Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
File: xTG2PRGmzC0c5p4TEch6waanBzM.mft (raw, json)
Hash identifier: DyNklWnW7ty9Fcdcv0lbYLgBw6/EyDMW3bFyUhNu6K4=
Subject key identifier: 31:AD:71:A2:62:C0:E2:18:33:16:20:48:31:38:8A:BF:E7:AC:DA:64
Authority key identifier: C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
Certificate issuer: /CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Certificate serial: 01A06CF0183209F0F3E7F7FEAF3D920A84CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
Manifest number: 12BD
Signing time: Fri 04 Sep 2026 15:01:09 +0000
Manifest this update: Fri 04 Sep 2026 15:01:09 +0000
Manifest next update: Sat 05 Sep 2026 15:01:09 +0000
Files and hashes: 1: WGUKVj-vf2RKGeE0tMRbU2IE_NQ.roa (hash: tHeLPtV3EhtYhN1tkXzaqoA9I1M0f8QKiOJp3r6uMxQ=)
2: xTG2PRGmzC0c5p4TEch6waanBzM.crl (hash: foqtJysJlCIsSJtXf+SQSUHNjlJQQ7KNEHs0JkX6M7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:f0:18:32:09:f0:f3:e7:f7:fe:af:3d:92:0a:84:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Validity
Not Before: Sep 4 15:01:09 2026 GMT
Not After : Sep 5 15:01:09 2026 GMT
Subject: CN=31ad71a262c0e2183316204831388abfe7acda64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:9d:c8:a6:38:29:3e:0b:cf:ea:52:4e:52:
b1:43:ac:cd:73:47:5e:e3:eb:15:05:48:a3:e0:bc:
bb:e3:50:ab:4a:bd:d9:73:10:38:57:2e:63:4d:db:
99:0d:02:f3:5e:c7:2c:97:d0:81:6f:52:93:e1:ac:
9b:3a:58:38:b1:3f:5a:6a:0e:83:3d:e9:75:2e:d5:
0e:6a:c5:88:19:23:1f:85:e0:db:49:e7:09:52:59:
62:a0:52:2e:a2:a3:ea:bd:50:3d:26:37:84:7c:f9:
fd:cc:c4:79:d9:db:1f:49:1b:ad:1e:97:6e:41:ea:
fe:31:4a:16:2c:ec:f8:08:9b:19:7f:67:e4:d1:1c:
af:52:d8:54:93:64:54:53:b0:85:3b:a1:5c:bc:5e:
ad:c4:8e:95:25:86:b9:86:5b:55:53:e0:85:2b:6d:
c8:74:90:24:7a:34:93:d6:48:5a:24:8d:26:d2:2d:
7f:07:83:d9:c5:a2:c3:81:b5:b7:2b:21:ce:e6:56:
90:4b:fa:d5:64:6b:1f:18:34:70:fc:48:13:8f:ca:
f4:b0:de:2f:43:b2:0b:c0:25:e8:b4:2b:35:8f:7f:
d7:42:50:26:68:fd:de:14:92:15:37:3b:ba:88:aa:
e6:09:51:c2:13:5e:ec:10:02:0b:6d:32:4c:46:ec:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AD:71:A2:62:C0:E2:18:33:16:20:48:31:38:8A:BF:E7:AC:DA:64
X509v3 Authority Key Identifier:
keyid:C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ab:5d:fe:b3:e2:9a:63:66:db:d9:dd:87:bf:16:08:b1:e8:
39:ca:9f:01:19:3f:fb:58:85:26:d8:64:90:fa:18:a1:e8:32:
0e:50:d6:5e:34:ee:61:aa:08:1f:a3:01:f0:35:c4:69:9f:66:
4b:ba:e6:77:c3:af:f6:02:cd:a2:ba:6b:8c:51:8c:84:a5:c0:
84:7d:1d:50:52:2c:16:8b:29:5d:48:04:65:61:92:12:4c:63:
35:92:90:08:a2:68:9c:78:36:79:2c:47:11:97:82:5a:5f:26:
82:69:57:58:ea:02:4c:c6:f1:1d:ff:48:8e:f9:f5:c2:2e:1c:
6e:6c:55:be:56:3d:a2:4d:73:88:13:e6:c3:a1:e9:13:6a:13:
9d:04:fb:62:c5:f4:ca:30:cb:51:fe:d6:17:c1:c6:c2:48:a2:
ed:4f:1f:3f:4b:85:b2:1d:53:d5:74:4b:02:13:99:92:6f:a0:
3c:98:e8:6d:a2:fd:7b:ef:4b:db:d1:14:5d:74:e1:ab:50:9b:
91:c4:e2:01:84:94:86:7d:dd:c4:85:d1:35:6f:ce:3e:9d:9f:
d8:dc:23:50:e1:42:7f:b6:ac:8e:35:06:2d:20:36:26:ca:f3:
c3:70:5d:7b:7e:f2:4c:98:11:b2:fe:cd:6d:c2:83:ad:ca:cb:
6b:26:bf:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:53 2026 by rpki-client