Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.mft
File: xJH8Ajs5EjN6xxQp2chKN15bzS8.mft (raw, json)
Hash identifier: Fr+yXrzbdhen2cV/qjGpUupt9NXuyHL8EiiMI2Q/E4Q=
Subject key identifier: 90:57:23:70:7F:8D:1A:A8:32:12:76:F9:E5:FA:C0:75:E9:E0:B8:18
Authority key identifier: C4:91:FC:02:3B:39:12:33:7A:C7:14:29:D9:C8:4A:37:5E:5B:CD:2F
Certificate issuer: /CN=c491fc023b3912337ac71429d9c84a375e5bcd2f
Certificate serial: 01A10B82C7E3B4B533CFC489B650B8E87633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJH8Ajs5EjN6xxQp2chKN15bzS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.mft
Manifest number: 3A
Signing time: Mon 05 Oct 2026 10:01:22 +0000
Manifest this update: Mon 05 Oct 2026 10:01:22 +0000
Manifest next update: Tue 06 Oct 2026 10:01:22 +0000
Files and hashes: 1: wNtH8SQdtiCv3yvmwmtJ4tjEIpg.roa (hash: KFPihkmGqp/gfErugdaWlWM5LZ9F8sQft1dGIGgMm3A=)
2: xJH8Ajs5EjN6xxQp2chKN15bzS8.crl (hash: 6qYbKhV2wzvNDRbkWoeWWZZp7OKo4EV2ngK8xn/wkT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJH8Ajs5EjN6xxQp2chKN15bzS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:82:c7:e3:b4:b5:33:cf:c4:89:b6:50:b8:e8:76:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491fc023b3912337ac71429d9c84a375e5bcd2f
Validity
Not Before: Oct 5 10:01:22 2026 GMT
Not After : Oct 6 10:01:22 2026 GMT
Subject: CN=905723707f8d1aa8321276f9e5fac075e9e0b818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:09:45:76:9f:5b:9c:66:5f:18:62:68:5c:d0:
58:0e:cf:fd:74:0a:74:d6:f2:98:58:ca:1f:8d:f8:
f3:7b:23:5c:d4:87:f0:0c:84:be:9e:69:51:d2:04:
74:42:f1:dc:49:dd:19:15:64:02:1a:75:5e:35:cf:
f9:d8:e2:e5:ce:85:c2:0a:8d:e1:82:5a:00:46:89:
80:b1:93:4e:7b:05:f7:54:76:14:5a:d4:db:4b:63:
03:0c:97:f8:55:b5:bd:e8:5d:28:21:a6:c9:22:bd:
0d:ea:63:4d:88:1a:2d:21:1f:25:3c:14:8d:6e:b4:
61:99:45:51:30:ae:41:51:cb:20:b9:67:c4:be:86:
e8:9a:dd:e6:97:a5:18:b1:ff:ad:b5:08:39:94:45:
3e:88:7c:ba:5e:b4:dd:6a:63:5e:b7:0c:79:fb:fe:
80:2a:3d:5b:d6:5c:bf:9f:23:07:2a:aa:f7:78:fa:
db:3e:37:c7:b6:65:31:25:a3:86:a7:0e:26:0d:2b:
e1:50:c2:54:63:74:67:63:d4:1f:29:be:c9:6a:2a:
3a:23:29:ad:4a:06:9f:42:e8:a5:db:bd:1a:b6:1b:
3b:e2:61:2f:07:fb:23:3e:bc:88:b6:79:31:ae:65:
00:c3:05:f2:7c:07:a7:6f:56:51:0b:f7:19:d0:9e:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:57:23:70:7F:8D:1A:A8:32:12:76:F9:E5:FA:C0:75:E9:E0:B8:18
X509v3 Authority Key Identifier:
keyid:C4:91:FC:02:3B:39:12:33:7A:C7:14:29:D9:C8:4A:37:5E:5B:CD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJH8Ajs5EjN6xxQp2chKN15bzS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:60:70:b6:57:07:2b:1d:f9:0e:3a:ca:db:a3:ab:1e:ca:8a:
6a:99:cf:eb:9b:1e:85:5c:7d:80:4e:86:46:b5:19:68:b8:89:
4e:c3:10:8a:48:52:f4:52:06:af:2f:c9:a4:a3:0a:9c:5d:87:
5c:16:3a:0a:2f:09:16:4d:b5:ab:5c:d4:ce:91:92:46:ea:47:
e2:ae:c7:2f:31:38:07:74:12:e5:09:fe:60:8e:20:ea:fe:09:
0f:4d:f7:45:db:2a:13:59:47:7f:53:eb:30:75:83:33:3c:b6:
14:47:37:d1:7e:22:58:32:4b:50:db:62:bb:95:e5:78:3c:e2:
1a:0e:05:4b:5b:68:ce:75:30:28:66:71:61:4b:51:44:2d:10:
db:a7:2a:c3:f6:54:73:bc:c5:a1:49:06:cc:28:9f:fd:5c:5e:
8f:5e:10:01:ef:fc:65:c5:cf:eb:bf:e4:13:5a:57:9e:94:9d:
a0:e0:15:76:32:93:b8:12:07:0e:3c:f1:f1:fc:00:b3:c5:1b:
9b:4d:16:73:3d:67:d3:4a:b0:b6:ba:88:49:25:6d:ae:32:5e:
af:9c:48:27:8d:46:7e:c7:c5:25:e2:f9:79:dc:6e:aa:b7:6d:
bc:fc:db:58:ed:5f:91:d7:41:77:78:20:62:5c:24:69:af:9d:
29:8d:a2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 17:52:32 2026 by rpki-client