Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json)
Hash identifier: 1JVWsSzFTMRqwfFEt6h3jTRUjP67P/czvpxZHfN9JKg=
Subject key identifier: 42:EF:C6:E9:97:87:10:BF:CA:71:87:F9:5A:13:FE:D7:E8:63:54:EA
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 01A16DC8F52A9A9AE3249AC8132587A5334C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
Manifest number: 0B10
Signing time: Sat 24 Oct 2026 12:00:48 +0000
Manifest this update: Sat 24 Oct 2026 12:00:48 +0000
Manifest next update: Sun 25 Oct 2026 12:00:48 +0000
Files and hashes: 1: 5Qm3w6W4KV4G70UEua6vpofuK3w.roa (hash: 7gjCA6HtXiqMWysrEHmsQXBLEFr30GX2eXmg9EbiYCA=)
2: mI3qnrq6SLm_VsmkKACilXewKTo.roa (hash: Q4wc/dtQ8g68gQZvC3Ka6nudxiroE6HA9EnDTB3krUA=)
3: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: LL54OGkSKWk2PSRKk4lqYL7AUSS3Mf/irMITjcVCHfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:c8:f5:2a:9a:9a:e3:24:9a:c8:13:25:87:a5:33:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Oct 24 12:00:48 2026 GMT
Not After : Oct 25 12:00:48 2026 GMT
Subject: CN=42efc6e9978710bfca7187f95a13fed7e86354ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b7:d2:fe:04:05:57:91:99:d5:b0:49:77:d3:
31:bf:74:50:af:a0:50:a8:c7:e8:4f:9e:98:5c:c7:
fa:38:fd:9b:6b:9c:5e:42:aa:40:ff:06:41:ca:f3:
94:0a:ae:7b:fc:ed:83:c3:28:df:5a:e8:44:f0:c3:
78:49:46:03:37:18:c5:73:54:d7:37:6a:4f:fa:ba:
42:15:29:28:cd:25:ad:a5:45:74:e6:8a:2f:81:d3:
29:e8:f6:bd:5f:a9:bd:17:54:98:98:97:70:40:ef:
45:61:3d:a7:a2:88:bf:df:c5:78:e0:ad:58:38:81:
d2:63:ae:a9:76:cb:56:9e:10:b1:54:b8:ef:a1:f4:
8a:c4:68:2e:4d:48:0f:4f:0c:73:60:d2:9e:7c:a7:
bb:9b:2f:e6:2b:34:3e:7d:c4:ee:c1:5d:3c:07:e6:
95:17:9f:ce:ed:62:18:01:e3:99:d8:2a:29:81:5c:
eb:ce:ac:36:b8:fc:26:b0:e9:94:78:ae:fc:fd:43:
43:ac:e6:44:88:9e:b4:72:88:0e:58:71:2b:e7:0e:
73:37:ef:51:8a:10:5a:1f:c2:da:0d:ed:d7:1d:d2:
f2:5d:59:b0:8d:e5:e6:1b:52:d9:25:20:cf:83:08:
77:2c:af:65:7b:93:3b:1c:cc:7a:6b:09:d7:ed:dd:
45:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EF:C6:E9:97:87:10:BF:CA:71:87:F9:5A:13:FE:D7:E8:63:54:EA
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:77:7f:4d:1d:3e:c0:b7:ff:d0:a9:a9:ac:88:71:b0:3d:87:
94:18:2a:f7:43:f3:d4:91:e6:f2:7e:14:63:ea:d9:f8:53:55:
bd:dc:38:b4:47:92:8a:de:31:5c:02:5d:87:37:3b:81:77:ea:
e0:37:f7:22:93:21:6b:8b:7c:ac:cb:22:e8:e5:4e:ef:ad:b8:
2b:59:ee:f3:9f:61:3d:b7:f8:16:69:b2:48:f8:5f:1f:7a:79:
63:e7:c4:89:72:9c:78:6a:c3:cc:0f:86:bd:d2:15:fa:03:fb:
d5:ae:ae:d6:06:d2:f1:2b:13:9a:06:df:0f:ec:fa:48:24:f4:
3d:73:ac:f3:41:80:01:97:ad:96:26:2a:33:68:83:8a:0c:92:
a9:39:aa:bc:a3:fe:0d:f5:15:d2:3c:d1:92:da:b2:66:55:5c:
6c:6c:10:4e:88:d0:de:66:07:74:f0:7b:9e:04:6e:c9:41:4b:
98:f0:ba:7e:b7:a1:61:fe:85:dc:ac:f5:b5:36:bf:81:48:fb:
11:cd:bd:a4:4b:fb:23:11:90:2c:76:54:1c:f4:37:71:9a:15:
ac:17:23:12:fe:a7:e0:96:7a:92:b3:1b:f2:e6:74:fa:fd:63:
b9:4e:a5:fe:92:19:98:bf:93:bf:93:53:4e:95:b2:65:a9:3f:
72:aa:59:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:34:58 2026 by rpki-client