Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File: xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier: T73T+omImCsfjugnq8BMqWMMpOVDx6mrOmuXiZM4Pa4=
Subject key identifier: F2:F3:06:EC:2B:EB:BB:46:0C:47:49:2A:84:16:2E:1B:65:43:97:F5
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 01A08CE8597F4A2B8D4A193365064CDE81FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 20:00:32 +0000
Manifest this update: Thu 10 Sep 2026 20:00:32 +0000
Manifest next update: Fri 11 Sep 2026 20:00:32 +0000
Files and hashes: 1: LS6g_qbOyr5L3M2tEJSHcqYLaGo.roa (hash: pmKUoQElX3xSvG0E8J7HtZYFqjVisgOfWkSTHkEuCRA=)
2: p_1zOjE7RDNIPM-9ijPLsTD4cC4.roa (hash: XKWGoP/7AKlCb/UQ1yCnmOl4XCSltYQxcpO0+1gE4vE=)
3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: gsYzHY1GanckmG54JvYVk49NzbIklPWcnisAwtQWggU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:59:7f:4a:2b:8d:4a:19:33:65:06:4c:de:81:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Sep 10 20:00:32 2026 GMT
Not After : Sep 11 20:00:32 2026 GMT
Subject: CN=f2f306ec2bebbb460c47492a84162e1b654397f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:23:23:46:5a:12:ca:3e:37:b5:8b:c5:69:
dd:4d:f2:a8:0b:d5:01:09:54:65:84:e7:66:28:91:
28:0b:49:20:12:eb:6f:9c:d4:10:07:e0:a6:0b:24:
ae:b3:64:c6:ae:86:ad:18:1a:a4:40:40:0c:2d:2e:
49:73:f0:24:3b:a6:13:87:a7:ca:37:e8:2f:b9:54:
c8:98:7e:c1:8a:be:45:de:1a:70:d0:2b:aa:e2:ce:
03:0e:e9:32:3e:94:47:e0:55:60:ee:2d:2f:31:85:
7d:a6:d4:27:ae:ff:81:e8:b2:12:46:83:19:eb:c4:
1b:ff:79:fe:79:c7:77:74:72:fa:50:30:8e:4d:97:
c7:27:0f:9b:35:1f:ae:89:08:02:df:6e:f3:de:1c:
f2:d3:0d:91:1b:3e:79:44:1d:c0:0a:0e:9f:98:c1:
bf:d5:ab:c6:a7:e1:0a:44:35:2f:6b:bb:3d:ac:09:
65:b7:3d:99:d8:2d:07:5b:1f:15:2a:46:61:aa:1c:
4c:a5:41:72:d3:3f:a4:62:a1:40:50:46:ff:0f:d4:
88:af:88:5c:82:98:31:54:fb:f2:e0:37:ba:2c:1f:
c3:47:62:6c:00:40:7d:e3:60:f2:81:fd:63:33:70:
49:9d:8a:3b:69:ad:97:e5:db:71:ca:49:ba:67:94:
ee:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F3:06:EC:2B:EB:BB:46:0C:47:49:2A:84:16:2E:1B:65:43:97:F5
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b5:04:a7:87:18:c5:2f:cd:27:cb:ad:c3:7d:0a:80:8c:53:
56:d6:9a:2f:c8:8a:62:b5:af:95:5e:95:88:34:0d:7e:fc:4a:
56:5b:95:a4:a5:56:09:fc:f1:cc:ba:c5:76:f4:55:c8:21:38:
7f:12:98:71:21:90:e2:6c:78:4f:60:40:b4:1b:ac:a9:a8:bd:
54:1a:d0:5c:bf:c6:47:d3:c6:96:d7:5a:46:66:73:2a:53:e1:
77:f6:e5:ac:fa:5d:ce:ad:5a:06:ab:22:ea:95:18:7f:4d:23:
d5:da:44:87:cd:4d:fc:5b:d0:f1:5b:db:3f:fd:17:ac:02:f5:
a4:4e:e0:a7:5b:6a:ac:14:86:18:16:2f:7a:d5:ad:2d:7e:23:
5f:58:cb:d8:9d:bb:23:31:bd:1b:6b:a8:1c:a8:d9:dd:86:48:
9e:0d:c5:9c:f8:ae:f1:34:81:a7:3c:9a:7c:ce:d5:ef:97:bc:
8d:dd:7d:ea:7b:94:0b:25:b1:7f:17:b4:db:48:9c:ce:f3:b9:
47:6e:7d:31:ed:1b:27:a4:78:65:81:53:51:89:05:4a:a2:14:
a4:31:0f:2b:78:74:ea:a7:c9:44:9f:5f:8c:3b:c4:eb:4f:3b:
81:da:84:ca:da:2a:21:08:07:85:e0:44:d3:28:df:1e:cb:89:
78:2b:50:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:45:15 2026 by rpki-client