Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: Tr9vnDfh2b0NJT/dVLQgKbm7Xz023O1Vg0ZARbVF/s4=
Subject key identifier: E0:E1:01:5B:72:97:64:2A:9D:59:40:F8:7F:BF:FF:23:F4:D2:23:5A
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 01A08B67F5C58380FA953314BF44AEC270E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 13:00:41 +0000
Manifest this update: Thu 10 Sep 2026 13:00:41 +0000
Manifest next update: Fri 11 Sep 2026 13:00:41 +0000
Files and hashes: 1: FX91S7TqeS_5eNXFwkhAJLeDMDY.roa (hash: 7/g0n2srHScQb2lUJNavUfjGDwgVOP/uF61M1Zy+4aU=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: Ste1acJuFkcWOWABGV2YQrV03ZYtQczKzdo4dZMFMho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:f5:c5:83:80:fa:95:33:14:bf:44:ae:c2:70:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Sep 10 13:00:41 2026 GMT
Not After : Sep 11 13:00:41 2026 GMT
Subject: CN=e0e1015b7297642a9d5940f87fbfff23f4d2235a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a2:ab:86:ba:0f:eb:db:28:ec:de:cf:c4:28:
6b:46:8c:96:e6:68:c0:80:08:9e:91:b6:02:e6:4b:
df:fd:0a:30:ca:5a:6e:ae:9a:54:da:d4:77:de:8d:
1f:aa:e9:6a:9b:62:96:e4:a7:e6:c6:64:65:a5:d1:
ab:f3:de:56:c9:b2:a8:a0:fa:28:b5:ca:45:5e:1f:
a5:74:75:a8:34:f5:e4:1f:41:8a:b8:40:2d:46:75:
46:ff:a6:f8:eb:05:e9:78:2d:99:93:34:4b:5c:b4:
5d:d6:f8:85:76:98:8f:b3:2f:93:7c:e5:61:22:c4:
24:51:40:6a:15:18:84:59:1e:1d:17:4a:03:d4:18:
2a:69:51:9a:b0:ce:49:cf:69:7e:f6:a6:5d:83:9a:
b4:0d:bc:7f:4a:8d:6e:20:b2:ec:45:1a:1e:58:bf:
0b:18:4e:b1:95:23:ac:97:f5:cc:97:7a:40:5a:46:
ee:96:4f:72:31:3f:14:9d:1c:38:df:76:90:74:32:
2d:54:92:b0:19:92:13:6d:7c:ae:39:08:9b:9a:8f:
10:10:01:60:1b:14:d1:ee:7a:37:0a:f4:c7:1c:ce:
b3:d1:da:54:60:bc:7f:d4:23:72:48:04:b1:7d:07:
b6:d3:da:00:ca:a5:c5:03:c4:a4:1c:af:cc:f7:58:
47:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E1:01:5B:72:97:64:2A:9D:59:40:F8:7F:BF:FF:23:F4:D2:23:5A
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:75:ed:4a:c3:e6:0e:96:de:dd:31:c4:8a:ce:a3:08:9d:d8:
fe:b7:c6:3f:12:eb:f3:77:c3:03:49:17:d0:6d:d1:ca:d9:ee:
b3:71:07:8d:2b:a5:51:60:20:cc:48:a1:40:a6:3d:66:91:83:
63:4c:21:f3:6a:82:48:5e:19:5d:aa:50:59:ac:58:48:ea:d0:
b2:f3:7e:15:2d:57:ac:5f:08:1c:a7:0e:52:7c:de:ae:85:82:
4b:67:f7:18:83:9b:3a:28:97:c8:9f:d9:79:86:86:86:a5:6a:
94:e4:27:42:b6:9f:46:90:a7:36:d8:2d:d3:b2:a3:6c:fa:fd:
cd:3a:70:1c:e7:99:46:65:ca:88:8e:f3:d2:b9:b1:89:b1:c0:
71:86:ed:76:53:fc:40:84:b8:8c:aa:6a:a4:e2:c7:2d:21:52:
c1:2d:fa:be:aa:df:7e:a1:4b:74:c4:3e:5c:18:99:f6:c8:6f:
b5:af:03:20:f4:83:c9:3e:36:99:a8:ec:0f:20:3e:34:57:50:
03:d8:78:89:53:08:d6:1e:44:56:ff:d9:32:8a:a2:72:95:b4:
cd:46:fa:85:eb:45:ab:af:fa:24:0b:f9:52:b5:ce:00:20:f5:
51:80:77:2f:1a:ad:51:f1:f8:b5:03:dc:fd:07:b4:aa:a7:35:
8a:ae:b4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:51:49 2026 by rpki-client