Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: INvCA9cbVunA4XfJbeCMykm7Qi94+klwe0x2PO/R9OY=
Subject key identifier: 62:0A:9F:B5:2C:1B:9A:AF:DB:D6:FF:2C:3F:D3:71:23:55:E0:1F:A2
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 01A1DE026777C25361CCEA6EC3B03EB485DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 1B07
Signing time: Sun 15 Nov 2026 07:01:01 +0000
Manifest this update: Sun 15 Nov 2026 07:01:01 +0000
Manifest next update: Mon 16 Nov 2026 07:01:01 +0000
Files and hashes: 1: LS5MCCO9caJteSNm3UxfcHvxWuY.roa (hash: x6EZSVRR5fQkZJq/8+MpkayOyy+ArponPDKCWMu+oZw=)
2: b2OvrwS5fdlnhd8jiScteBrMJzo.roa (hash: 2y9dXhwloiTIsuknPn5cIK/PWnisQw1xqs5MGBYxLGI=)
3: rj-0V1J38VZQrRPfHd8xSzQLmRI.roa (hash: hduanHT2uT8V/UIO7xHWzu4Y55+PQEhZP0n2Pd1XDes=)
4: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: EGmP7VCFNe6eXo0beMxke6IyfwGHgfg8dcNMld9dwV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:67:77:c2:53:61:cc:ea:6e:c3:b0:3e:b4:85:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Nov 15 07:01:01 2026 GMT
Not After : Nov 16 07:01:01 2026 GMT
Subject: CN=620a9fb52c1b9aafdbd6ff2c3fd3712355e01fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:62:cc:96:26:60:d7:0e:ec:c2:d9:2f:a1:d6:
f7:7f:ed:a8:a4:cc:f2:eb:75:05:b8:1c:c7:91:86:
b8:27:7f:4a:35:8f:65:a3:86:d3:fd:35:25:2a:f4:
d6:a9:06:8b:8c:20:43:2f:52:bf:ab:b0:3a:9f:f6:
32:24:ca:32:0e:35:c9:3f:56:6d:05:03:24:eb:89:
6a:92:23:f2:65:45:12:d8:e2:0a:1c:9b:94:61:d9:
48:20:76:49:ed:af:50:5c:bc:a1:52:e6:a2:1d:6f:
95:35:cd:ed:a0:bd:03:7e:29:44:a0:99:c6:a8:5a:
22:35:2b:2c:30:58:70:2a:05:46:51:c2:3e:0e:03:
33:45:5e:cc:7f:9b:cb:fa:4f:f2:5a:44:1d:05:a4:
2c:ba:ae:9e:b1:7a:0a:04:46:04:73:56:44:57:a5:
42:27:0d:69:1e:98:31:c0:56:3e:d6:f3:75:ee:30:
73:f8:71:3f:c3:15:ef:5f:31:6c:1c:cc:32:81:36:
1f:e2:ff:4d:44:fc:4b:3c:70:43:a1:66:99:63:92:
96:38:40:2c:60:88:d6:8e:9c:83:ca:9e:b1:26:2b:
e5:5e:b8:af:a3:b5:83:ef:90:eb:65:fb:3d:f0:0a:
18:1f:ce:ab:f7:08:18:91:f3:89:f5:87:f6:f4:e4:
7a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0A:9F:B5:2C:1B:9A:AF:DB:D6:FF:2C:3F:D3:71:23:55:E0:1F:A2
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:57:e3:8a:82:21:33:5f:70:f1:22:a4:8a:98:e3:c6:65:07:
25:c2:ad:b8:6a:c6:d6:1a:56:a3:9b:49:e9:34:53:04:11:4d:
05:7f:21:d4:20:97:3b:6f:40:26:6d:4b:54:31:52:7a:2b:88:
23:b1:1c:28:49:22:ba:a6:82:68:68:5b:56:18:b6:5f:83:e9:
65:05:4d:44:26:6a:d6:15:a5:ad:d1:1b:84:bb:20:ab:2e:14:
07:3c:85:8b:fa:68:ab:b9:e3:27:35:a4:92:f4:dc:f3:13:fb:
59:f2:e7:e2:2c:8b:09:8b:7f:5c:ac:a1:15:9d:dc:65:c7:af:
d1:9b:a1:73:5f:8d:15:05:15:e8:90:21:20:fe:00:46:29:59:
66:8f:d6:a0:3d:85:a2:8d:0a:3c:09:e3:6d:e5:4f:31:32:70:
e8:a9:e1:28:3e:dc:b5:ea:f6:53:42:1e:61:f7:5e:b0:93:b2:
f1:00:09:34:46:83:10:35:8e:ef:ce:3f:a3:c3:a7:54:46:1e:
74:1d:e0:05:cd:66:f7:51:fd:1f:a6:bf:94:26:d5:d4:e9:54:
23:fc:b3:e3:7d:8f:0e:5a:4d:b2:1c:07:67:dd:6b:74:e2:53:
40:06:41:57:df:f2:4d:b8:c6:fe:2f:30:4b:4c:08:17:eb:52:
00:9f:1e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:11:10 2026 by rpki-client