Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: O6hTjgIiSVSsY0YeaKq9zKBfenZA7DZIcsZK3LOy9ac=
Subject key identifier: 7A:14:42:C0:7E:8D:CB:BB:85:38:6F:71:EF:D1:5D:73:30:E9:70:D6
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 01A135C8488735279CF90DB3886F94741FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 1AA4
Signing time: Tue 13 Oct 2026 15:01:20 +0000
Manifest this update: Tue 13 Oct 2026 15:01:20 +0000
Manifest next update: Wed 14 Oct 2026 15:01:20 +0000
Files and hashes: 1: 1kAOPGpT_yO1V9aiYjzOs8fosJ4.roa (hash: uKDlJs0NDCjfdYnB+MfIB/jlA65konDisvJIGcTDJUU=)
2: 9j1B5LLZDXYRtu0JrlF53YNgDew.roa (hash: enCaw1pzt1wj9vxuJHJ4PKIp1awPrJly1Aljj7nxS5c=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: XcMYdnvd0PE+KlR1c1BbWlOZFRIfEo75M4BANmQJYW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:c8:48:87:35:27:9c:f9:0d:b3:88:6f:94:74:1f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Oct 13 15:01:20 2026 GMT
Not After : Oct 14 15:01:20 2026 GMT
Subject: CN=7a1442c07e8dcbbb85386f71efd15d7330e970d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:f7:ea:c3:c2:1f:d6:69:b4:11:a2:3d:18:
bb:83:96:e7:4e:8b:3e:f9:0a:97:15:dc:2a:71:f4:
7e:5a:1c:7b:7f:de:9a:c8:de:0a:27:d7:20:f9:d0:
14:2d:b4:bc:a5:14:ca:aa:1b:e3:ad:74:db:1c:9f:
68:0c:f6:e5:41:aa:9c:f9:35:6c:2b:24:5a:a7:b9:
8a:a8:4e:cf:9a:68:7b:52:d5:2a:dd:20:2f:5c:8a:
16:06:48:53:6f:97:d1:6a:82:7e:56:0e:8d:4a:43:
89:ae:77:29:2b:c2:62:fd:9c:99:28:a3:ed:39:42:
81:fb:ea:b4:39:b1:e2:43:f8:9e:de:63:ee:3a:3b:
3e:54:bf:c8:60:ce:40:d6:b0:e8:7f:9d:66:6a:78:
d5:b7:eb:8e:aa:a0:43:ae:46:22:a9:d8:44:8b:2a:
68:67:71:f5:fe:db:f1:fb:2e:42:0e:19:d1:26:be:
2d:d6:72:74:38:7c:f2:b8:e6:c0:c3:57:6f:a6:da:
00:4e:ea:58:4e:a5:76:1d:93:db:6b:9a:3b:79:4c:
51:e3:d0:25:1f:a3:08:aa:18:a6:94:8d:c8:04:3a:
6d:31:0b:35:60:83:b4:80:4c:87:6d:84:60:01:87:
73:bd:e4:68:14:fb:a1:29:9e:6d:88:02:f4:00:dd:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:14:42:C0:7E:8D:CB:BB:85:38:6F:71:EF:D1:5D:73:30:E9:70:D6
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a2:46:82:28:fa:32:1b:c8:94:33:0f:1a:1f:70:32:ff:e0:
ed:bd:1f:7f:b0:43:f9:bd:7d:6b:89:76:6a:5d:86:eb:ca:14:
17:02:29:3c:81:8b:86:f7:e2:c4:6f:63:8d:e4:0f:69:2e:d8:
ba:6e:b1:d8:12:68:a9:ea:81:2b:60:e2:a0:62:d0:70:ac:53:
74:71:fb:7a:f0:b3:8c:cd:30:96:be:5f:77:f5:6e:7b:45:3e:
07:bb:22:a1:32:53:2d:87:c4:94:a3:1a:90:2a:bb:19:37:06:
60:89:dd:a1:68:42:d5:73:cd:98:82:75:41:55:5c:50:e7:00:
c6:f2:65:d5:14:ec:15:cf:1f:09:a8:46:05:e7:7f:41:29:2e:
74:95:50:06:32:c5:46:1a:57:1f:82:46:12:80:c4:1b:83:c5:
a1:3d:51:ec:d1:f1:aa:8c:a8:d4:87:82:89:a6:23:fa:f8:a3:
e0:b4:d8:37:31:b0:66:94:06:fd:0c:b8:fd:e5:6c:7b:4d:88:
21:5c:28:91:11:33:d2:be:d5:23:4b:83:6e:a6:74:8b:8a:c6:
85:5d:97:c8:2d:4a:9e:60:d9:98:f9:2d:a6:11:85:84:15:5c:
e6:8a:ed:02:3d:8f:2a:38:1e:4d:45:b7:2a:b5:16:a4:be:75:
e3:52:8d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:47:08 2026 by rpki-client