Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
File: xnSbIhBmFd8RMq2lGekgcJLy26o.mft (raw, json)
Hash identifier: ZNttQjiMHeDpyd7g3ppV77dfHLop9otwbkFF65FnEz4=
Subject key identifier: 51:F5:4A:B2:02:52:85:27:2A:D5:40:D1:12:E4:E6:D6:0C:5E:CC:A2
Authority key identifier: C6:74:9B:22:10:66:15:DF:11:32:AD:A5:19:E9:20:70:92:F2:DB:AA
Certificate issuer: /CN=c6749b22106615df1132ada519e9207092f2dbaa
Certificate serial: 01A08C7B862F420FCA492A3915583A904E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:40 +0000
Manifest this update: Thu 10 Sep 2026 18:01:40 +0000
Manifest next update: Fri 11 Sep 2026 18:01:40 +0000
Files and hashes: 1: eIdFh6Y2hgdzeMtjgTPa_J9JiIQ.roa (hash: gOJ1QVyv1enp2QMYeZEi64KYRWZktKrcxHdJcaTNmH4=)
2: xnSbIhBmFd8RMq2lGekgcJLy26o.crl (hash: BVJH/bVKqrsVj6auAuJ6PTUb1ZarRK0wsC3MnrKHhms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:86:2f:42:0f:ca:49:2a:39:15:58:3a:90:4e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6749b22106615df1132ada519e9207092f2dbaa
Validity
Not Before: Sep 10 18:01:40 2026 GMT
Not After : Sep 11 18:01:40 2026 GMT
Subject: CN=51f54ab2025285272ad540d112e4e6d60c5ecca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:0f:a2:60:bc:b7:c1:37:b8:e1:63:70:69:
15:db:bd:10:9c:ed:83:9d:4f:b5:79:6f:66:37:07:
f3:1d:63:dd:ef:50:9a:d1:aa:57:da:59:e9:fe:70:
b2:18:5d:60:95:ce:f6:ee:5f:1e:d7:d7:86:3b:d8:
05:83:14:a7:76:d5:fa:c0:40:b0:f8:33:36:c5:96:
b3:d1:a0:69:32:e1:f2:60:e3:40:1f:f2:33:7d:8f:
fb:b2:75:d1:a0:02:31:fc:a4:4c:36:5c:25:af:67:
72:30:63:5c:de:e5:5b:87:22:eb:b0:53:b9:b9:f2:
0a:54:48:0f:0a:69:34:e2:dd:db:fb:08:e5:2f:08:
d3:ba:04:33:a0:1e:69:c5:5a:aa:dd:d8:5a:e9:69:
82:1b:11:f1:1b:60:58:94:55:79:6e:2c:e0:1a:65:
ab:be:5f:17:52:4b:55:f4:55:35:c2:8d:77:7f:05:
cd:e5:84:b8:a9:9c:41:86:78:a5:a9:fc:5c:4e:50:
f6:a1:30:02:d4:5d:d5:ff:c4:4c:df:12:7d:11:e9:
90:25:d3:65:b8:81:2a:40:98:f2:0b:5c:7a:03:0e:
60:72:f1:09:4b:e6:05:53:0f:a0:22:16:38:59:a8:
8f:f9:64:24:64:cb:2b:10:09:69:f7:37:2a:f0:e1:
85:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F5:4A:B2:02:52:85:27:2A:D5:40:D1:12:E4:E6:D6:0C:5E:CC:A2
X509v3 Authority Key Identifier:
keyid:C6:74:9B:22:10:66:15:DF:11:32:AD:A5:19:E9:20:70:92:F2:DB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fb:db:5e:31:33:f8:22:40:65:2c:0e:55:a1:d6:07:f4:48:
5a:c3:70:57:e6:4b:6a:27:06:72:f1:a9:d1:16:90:47:ef:ec:
8d:40:e6:e2:6c:d6:65:85:fd:63:b6:06:db:18:be:2e:64:f6:
54:0a:f9:b5:10:53:0e:e7:c2:ea:a8:98:a8:d9:4c:5e:74:5f:
45:02:d1:57:81:a4:f0:95:ce:aa:a8:69:f6:23:4a:ba:66:1e:
4c:53:6b:eb:1c:60:4f:b0:1a:85:5d:61:8e:a1:5b:35:36:35:
ac:14:da:ae:80:75:4d:32:80:8a:90:40:8d:ee:39:fb:57:4e:
98:c7:62:6a:cf:75:fd:eb:27:cb:12:88:55:04:61:78:63:53:
23:49:71:48:dc:a4:06:9d:17:3a:78:a5:ff:bf:c6:f1:06:40:
1e:a6:19:d3:23:71:3e:e9:0f:1c:de:68:d6:d7:1c:31:33:11:
09:0f:d6:b5:49:52:ab:85:4d:04:fc:fd:f3:3a:fe:81:62:13:
ea:8e:d7:0b:53:cf:1a:f3:6b:d1:72:e4:da:6c:09:c4:f3:27:
a3:bb:8b:d0:13:f4:b4:1e:79:ef:44:ae:b4:19:05:8e:ef:ce:
b4:d3:a3:78:6f:94:3a:8e:91:bb:2e:a2:68:cf:8e:ec:7f:b8:
05:c3:a5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:59 2026 by rpki-client