Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
File: xx85HWDhoTnMxCsXoyqVNj31z7A.mft (raw, json)
Hash identifier: 36pqWGsPzkaGS1LJ/8n/GXh6qi4DLQKZGx3zHi0XLJ4=
Subject key identifier: 13:3E:5F:E2:8E:C9:AF:76:17:D8:F5:5D:2C:F6:35:DA:4F:FE:F1:19
Authority key identifier: C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
Certificate issuer: /CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Certificate serial: 01A08B9F0ABD6AFE299F6CA65D21D2F2969E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
Manifest number: 0366
Signing time: Thu 10 Sep 2026 14:00:51 +0000
Manifest this update: Thu 10 Sep 2026 14:00:51 +0000
Manifest next update: Fri 11 Sep 2026 14:00:51 +0000
Files and hashes: 1: 5Ac1xGg2xzacy1Elgpwm7Fl9gOY.roa (hash: VWmcJPkpnJaJdz3GW3aT+bj0R6mJFxMSWGrX3LD0Zyk=)
2: xx85HWDhoTnMxCsXoyqVNj31z7A.crl (hash: ljejvbEqRUsrfU8DJPxJPlNUs4xY9nfUPvaUW6/4Wn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:0a:bd:6a:fe:29:9f:6c:a6:5d:21:d2:f2:96:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Validity
Not Before: Sep 10 14:00:51 2026 GMT
Not After : Sep 11 14:00:51 2026 GMT
Subject: CN=133e5fe28ec9af7617d8f55d2cf635da4ffef119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:c9:2a:fa:09:38:4f:5d:ea:26:bd:0d:14:
ea:c6:8e:87:1b:a4:99:8e:03:74:76:ba:3a:d4:6b:
82:5f:59:ba:ea:2a:bc:71:06:69:a2:10:57:45:11:
68:06:5a:91:0d:91:70:c0:fe:b1:e0:31:07:ab:9e:
6f:52:40:1c:68:af:21:ae:f8:d2:26:c9:c8:ff:36:
e0:9d:ff:1d:43:a5:25:8c:e3:44:da:ee:7e:55:be:
26:c1:e2:fd:b3:7d:4f:75:34:23:29:3d:86:5d:d6:
f5:6a:66:87:16:26:35:f1:2c:de:be:7e:b1:24:d8:
45:61:e6:06:11:fa:64:a8:3e:0b:9a:da:98:ad:f3:
b9:3c:6f:29:87:52:00:f7:8b:7a:5f:2b:19:b6:f9:
25:a1:c9:55:3b:73:4a:96:00:46:df:89:d4:9f:bd:
7d:cb:05:87:71:f5:1e:2c:22:5c:61:61:16:4c:99:
32:dd:54:1b:f6:d7:3a:46:21:02:8b:b7:41:4b:60:
54:1b:5a:eb:69:58:28:17:93:86:a8:e9:38:20:86:
c4:68:22:d8:6b:39:72:98:97:e0:68:4e:f3:b7:20:
7f:5a:d6:3f:73:ed:91:44:5b:ee:ec:53:6e:fb:a1:
b9:8a:af:23:ad:2b:40:71:b1:7d:5a:49:c1:82:a0:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3E:5F:E2:8E:C9:AF:76:17:D8:F5:5D:2C:F6:35:DA:4F:FE:F1:19
X509v3 Authority Key Identifier:
keyid:C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9e:20:13:57:3f:55:d6:29:e5:00:72:e9:73:6e:f7:1f:f3:
fe:6c:39:86:8d:45:84:4b:3e:c2:23:e4:44:43:96:40:ae:89:
c6:06:1b:04:07:79:48:a1:b2:22:8f:2a:ca:fd:26:03:b3:43:
4f:03:1f:98:a6:b1:4a:67:da:70:df:e7:ae:5f:1c:2a:40:4b:
ea:02:a7:24:24:3a:34:75:2e:bc:2c:2d:41:9a:14:9e:40:e6:
39:a1:62:bd:c5:b7:34:2a:d8:30:63:c4:ee:52:db:bd:af:d0:
35:a7:e8:5d:78:f7:d1:4b:72:c6:53:12:e0:1f:e6:b9:0d:2e:
83:d9:36:26:2d:e6:46:1b:1a:11:c2:f2:e6:d4:1f:b6:59:8a:
1b:c8:85:d9:c1:cc:f9:34:fe:63:51:47:61:53:43:ee:d7:7f:
a5:9d:c0:44:a4:76:19:fc:21:1a:36:84:d9:83:b2:fb:ed:fc:
eb:59:9e:85:f5:ee:f2:a8:64:a4:cc:d1:98:31:10:2f:15:0b:
e7:95:e9:a9:e2:62:19:47:e5:23:cf:dd:a4:b0:41:50:66:9e:
d3:76:94:36:25:9b:46:2d:23:1d:b3:09:0b:91:a1:45:a5:2e:
8b:a4:5c:23:b0:63:8e:51:fa:03:6e:69:79:c5:6c:1b:4b:f9:
d4:7e:d8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:41:12 2026 by rpki-client