
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
File: xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft (raw, json)
Hash identifier: A84wdOBs6U640eZ3xCdS6A+fAr0SSM9nzbxbdde/kMw=
Subject key identifier: 7E:50:15:04:F6:6A:0E:98:78:82:98:A0:EA:AC:90:86:49:55:08:2D
Authority key identifier: C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42
Certificate issuer: /CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
Certificate serial: 01A0C933F793654FBF421AD7BA6384928425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
Manifest number: 01AE
Signing time: Tue 22 Sep 2026 13:00:21 +0000
Manifest this update: Tue 22 Sep 2026 13:00:21 +0000
Manifest next update: Wed 23 Sep 2026 13:00:21 +0000
Files and hashes: 1: YPZjGGUztC1i2ZNYvGgdAsuXTgo.asa (hash: K4CEQz/XSFN1g13QszcoyDmffxNfF6QeHPnFTt4rvN8=)
2: xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl (hash: lOzJKVSOX768fvaE8+id+oxisoUoiiqLdyJMqXuWnhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:33:f7:93:65:4f:bf:42:1a:d7:ba:63:84:92:84:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
Validity
Not Before: Sep 22 13:00:21 2026 GMT
Not After : Sep 23 13:00:21 2026 GMT
Subject: CN=7e501504f66a0e98788298a0eaac90864955082d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:99:e2:0c:9b:70:1c:73:74:ab:87:b5:34:
8c:4f:f8:bb:46:a2:c4:20:fd:c5:ba:de:fb:6e:c4:
42:dc:e4:a1:62:a4:6d:17:0a:9f:0f:c8:18:2e:83:
f4:85:c0:9a:af:35:5a:74:7b:8d:bb:c2:47:78:3e:
44:34:f9:86:62:13:13:cd:a5:6b:5f:84:f2:0f:78:
fb:23:e3:06:e1:4c:05:41:2f:20:fc:81:6a:b7:0c:
c8:c6:a7:76:88:5e:22:24:91:1b:a9:ef:39:82:8d:
06:15:61:0e:34:0f:fc:a8:4e:8f:8d:ba:39:60:a7:
88:25:a9:82:43:a2:ba:f8:b5:7e:43:2a:48:35:72:
c8:ad:44:d8:43:66:f5:9a:7f:07:7c:a5:35:d2:55:
99:66:a0:e0:8f:6f:d4:37:1d:c7:d3:75:d3:3b:d6:
7b:87:b8:e3:81:4a:a1:21:89:c5:b0:61:4b:c3:b2:
7a:19:09:4b:04:9d:88:e8:56:d4:6d:ba:0e:72:26:
c2:09:de:50:8d:46:44:a3:03:e6:ac:63:f4:75:d6:
ee:50:79:6c:f1:0c:b9:55:a4:3f:8d:80:14:5f:a8:
b1:2f:3a:cc:aa:2d:b0:1f:f6:cd:47:c1:1b:76:49:
b5:24:d4:a1:a4:41:6a:5d:9a:f8:36:0b:43:cf:ad:
90:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:50:15:04:F6:6A:0E:98:78:82:98:A0:EA:AC:90:86:49:55:08:2D
X509v3 Authority Key Identifier:
keyid:C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ec:96:69:58:4c:eb:6c:48:12:4e:0b:ee:43:f5:5c:f2:24:
b4:46:2f:7a:28:d3:38:c8:16:de:3f:24:fe:25:26:90:ac:ce:
c0:a9:7c:71:91:46:a4:56:a4:76:34:66:8c:b6:a1:7b:76:76:
77:70:8d:a3:cc:14:06:88:2b:4a:88:92:5f:13:07:d9:af:4b:
ea:b6:22:11:12:3b:ea:d3:50:3b:5c:9c:a8:c6:05:ee:29:c9:
85:c3:3a:c9:fe:27:76:0f:58:64:ba:b1:dc:3e:2d:8f:9f:70:
62:3c:10:73:5c:4d:e5:a9:b5:9b:24:5d:4e:0b:1a:06:b6:dd:
d8:d8:76:65:c3:9e:c8:f6:df:b1:ab:d5:f4:07:7d:12:a4:f4:
48:49:a7:a9:c6:ec:95:14:ed:69:e4:5c:aa:cb:e7:8e:9d:fd:
89:dc:85:74:fe:6b:eb:b8:23:55:9d:7e:dd:66:cb:0d:12:20:
8c:df:ee:c7:7f:84:40:10:65:63:db:77:a0:f8:bd:4f:63:5e:
2d:7c:08:ce:28:4f:19:79:57:63:69:7f:ee:4f:5c:cf:8b:52:
a8:b6:f3:88:42:66:ed:81:69:62:a8:d1:05:ed:25:ce:94:06:
95:8c:6c:29:99:00:72:3d:8c:8c:cb:92:e6:69:1d:d6:9a:b5:
ef:5f:e3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:47:58 2026 by rpki-client