Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
File: xnSbIhBmFd8RMq2lGekgcJLy26o.mft (raw, json)
Hash identifier: U9s5/IN6V4vnZdjLmCKEQjJyQvqwiHsE1FgwZaJG+Yg=
Subject key identifier: A6:CC:C4:ED:0A:F8:0E:D0:62:DF:BD:00:78:19:67:95:26:8E:50:A8
Authority key identifier: C6:74:9B:22:10:66:15:DF:11:32:AD:A5:19:E9:20:70:92:F2:DB:AA
Certificate issuer: /CN=c6749b22106615df1132ada519e9207092f2dbaa
Certificate serial: 019FA0DFF27B9F25155F4914222FF398497D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:00:58 +0000
Manifest this update: Mon 27 Jul 2026 00:00:58 +0000
Manifest next update: Tue 28 Jul 2026 00:00:58 +0000
Files and hashes: 1: eIdFh6Y2hgdzeMtjgTPa_J9JiIQ.roa (hash: gOJ1QVyv1enp2QMYeZEi64KYRWZktKrcxHdJcaTNmH4=)
2: xnSbIhBmFd8RMq2lGekgcJLy26o.crl (hash: C1sf/fWtAh5+A+yNFPwROCdetd+G19nm+5jZM0YTX0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:f2:7b:9f:25:15:5f:49:14:22:2f:f3:98:49:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6749b22106615df1132ada519e9207092f2dbaa
Validity
Not Before: Jul 27 00:00:58 2026 GMT
Not After : Jul 28 00:00:58 2026 GMT
Subject: CN=a6ccc4ed0af80ed062dfbd0078196795268e50a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:00:ce:9b:81:f4:7a:c0:48:79:d0:38:0e:31:
2e:11:1a:cb:95:75:bc:d0:9d:6a:59:9a:75:6f:9d:
1f:a2:59:fe:ae:d5:71:ff:53:0a:26:39:00:d5:c4:
0e:58:81:8b:1d:55:f1:b6:ab:66:8d:09:a3:58:57:
e9:70:af:46:22:61:43:15:98:cc:07:57:a1:3a:4a:
da:ec:19:50:3a:4b:6f:e1:9f:5f:2e:6d:59:14:d4:
18:17:d0:f7:f8:0e:71:1d:ba:92:07:6c:77:4a:77:
11:ad:8b:51:74:6c:b8:87:7b:43:5c:1e:0a:91:20:
a0:79:75:21:d0:15:b2:fe:75:47:42:f2:96:05:ba:
27:f1:e0:74:1d:43:29:1e:e2:24:f1:34:75:70:fc:
02:f7:45:8d:10:ce:b0:af:dd:8e:fe:4d:99:17:1c:
7b:0b:b2:ab:84:48:c1:ba:bc:9a:75:07:44:c8:92:
79:87:f0:90:8f:56:33:bf:e1:3e:eb:b8:a1:af:a3:
7c:5c:1c:3c:6d:78:ea:5a:c9:6a:33:91:b9:11:3e:
60:12:f0:88:fe:36:04:72:48:af:b4:27:e7:2c:8d:
a3:be:19:25:01:be:32:5e:61:25:93:d1:83:ac:39:
bd:2c:a9:68:36:1e:99:c2:f5:3f:c0:6a:e4:50:60:
d2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CC:C4:ED:0A:F8:0E:D0:62:DF:BD:00:78:19:67:95:26:8E:50:A8
X509v3 Authority Key Identifier:
keyid:C6:74:9B:22:10:66:15:DF:11:32:AD:A5:19:E9:20:70:92:F2:DB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:93:60:5c:4e:bd:68:b5:9f:8d:9e:d6:7a:0e:50:bd:2b:fe:
4b:87:21:98:24:17:04:ee:2f:78:68:0c:4b:1c:7e:5f:a5:18:
e3:18:b1:88:b3:52:3f:59:40:11:d5:18:cd:3e:9b:96:62:9c:
4b:bb:15:f7:e1:d0:d9:3f:4c:2d:08:07:8d:f1:f9:2f:27:7c:
aa:4d:76:62:85:3b:f5:bc:18:64:ab:b7:27:aa:94:9a:c3:fe:
a9:cd:a3:8b:15:b4:c2:d9:cb:d2:25:f4:9e:40:f1:ba:07:09:
98:3d:95:7a:43:7a:ba:61:6c:da:3c:13:c8:b6:d4:76:e6:e4:
51:82:17:80:f4:d4:9b:0a:08:4b:3d:44:58:e9:a4:6c:6c:44:
0e:65:34:2c:86:0c:13:66:a7:81:c5:9c:85:7c:c0:6f:57:67:
e8:a4:b2:4f:c1:a3:26:99:f9:ec:3c:1d:08:28:0b:70:47:fb:
09:ce:62:10:5f:22:9e:08:57:70:df:1b:6a:69:32:3e:50:4e:
16:d6:9b:c6:47:5b:f2:7a:12:4b:c6:54:80:3a:e2:fc:ba:20:
62:c5:48:81:7c:63:ab:30:ba:bc:66:9c:60:b6:31:af:2c:c6:
25:6b:1f:22:5c:17:10:82:68:c8:75:20:1d:f0:ec:93:5d:66:
e7:cb:7c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:54:58 2026 by rpki-client