Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier: A4ZHUkXTVc8m41BnsUwUKt+33vvCQBqNJ2JjLRr0Ulw=
Subject key identifier: B3:EB:BC:BF:81:26:1C:28:93:C5:B2:50:45:C6:3D:12:C7:7D:86:51
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 01A12B0D6FE85FC0FBF1022C5BCAF2D7A8E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 13:01:03 +0000
Manifest this update: Sun 11 Oct 2026 13:01:03 +0000
Manifest next update: Mon 12 Oct 2026 13:01:03 +0000
Files and hashes: 1: EEs8_2SQ9wdEKnETnYAXwnbvPvI.roa (hash: CFxGxtKRpFSwMaRFJt3q5WoVWboKnoyoeoco0rArRao=)
2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: DPGmMD6RxlFPzHswIdnw2wkdE/jklPYlXAvpDu4J4aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:6f:e8:5f:c0:fb:f1:02:2c:5b:ca:f2:d7:a8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: Oct 11 13:01:03 2026 GMT
Not After : Oct 12 13:01:03 2026 GMT
Subject: CN=b3ebbcbf81261c2893c5b25045c63d12c77d8651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:c5:68:2f:0d:ce:c4:ed:e7:32:e1:e4:aa:
60:a8:4c:69:37:9e:96:02:f2:3b:e7:1f:7b:15:de:
64:f8:d4:61:80:a4:b0:31:b4:aa:9b:d1:3d:3c:5b:
e2:e0:c8:ce:1d:f9:37:82:9f:76:e7:be:90:98:5f:
29:0f:b7:e4:98:c0:9a:76:01:8c:62:4f:eb:aa:3a:
a5:ee:0e:db:53:18:de:44:c8:c8:db:3b:f8:e4:73:
91:f5:ec:1d:6d:c7:3b:9a:42:d5:c4:d1:26:ac:4b:
6d:79:71:05:38:41:f9:2a:af:ee:3d:d8:58:b6:df:
80:02:0a:bd:61:9e:78:1b:eb:44:d0:fa:e9:e6:5d:
37:51:0c:67:e8:b4:a4:9a:9e:af:4f:a8:e0:eb:18:
2b:87:70:c0:76:68:fd:0a:01:ee:f7:8a:ab:92:2a:
d0:54:d6:9c:08:df:cb:be:c3:ff:18:5f:ff:a3:38:
7d:7c:f8:be:a4:14:54:67:09:d9:76:79:4f:6f:32:
04:c5:06:84:27:43:87:1a:cd:57:47:47:34:18:67:
46:59:a6:f9:b4:5a:20:d7:b0:30:95:a6:c7:36:7e:
47:00:6e:ef:e8:c2:b9:a8:e7:10:60:73:e4:10:3c:
da:0f:fa:94:26:f8:9f:3c:c8:20:da:93:5f:c5:aa:
7e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EB:BC:BF:81:26:1C:28:93:C5:B2:50:45:C6:3D:12:C7:7D:86:51
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:96:ce:72:4c:f1:21:4a:c1:1e:db:a1:55:37:c2:c2:b3:6c:
41:91:1e:71:6e:5f:63:e6:60:82:ea:07:a7:66:51:0c:46:af:
c6:7a:0c:2a:9c:47:30:2e:fc:27:7e:5a:8c:09:1e:0f:89:b5:
cf:21:02:b4:81:d5:19:8a:63:52:33:ea:25:e0:9c:2b:88:d6:
e4:a3:ca:54:e6:dc:4c:c0:da:e1:98:da:46:e0:8f:25:35:8b:
72:02:43:a4:b6:03:07:11:7c:fb:a2:8b:bb:db:db:52:ef:59:
3f:d7:9a:be:a6:81:78:09:93:06:ba:72:3c:f3:1f:90:65:bc:
30:ed:60:ed:57:d5:8f:b2:48:df:e6:c0:b8:dd:1a:66:56:34:
3f:e3:5e:a4:dd:fd:bd:d1:87:37:72:c3:4d:c3:71:bc:88:37:
dd:b0:da:c2:9b:c5:62:61:be:15:6c:86:58:be:b6:1b:17:e3:
ea:30:4f:38:f8:81:d2:68:5c:59:19:e4:08:65:4b:bd:77:da:
f5:f6:06:59:0c:94:c8:ca:03:b9:f7:e5:07:a9:9f:de:20:a6:
e8:bf:03:62:11:13:aa:54:79:9c:b8:9a:23:3a:69:ff:6f:ee:
66:01:40:b3:52:85:5b:13:53:7a:a9:2c:d8:b4:c9:7e:fd:a8:
a7:1c:89:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:46:32 2026 by rpki-client