:bc:
a6:30:6c:f4:ad:48:bd:2f:1b:3a:ac:af:05:71:f6:
fa:7a:75:15:81:fb:79:83:f7:7b:2c:f1:42:ae:dc:
bd:4b:6e:a5:9a:ee:8b:6b:2e:b2:0f:88:75:3e:5e:
c3:3c:8c:73:99:4d:ee:8c:7e:5f:0a:2a:7c:8d:49:
fa:d0:d7:08:bb:e1:6e:df:f0:a3:cf:2b:c0:82:f3:
65:dd:9f:b9:0b:66:3f:bc:6c:d2:cd:1e:e0:3d:a4:
a6:57:10:24:5e:20:fa:58:91:8c:66:8b:13:29:6a:
34:0e:10:79:b6:04:8f:63:26:04:6c:99:23:5e:f4:
86:f1:32:94:15:8c:be:46:b1:ad:78:9c:c0:b9:30:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8C:75:3F:D8:AF:4E:AA:D9:A3:CB:7C:CD:95:4A:74:28:98:81:7F
X509v3 Authority Key Identifier:
keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:aa:1e:fc:87:07:0d:94:79:0c:0e:ed:cd:79:7f:01:16:13:
e0:10:f6:6c:f6:1b:01:82:15:69:d1:14:11:5e:7f:dd:ad:f9:
7b:e6:ac:0c:37:df:dc:70:51:61:e2:b3:16:36:37:1d:2f:0e:
9a:d4:85:1e:a4:4a:ac:bd:7e:3d:47:8d:40:34:73:c0:00:55:
3f:49:94:e5:df:5b:4c:23:16:3b:0d:03:01:98:36:49:7f:7f:
57:65:4a:c8:96:13:50:29:f4:f3:9c:61:c6:e3:3c:9f:87:72:
a7:f5:b2:2e:db:66:00:37:2b:47:a9:ad:57:a9:69:80:7f:7d:
3b:70:a7:63:7d:44:8d:8f:d3:d1:22:d4:4b:e4:3c:3b:25:05:
0b:a8:4f:db:03:d1:f8:7f:2f:72:21:9f:c1:f9:05:a9:cf:35:
95:15:f1:4a:13:93:5c:c1:4a:cc:ff:82:e6:ac:6c:4f:dc:6c:
95:5e:e3:30:04:b7:7b:ca:59:cd:81:aa:dd:5c:27:ce:2e:39:
dc:2f:55:02:e3:62:f7:32:7d:1d:ef:e3:e8:d5:b8:98:06:98:
d3:93:53:eb:22:a4:e3:72:06:48:45:19:c5:25:c2:75:a6:40:
97:b4:bd:8d:51:b3:90:b3:d8:7f:1a:08:cb:9c:6a:27:10:a3:
3b:8d:c7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:22:39 2026 by rpki-client