Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: v2UzPrSjY+msGrmy91H8h2wtj4vLAXKTNFZZmqkRxf8=
Subject key identifier: C9:8C:DF:C6:12:B3:AB:5A:6C:A0:CA:C0:F9:F1:B2:6D:EC:E5:93:34
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 01A0E88960B127A98C8406F33ADAB15C586E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 0DA7
Signing time: Mon 28 Sep 2026 15:01:52 +0000
Manifest this update: Mon 28 Sep 2026 15:01:52 +0000
Manifest next update: Tue 29 Sep 2026 15:01:52 +0000
Files and hashes: 1: Hi_yIbXB_AqEZvECw_6A2niKbbY.roa (hash: V9KwW6TEefSi+Nbg4IOw24z7gPz8KPWyVOeCLVyS3EY=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: YHA+mjQGFsd9SClOT5bp7EiOUlxZ4cBP3/e6BXPUaIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:60:b1:27:a9:8c:84:06:f3:3a:da:b1:5c:58:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Sep 28 15:01:52 2026 GMT
Not After : Sep 29 15:01:52 2026 GMT
Subject: CN=c98cdfc612b3ab5a6ca0cac0f9f1b26dece59334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:2b:90:07:8a:a9:fa:05:8b:9e:23:49:ab:
55:c4:81:48:09:6f:ed:d0:e5:ab:84:87:3e:85:3f:
d0:e2:a7:2f:b8:3a:c4:44:96:99:40:fd:2b:e7:42:
46:c0:07:52:6b:57:3b:8b:cb:ad:c6:48:47:fe:23:
a2:b9:27:4c:22:c3:ab:43:d7:1a:d0:25:52:97:85:
ca:51:f2:f8:6c:48:ef:c3:23:b3:7c:21:08:0b:d5:
aa:1f:a5:1a:5a:db:d2:c2:f8:31:3a:50:57:bb:d2:
97:b6:97:57:a0:96:ea:41:93:00:ac:c3:f3:11:84:
ed:98:1a:b9:a3:70:2a:2c:7e:00:06:17:d8:4f:77:
41:e0:f7:ac:18:a1:8b:30:5a:7f:51:1f:00:b7:bb:
27:bd:db:a4:35:55:21:c4:20:7d:a0:e7:2a:fd:2c:
a5:0e:35:2f:84:9f:2b:66:64:f0:6e:1c:3e:76:e9:
4d:bb:bf:ab:c8:aa:81:a4:50:dd:2b:fb:39:89:82:
a4:31:41:2e:0e:5b:d7:77:3d:4e:d1:4c:2c:c4:36:
86:dd:8d:2d:69:9b:0b:62:0f:b4:52:0b:c6:63:1e:
37:47:a8:89:2c:ba:b6:30:fd:74:d6:c4:03:51:56:
7e:02:f0:d4:8e:9c:83:8a:c9:fc:2e:78:13:e1:23:
1b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8C:DF:C6:12:B3:AB:5A:6C:A0:CA:C0:F9:F1:B2:6D:EC:E5:93:34
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cb:91:12:c3:6a:49:61:36:b8:ea:4c:5c:77:88:f4:fc:1a:
c0:de:93:98:a8:5c:50:9e:c0:9e:d3:e4:84:c8:9d:86:d3:74:
03:ee:c3:7a:80:9b:b0:a9:44:d1:d5:51:5e:77:5d:33:ec:2e:
c6:0f:de:8e:d8:f5:f0:31:22:74:42:cb:9e:6e:19:0e:ce:28:
2d:e7:f2:b4:c3:0e:23:06:7a:ac:85:54:bc:e8:37:ba:c1:bc:
e2:d8:4e:8e:dc:6c:7d:51:1b:21:fb:5d:b1:30:79:f7:f0:00:
b5:c1:73:ad:cd:9d:26:21:39:43:d5:0d:9e:d5:1f:43:27:3b:
78:a0:69:df:33:18:1d:71:6b:65:74:c8:75:a7:93:53:b8:0e:
f6:89:04:db:b7:f2:fc:10:66:50:fb:b3:57:d5:9b:d0:0b:c9:
41:7a:e0:87:19:73:ba:10:98:4c:72:4e:a1:27:96:71:1e:12:
f7:ab:af:5b:37:95:40:7d:a4:ba:66:80:e6:db:57:04:36:72:
32:86:61:f7:25:cb:af:32:69:59:75:d8:6a:3f:39:ff:87:c4:
95:e1:8b:85:bf:0d:9e:10:04:6c:bf:c1:94:5e:8d:d2:af:0b:
42:b3:41:15:92:be:1d:24:91:4b:06:e7:13:0b:65:43:4d:cb:
08:c7:91:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:43:25 2026 by rpki-client