
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File: xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier: PJeQonRB+sDxtTadJr1ZjCyMOZQYdkuGQ1X4h2lKlKk=
Subject key identifier: 8A:D1:B1:A0:D9:80:44:56:3A:89:0E:8A:EE:81:89:EC:25:DB:70:F2
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 01A17D3CC72BFCD6FD1D0DEA4F52A98CBAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number: 1AFD
Signing time: Tue 27 Oct 2026 12:01:37 +0000
Manifest this update: Tue 27 Oct 2026 12:01:37 +0000
Manifest next update: Wed 28 Oct 2026 12:01:37 +0000
Files and hashes: 1: bnPEqM7jNSwDSsLoYqaQdeOAVmc.roa (hash: RzuAcC2bIf2stLK6Oo7aC6xahH/u0bP2SAQTbqYBz+Q=)
2: gFBkxLXifB1pizDwpQxGt50lx-w.roa (hash: CRzzcHfWnFO/NYye+zBKmrkrfDfUSQ88HqZjIhac8Z8=)
3: jdER3phX5mbgg6aj7xFihDYqyto.roa (hash: Gf4TEMTFntYzNK0gZEShHChZxR+vxTAfCM1wkhuszWc=)
4: l85MsveVC4VRyta1Pr3Wv2Mz9Uc.roa (hash: 1339z7QQmPfUk60TSdZgZE0hq+KiRCqz1Ride8dk8So=)
5: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: oK9zjHofYHHZKEJwgn6EvtA0S8rIJPw9JxAuQR1njh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:c7:2b:fc:d6:fd:1d:0d:ea:4f:52:a9:8c:ba:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Oct 27 12:01:37 2026 GMT
Not After : Oct 28 12:01:37 2026 GMT
Subject: CN=8ad1b1a0d98044563a890e8aee8189ec25db70f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:14:a9:83:8a:9e:00:4f:42:90:ad:3d:4a:
76:12:86:f1:68:b8:40:da:12:f7:84:ed:63:14:26:
01:0e:e6:f5:df:2f:51:40:83:55:63:64:6b:a5:5a:
83:b7:23:03:21:b0:26:25:d4:c3:4b:80:12:a4:c8:
d6:3c:ea:9b:82:87:a0:5e:e9:90:50:3a:61:43:b3:
0b:97:ce:94:60:5c:8e:d1:5f:74:c3:c9:9a:98:02:
8c:db:cf:4f:e9:af:1d:1b:a4:e7:f2:7e:8f:25:0d:
12:b4:20:77:e1:b1:b1:d8:3f:58:28:2b:69:fc:7e:
6f:2e:c4:89:41:7e:d3:9c:6c:7b:f5:8c:47:80:6e:
d2:f0:b4:a5:0e:c6:9b:bf:b6:63:7d:0f:a7:2a:76:
f3:f9:0c:2d:06:71:00:30:39:fd:f9:dd:29:5d:ee:
4d:e1:30:87:b4:14:2d:df:e1:e7:24:0f:57:98:c6:
19:32:b5:87:e6:54:e7:ee:be:13:c6:a9:c4:57:41:
d2:19:aa:53:57:94:fe:2f:20:c1:bf:76:db:9d:ef:
36:40:b9:9b:94:af:c7:06:9f:46:68:e0:d8:00:b4:
37:ff:02:e9:06:05:5b:29:4e:ea:a3:de:a9:af:e1:
33:9b:33:33:0f:67:24:eb:4d:88:42:7f:e1:c6:91:
ed:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D1:B1:A0:D9:80:44:56:3A:89:0E:8A:EE:81:89:EC:25:DB:70:F2
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:9c:f2:6d:f3:00:ff:69:94:9d:fa:ac:d7:58:86:cc:c6:31:
68:f9:da:57:50:d1:44:94:e6:05:ef:2b:88:37:32:2d:40:e6:
10:02:f4:93:77:f0:f8:8f:4c:5b:4b:b3:b4:40:3d:3f:96:80:
f0:99:d6:b7:72:5d:69:c4:c3:6e:07:79:b8:b1:63:84:7c:c7:
e9:54:2f:8b:43:a8:04:d8:af:52:a7:44:83:ce:d7:d8:c8:2d:
01:37:0c:25:33:ba:71:33:ff:c8:75:81:7e:f0:aa:a5:2f:4e:
9e:dd:88:c1:c5:fe:c2:45:8b:12:18:5c:79:67:e3:dc:d8:1b:
37:11:ee:8d:e0:a8:84:04:b9:8a:56:5e:58:c1:ac:ba:29:50:
c4:32:bd:85:a8:b7:11:26:7a:b3:87:1d:15:5a:e0:09:43:e5:
4f:34:d9:2f:14:19:fe:26:51:d8:50:eb:eb:6b:07:c4:5d:eb:
6c:c4:02:2c:9a:c5:02:33:d7:f3:25:16:a0:70:d0:34:68:2e:
e0:07:4e:01:cb:80:e9:d4:55:47:22:2a:49:35:cc:17:77:fc:
16:3d:bd:c2:17:a8:f7:78:0e:97:d5:d7:1b:38:6e:1a:6c:05:
4b:98:30:6d:9b:a4:98:8f:4c:5a:54:6f:78:31:45:98:7c:7d:
00:53:7d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:30:29 2026 by rpki-client