Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier: 8sn2h8uPsro+pdcTxdicNvjBdC6gxJj8z2xxrgTb+F0=
Subject key identifier: E2:A5:AF:0D:84:C4:CE:2B:0C:74:48:60:27:14:2C:C7:D0:67:41:5A
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 01A12FFD1110145B5C62F42E8F6B52989338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number: 0F8F
Signing time: Mon 12 Oct 2026 12:01:16 +0000
Manifest this update: Mon 12 Oct 2026 12:01:16 +0000
Manifest next update: Tue 13 Oct 2026 12:01:16 +0000
Files and hashes: 1: RrwlRSSdwln9HbzArcN9f7ThR9c.roa (hash: Ic3y0/hXv+5FL5zNAqt7WX+ncQH0cGC5wuQsjbsXF7I=)
2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: Y7K3gBxoz1y17EgulxG/tRfyX6gIx5pT9kGzCxa3XXU=)
3: fWpL_ta7aXoIKT8lwYmDL0nQegU.roa (hash: r+7J0jRgrAdlkGpSk5T7jtJhr78GxAY9zYWBhS85+uQ=)
4: l5tw0iDO7abT_AibKjZJaQ4nwWc.roa (hash: r+71S+WnEwowT4NhvO1eI4eYiERh6tzaeOlSbc80Img=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:fd:11:10:14:5b:5c:62:f4:2e:8f:6b:52:98:93:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Oct 12 12:01:16 2026 GMT
Not After : Oct 13 12:01:16 2026 GMT
Subject: CN=e2a5af0d84c4ce2b0c74486027142cc7d067415a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:61:05:d2:87:54:fb:79:32:7e:93:e7:3f:cc:
4c:52:54:75:bb:95:df:95:dc:ba:0f:0a:8a:a8:df:
dd:13:53:c4:db:0d:20:b7:f4:42:9f:2f:67:1b:99:
32:8c:d5:7c:05:a9:a7:3b:84:d7:78:3f:3f:b3:54:
83:df:d3:5b:4a:98:79:8a:ec:59:06:8a:ed:8b:f8:
cf:82:92:cb:1d:ba:9d:26:f6:c1:8a:25:52:a5:6d:
64:46:cf:13:25:f5:57:c5:f9:33:e0:bd:12:b9:e5:
9c:c0:19:16:fe:aa:fa:95:a3:e1:3b:2f:5c:49:ee:
c4:4c:48:e4:8b:1b:b0:d5:e8:e0:4d:78:8d:37:71:
77:b3:b8:f2:7c:6a:fe:3e:a4:cd:e9:fe:19:2c:84:
12:d7:3e:e6:f7:b3:99:fb:12:23:0a:78:a1:6a:3a:
e5:e0:a1:4f:c3:1b:c1:9d:15:d7:69:27:e0:42:73:
1c:06:0d:c3:7c:7f:a8:17:cc:d0:b8:ca:fc:3b:5c:
4a:76:14:b2:be:6e:dc:5d:34:73:f6:1b:b1:fa:8e:
e0:bd:ce:7b:20:cc:9a:f1:a2:97:d2:56:c1:b3:c8:
89:fb:d7:65:da:e1:e5:a3:10:3d:97:9d:43:8b:d7:
4c:91:68:99:1d:3d:4e:f4:6f:d8:cd:61:5a:7a:58:
09:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A5:AF:0D:84:C4:CE:2B:0C:74:48:60:27:14:2C:C7:D0:67:41:5A
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:da:5c:73:40:86:85:8a:92:8e:b4:4c:74:85:2d:d7:eb:6c:
b2:74:15:1f:aa:65:8c:43:02:cc:88:a6:98:b4:1a:78:41:38:
a8:a8:3d:a7:e7:9f:6d:f4:4e:b0:c5:94:54:d8:17:69:0b:46:
4e:d0:51:a2:29:b5:0c:9d:6d:92:41:d8:5b:40:72:e7:bb:0d:
2d:60:ea:ad:d9:08:19:ce:33:d1:ff:8e:2e:d3:c1:65:2b:54:
b5:9e:ff:9f:ea:d2:e6:93:82:03:bc:27:e5:d0:0d:91:91:db:
f8:c9:72:49:9a:3b:8f:19:d1:5c:96:d3:37:d5:b2:25:da:b1:
55:ea:83:92:ca:81:8d:18:5a:4a:35:ad:be:1c:f0:7c:67:2e:
70:b5:d4:4e:f7:65:a1:be:62:94:41:3c:26:c0:2c:58:69:70:
b7:de:25:52:fd:db:98:98:56:eb:31:1c:d0:63:4c:23:73:5c:
bc:2c:a5:47:a3:be:80:e0:94:a3:c5:3e:4e:c8:06:f9:01:6c:
58:47:ae:fa:6b:d0:76:4f:36:cd:1a:a0:8a:3a:1f:9e:1c:b6:
f8:20:ab:c9:34:74:75:54:57:44:9b:87:f4:f7:a9:4b:ae:4f:
31:37:3b:ed:17:45:d1:48:8f:67:e6:58:a0:0e:ec:7d:9e:a6:
cb:9f:a2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:40:26 2026 by rpki-client