Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File: xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier: dd5SHZRlm6OP+3ytiNuZ7siGT2aT8G0bMKcNX41w+XQ=
Subject key identifier: EA:C9:F1:9C:5E:A5:F9:D3:3B:4F:07:E2:3C:28:AC:73:86:79:62:00
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 01A17C60356E1CB6B0FA695F6F13255DD024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 08:00:42 +0000
Manifest this update: Tue 27 Oct 2026 08:00:42 +0000
Manifest next update: Wed 28 Oct 2026 08:00:42 +0000
Files and hashes: 1: LS6g_qbOyr5L3M2tEJSHcqYLaGo.roa (hash: pmKUoQElX3xSvG0E8J7HtZYFqjVisgOfWkSTHkEuCRA=)
2: p_1zOjE7RDNIPM-9ijPLsTD4cC4.roa (hash: XKWGoP/7AKlCb/UQ1yCnmOl4XCSltYQxcpO0+1gE4vE=)
3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: 7UCXpu5NFzJ0dhrPEajIH1Dw1BUG6kyLtbPlGu92jVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:35:6e:1c:b6:b0:fa:69:5f:6f:13:25:5d:d0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Oct 27 08:00:42 2026 GMT
Not After : Oct 28 08:00:42 2026 GMT
Subject: CN=eac9f19c5ea5f9d33b4f07e23c28ac7386796200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:0a:b6:16:46:94:26:f6:04:05:fb:05:50:
41:76:55:aa:6b:11:bf:78:6b:5d:af:81:3b:a9:ae:
50:31:ee:c8:ad:5c:cf:05:08:5b:d1:ca:d7:b1:4b:
26:1c:05:6e:c2:62:b6:77:95:bc:c1:ea:64:75:31:
09:b8:ad:d1:5a:f3:51:27:63:35:db:a1:8f:7a:e6:
2f:e8:38:89:a4:c0:d1:3a:df:a0:b5:e6:76:17:23:
ae:c2:dd:53:1e:d7:7e:b6:7a:e1:01:2a:85:b4:e2:
ad:6d:9e:cf:14:08:91:22:47:8a:6c:be:2c:84:fc:
8e:95:2d:78:0f:0f:5a:de:52:87:6f:38:94:d9:e5:
b6:52:df:03:b6:e1:2d:3b:fb:0e:57:d3:b5:c5:1b:
02:3d:d9:c7:59:04:9a:b0:f3:f9:f5:cf:43:b8:36:
52:3a:7e:0f:ef:d6:ea:98:78:59:d3:af:64:cd:2c:
04:b6:d3:b7:27:74:bc:1e:10:55:0c:1f:64:af:36:
25:57:b7:39:7f:6f:a1:3e:18:6f:01:a6:8f:16:b1:
2f:42:4a:db:b7:5d:41:dd:7b:4e:ea:16:30:9e:06:
10:47:f8:75:c8:b3:ee:8f:d0:9f:00:5d:e6:70:97:
c3:4f:a4:fd:48:95:66:36:25:39:1e:05:78:bb:4f:
35:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C9:F1:9C:5E:A5:F9:D3:3B:4F:07:E2:3C:28:AC:73:86:79:62:00
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:65:db:38:02:75:8f:95:bd:ec:d7:db:2c:57:34:dd:03:a2:
10:27:b1:61:46:c5:88:ee:dd:d3:2c:1c:d5:cc:2c:49:94:2e:
5c:f2:25:d0:27:7e:f7:cd:9e:fc:4f:eb:ae:60:99:ca:c0:ee:
df:c6:fe:25:31:e4:a4:23:9e:c5:5c:b2:70:7e:80:a7:6a:d2:
d4:8d:20:17:99:f0:3f:73:90:a6:d5:0f:fe:0d:45:a4:20:f4:
16:42:0e:93:0e:5e:ff:1b:76:d7:b3:94:3c:42:a7:4f:f1:fb:
82:6d:d7:f3:5d:51:3f:94:1a:48:92:29:b2:de:01:bb:f2:a8:
97:3e:42:31:fe:c2:7e:be:51:ce:93:3a:5f:e2:a8:9e:da:04:
2b:a4:0b:7a:eb:35:e4:29:32:ab:66:32:fe:76:51:f8:bd:aa:
dd:ef:b4:36:6a:81:16:cc:96:09:c8:4a:88:0d:af:ff:cc:62:
eb:8c:63:c0:a8:ef:95:83:91:9f:f9:14:b6:86:55:02:5a:d6:
79:29:f3:7e:11:34:87:9c:a9:7f:bb:82:cc:94:cb:02:29:6d:
ad:fd:11:46:37:13:e5:78:1f:4b:5e:78:14:8e:11:36:3b:2b:
fd:08:92:92:a9:5e:de:25:4a:af:20:0b:99:f6:bb:3b:0c:19:
96:f7:48:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:35:46 2026 by rpki-client