Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: lvKPkD+I4t4A8SvFzwXveydDz8EQp25OHQQhuxC0TWE=
Subject key identifier: 63:DB:D4:46:4A:C7:8D:FD:E8:C5:64:62:2F:2E:D5:93:C2:7C:BD:EC
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 01A06F1631C41499252133EF980DDFDBD470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 1A3B
Signing time: Sat 05 Sep 2026 01:02:00 +0000
Manifest this update: Sat 05 Sep 2026 01:02:00 +0000
Manifest next update: Sun 06 Sep 2026 01:02:00 +0000
Files and hashes: 1: Z4BDlr57O_FweazPHma0rDQN-Eg.roa (hash: RRUvm/U5FkAyaYrRTEjgZo8457PWupRX0eiUbSuUq0U=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: mjIDQe2toCRNgH46Y8XEIrHllW8JZ9Yw4Le2QSyypyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:16:31:c4:14:99:25:21:33:ef:98:0d:df:db:d4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Sep 5 01:02:00 2026 GMT
Not After : Sep 6 01:02:00 2026 GMT
Subject: CN=63dbd4464ac78dfde8c564622f2ed593c27cbdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:5a:ca:d6:3a:15:73:ff:b2:09:e9:1f:89:
47:cd:f9:0e:d9:d0:61:07:53:bf:a9:ac:a6:bf:b5:
6a:fc:b4:6d:37:08:e1:f7:7a:1e:5e:df:4d:1d:f6:
ee:6f:1b:ce:ad:0d:dc:10:b2:7b:f6:46:83:fd:e3:
f9:98:7d:ca:e7:3c:ee:82:eb:95:3f:64:16:c0:3d:
48:ed:f6:c7:44:31:1f:69:2e:3d:82:36:d7:0f:42:
49:8f:04:45:9a:10:19:eb:d5:9a:e4:5c:d9:47:c8:
ab:31:07:b3:32:0e:38:af:0f:88:0e:28:a5:69:31:
0b:46:55:c9:6b:5c:5a:d1:02:c8:5e:3e:10:93:85:
d8:8a:92:21:ae:b8:8e:31:e0:cf:26:a0:9e:d9:8b:
eb:e7:2d:b3:df:7e:f9:02:da:f8:8c:72:a7:06:c2:
1b:77:56:94:88:82:d1:5b:b9:87:49:44:15:1a:b1:
f4:98:e6:51:62:5b:69:e7:6d:36:31:70:12:e4:56:
c2:06:1f:6f:97:85:5e:02:22:a5:3e:09:d3:cc:2a:
78:53:21:a5:21:89:76:05:8c:14:d5:e1:bb:2d:b7:
54:9c:cf:0a:09:8e:ea:4a:7a:da:ff:8a:30:3f:bc:
99:8f:03:21:53:32:1f:fb:72:e4:89:d8:da:a6:2c:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DB:D4:46:4A:C7:8D:FD:E8:C5:64:62:2F:2E:D5:93:C2:7C:BD:EC
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:39:cd:35:20:d2:49:98:42:c2:34:ec:e3:f8:8a:59:a5:65:
da:ec:91:e3:15:89:ee:4a:0e:99:f0:39:55:b9:3d:e7:0e:40:
86:62:ec:7e:2f:19:18:13:c7:81:20:d2:2c:60:9e:02:f9:da:
4c:1f:22:e6:61:71:56:aa:df:9c:48:72:86:84:ed:d0:3c:d6:
4b:75:18:07:83:59:33:84:f4:13:d1:c7:d4:c7:d7:a7:35:0b:
39:50:91:e3:d7:bf:02:c5:0c:ef:91:cb:c8:5e:45:1a:64:e5:
0e:40:34:61:8c:95:af:7e:64:76:c2:a2:9c:11:ad:d6:9a:4c:
40:91:76:65:ad:ed:da:ed:21:32:7b:90:ff:48:ca:d7:db:41:
26:35:5b:ae:93:4c:87:a4:2a:23:bd:37:bc:72:14:3e:49:54:
7f:9b:3a:6f:57:cc:3f:e7:d6:b6:fa:b2:e4:0a:1a:6d:6c:9a:
37:49:d5:ca:5c:0e:d4:11:33:87:92:e0:73:b4:79:e3:56:60:
dd:85:4b:5b:9b:f4:e2:99:52:88:37:4a:dd:ed:e6:33:e9:f4:
be:75:b9:b8:06:f0:02:47:75:e4:1c:c1:15:b4:fa:2a:48:1e:
3c:a1:1f:b3:c5:a8:7c:7d:8e:e6:9c:30:e2:af:39:b1:9d:52:
73:5d:86:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:51:34 2026 by rpki-client