Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
File: xLejOGcjuooupILHtoAxpUEirE8.mft (raw, json)
Hash identifier: tOQ0eZAG7oN8Wuw24KE+jLgcWW67g9fh3D1HvZoD8lM=
Subject key identifier: D3:0D:FF:D7:3B:AB:1E:15:D4:C0:75:A7:69:FF:CC:FB:7C:E5:28:A6
Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Certificate serial: 01A0CAB4A3986A6E79A71E98477DF1CB89F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
Manifest number: 08D0
Signing time: Tue 22 Sep 2026 20:00:30 +0000
Manifest this update: Tue 22 Sep 2026 20:00:30 +0000
Manifest next update: Wed 23 Sep 2026 20:00:30 +0000
Files and hashes: 1: Zk7CyKdXSESzaNUGpp0RHxT1B8g.roa (hash: jS+bnhYvgZZWXRhPBaO9DtSmsb6YqqmNYBdoxXcELc4=)
2: xLejOGcjuooupILHtoAxpUEirE8.crl (hash: Vw8yeubZW+0T9NZiPN7z+0Vdk+HuTZoIPGubGuiLVpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:a3:98:6a:6e:79:a7:1e:98:47:7d:f1:cb:89:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Validity
Not Before: Sep 22 20:00:30 2026 GMT
Not After : Sep 23 20:00:30 2026 GMT
Subject: CN=d30dffd73bab1e15d4c075a769ffccfb7ce528a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c7:1e:aa:8f:32:f1:bc:0d:28:f6:36:4b:c2:
78:dd:1a:7f:7a:6a:c8:08:dc:9e:0c:96:19:b5:9a:
d1:e9:d5:a7:fc:b4:46:d0:7e:c1:3a:f4:59:45:13:
94:90:73:68:2d:ea:33:df:08:eb:b7:04:91:2b:c9:
ff:78:4f:a8:93:78:a0:71:cb:49:b0:00:eb:fb:54:
bb:65:31:d6:65:56:6d:cf:30:ee:04:6e:27:12:5a:
a5:c0:c3:64:4e:b7:35:fa:c4:99:20:63:36:4f:13:
e9:78:f7:2b:d3:b2:89:d0:3b:fe:5f:af:c2:12:e9:
4a:a6:fe:a5:94:ae:51:e7:ca:87:bc:9a:b3:eb:fe:
cb:20:2d:77:bf:8b:ff:3b:5f:86:60:82:50:54:67:
8f:d8:40:45:a8:28:a1:5b:04:92:65:97:fc:f2:52:
30:83:c3:6d:06:c3:cc:7b:c6:54:43:8b:d2:00:76:
4e:73:c2:1b:c5:8a:29:8d:81:ef:a3:86:79:3f:ce:
cb:6a:73:07:0f:bd:c2:ca:7f:48:38:f2:08:d2:b0:
3f:7f:cb:33:9a:37:34:78:73:1b:7c:b0:d7:47:c1:
f1:02:b3:00:87:45:79:1c:5f:c8:2a:df:94:ec:34:
97:f3:c1:6a:3a:17:7a:1b:f0:6b:37:f3:b3:bb:cf:
38:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0D:FF:D7:3B:AB:1E:15:D4:C0:75:A7:69:FF:CC:FB:7C:E5:28:A6
X509v3 Authority Key Identifier:
keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:15:8c:f1:52:ff:27:58:a7:e2:32:18:2b:c4:4f:76:b2:6f:
9f:e9:24:b4:14:6c:ac:40:e8:d9:e4:35:4e:8f:6b:e5:d8:91:
b2:4b:fb:2d:bf:f4:50:02:13:6e:26:2b:f0:65:9a:d8:2d:eb:
75:7d:03:a8:d6:19:41:34:27:5b:bd:01:8b:e6:2d:63:72:e7:
e2:f7:48:6c:d3:ec:77:2a:c6:d3:bf:7b:a1:33:7f:39:9a:5c:
14:37:22:b4:39:4e:f7:d1:19:c9:30:aa:9b:37:12:72:47:dd:
55:cd:29:e0:4b:41:31:68:69:5d:b0:c6:f9:ed:95:94:e0:8d:
af:61:64:19:eb:be:96:f3:91:8f:2f:16:79:8d:20:07:db:5a:
ba:99:91:89:a5:39:3f:a4:da:bb:cb:cb:14:5b:09:e2:5b:52:
ab:36:b0:14:a5:32:f5:f3:6f:41:84:4c:10:90:ba:37:13:c8:
c4:b2:43:24:a1:20:ae:e9:5c:71:65:c9:66:2c:53:9c:0a:d7:
dd:d7:b1:85:b8:e9:cf:50:94:eb:b7:91:71:6d:a7:e5:62:c2:
03:89:89:b2:3c:81:5d:7b:5a:12:f6:06:52:47:00:85:33:61:
dc:57:9f:4d:9f:5b:fc:a9:63:d6:eb:58:1c:27:e5:3e:3a:4e:
aa:ef:9a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:38:21 2026 by rpki-client