Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json)
Hash identifier: kBCNkvrw3X7VW3BM1kRPegA+MhzpAPFcdq9xd9m7I3E=
Subject key identifier: 6A:63:D1:29:A0:57:C2:48:E4:CC:DF:80:4C:CA:4C:E7:12:0A:6A:4A
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 01A16BDA921FBB779BD6C75CD497CFD27433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
Manifest number: 0B0F
Signing time: Sat 24 Oct 2026 03:00:48 +0000
Manifest this update: Sat 24 Oct 2026 03:00:48 +0000
Manifest next update: Sun 25 Oct 2026 03:00:48 +0000
Files and hashes: 1: 5Qm3w6W4KV4G70UEua6vpofuK3w.roa (hash: 7gjCA6HtXiqMWysrEHmsQXBLEFr30GX2eXmg9EbiYCA=)
2: mI3qnrq6SLm_VsmkKACilXewKTo.roa (hash: Q4wc/dtQ8g68gQZvC3Ka6nudxiroE6HA9EnDTB3krUA=)
3: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: K+3HvmJc5a7hGf/vr+GaBRJHJMXpqwbd5Aa7FyTNSAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:da:92:1f:bb:77:9b:d6:c7:5c:d4:97:cf:d2:74:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Oct 24 03:00:48 2026 GMT
Not After : Oct 25 03:00:48 2026 GMT
Subject: CN=6a63d129a057c248e4ccdf804cca4ce7120a6a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:15:de:4e:05:7f:72:48:0a:44:17:68:c2:
d6:be:18:0d:5a:f7:f3:72:49:c3:ae:a8:59:10:5c:
2c:89:ac:c6:e7:d5:04:fa:84:fb:c8:21:31:40:69:
99:ba:61:0f:ae:9d:20:12:58:e7:08:b0:6e:ac:de:
64:cf:bc:c0:db:aa:f4:fa:24:82:77:93:c5:e2:d2:
16:f4:44:1c:aa:1a:db:1a:2f:79:96:8d:2a:64:83:
fd:49:fe:06:f3:8e:7c:34:76:8b:41:34:ea:da:c1:
24:95:1b:54:a1:ef:6e:ac:be:d5:a7:92:74:34:0b:
5f:54:cc:0c:0a:e0:19:0a:c2:f7:7e:54:dd:41:4a:
9e:84:c3:09:72:f9:af:54:2a:36:69:51:7c:22:78:
24:4e:10:b0:b2:8a:82:0a:27:e8:94:7d:a4:4e:8c:
14:7f:9f:25:37:d7:cc:7f:32:dd:64:71:2a:53:9b:
63:06:97:f8:a4:d0:47:6c:17:8a:c9:97:20:b5:0d:
07:54:70:b9:53:78:86:83:0d:2a:1f:c0:53:a7:c3:
f0:b7:2d:c5:5d:5b:94:e1:d8:6c:03:a8:58:26:40:
b6:66:0f:78:73:81:19:cc:85:6c:99:25:d2:3a:80:
43:4b:d3:b5:d2:85:73:7c:df:bc:cf:13:fd:fc:3e:
b6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:63:D1:29:A0:57:C2:48:E4:CC:DF:80:4C:CA:4C:E7:12:0A:6A:4A
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:53:88:67:d8:1c:70:79:3b:23:18:99:b6:ba:9e:02:a0:d2:
0b:88:e8:b4:bc:71:3f:89:2f:3b:e8:ed:1d:d2:79:8a:54:04:
9e:b0:db:53:1a:4e:2e:95:1c:b6:58:fa:e5:c8:31:42:11:6f:
4e:14:35:0e:a9:23:3e:f4:39:d4:de:09:56:14:5a:00:f2:10:
bc:8e:9d:42:d7:a2:ab:1d:5b:8f:2e:7e:ca:a3:be:9f:2f:39:
ec:8f:ef:16:62:25:aa:ae:f2:7f:dd:73:9f:f8:f8:15:b4:fd:
45:c7:5f:5f:28:33:db:b3:a5:85:7b:94:5b:28:f4:08:b2:d0:
e1:56:00:44:35:6c:49:01:c2:a5:08:03:f3:dd:72:70:4c:41:
25:16:e4:fa:e6:78:64:cc:7e:af:cf:aa:d9:b7:ea:05:f5:f0:
49:05:d8:b8:0b:dc:a1:18:bf:98:c7:03:72:3d:1e:1a:7b:c9:
fa:70:02:74:12:f6:32:01:83:28:6f:b3:7c:97:46:64:8c:ac:
77:d1:bc:52:79:ef:7c:5a:95:40:b5:a3:6a:8e:0b:0f:8c:a9:
c8:49:cc:84:4d:79:ea:7b:95:95:97:3a:72:a9:8b:9a:ad:70:
e9:f4:6b:f7:23:72:37:2d:28:bf:e7:d2:4f:1d:fd:ec:6e:7e:
87:c7:40:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:38:47 2026 by rpki-client