Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.mft
File: x7xUf6s2vxLz79kfQID5rJxvOEY.mft (raw, json)
Hash identifier: 5x4nvzWb4brN/k/4BJF54zGGjsAnWr5xpI8GECg51h8=
Subject key identifier: C6:6C:F5:ED:9D:C5:28:4E:CB:72:97:FE:74:A4:F8:B7:32:29:78:C4
Authority key identifier: C7:BC:54:7F:AB:36:BF:12:F3:EF:D9:1F:40:80:F9:AC:9C:6F:38:46
Certificate issuer: /CN=c7bc547fab36bf12f3efd91f4080f9ac9c6f3846
Certificate serial: 01A12FFD0D57C2FA0042C53773F39CB20EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7xUf6s2vxLz79kfQID5rJxvOEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.mft
Manifest number: A0
Signing time: Mon 12 Oct 2026 12:01:15 +0000
Manifest this update: Mon 12 Oct 2026 12:01:15 +0000
Manifest next update: Tue 13 Oct 2026 12:01:15 +0000
Files and hashes: 1: bM71cryNLqDLi-ELPu481fSpeBA.roa (hash: 3Xz3nEMwoJWizfCQTyZZHoKYJqJtKSQZLvpMJUW4vW8=)
2: x7xUf6s2vxLz79kfQID5rJxvOEY.crl (hash: PDOYBsjZh9B/zu3rXfcY4eqrj8+EnD/GTvXaEu9Uo3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7xUf6s2vxLz79kfQID5rJxvOEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:fd:0d:57:c2:fa:00:42:c5:37:73:f3:9c:b2:0e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7bc547fab36bf12f3efd91f4080f9ac9c6f3846
Validity
Not Before: Oct 12 12:01:15 2026 GMT
Not After : Oct 13 12:01:15 2026 GMT
Subject: CN=c66cf5ed9dc5284ecb7297fe74a4f8b7322978c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:18:6e:80:98:8f:88:18:37:a0:3c:f2:a4:
af:48:01:83:a1:40:f8:3e:c9:60:30:27:7d:b5:38:
25:99:f9:7a:80:35:9f:d8:fc:b7:26:d8:ba:eb:2b:
30:f5:eb:72:76:a9:f8:30:4c:e3:87:d8:bb:e4:ca:
b0:72:99:73:94:e2:94:9d:08:c7:65:c8:ed:52:7d:
92:f3:0a:98:c9:13:0c:bc:22:6d:03:2b:46:04:25:
b1:76:26:54:3d:2f:29:87:36:18:4a:b9:ac:2b:db:
77:c2:5f:58:65:30:62:c0:99:d8:76:82:2a:d0:0b:
20:db:d1:f9:45:6e:fe:a9:16:6e:70:83:17:2e:ad:
b0:96:3f:91:a1:4b:f5:4c:d5:a8:af:a0:dd:bc:e8:
91:42:44:9c:ec:f0:ec:fa:b2:b7:9a:51:72:c6:02:
8f:ca:35:fb:b6:14:54:10:d8:4a:3b:93:11:66:71:
4d:ca:66:8b:2f:45:4f:6e:45:9b:6c:65:46:99:94:
cf:c9:8c:5a:8a:2d:44:5d:cb:6c:a6:77:df:e0:08:
3e:d6:83:fa:bf:3a:81:95:52:01:aa:96:f9:ae:d1:
76:52:41:39:94:6d:7c:20:d3:fd:e9:89:e8:33:d6:
54:2e:bb:71:24:b3:b3:39:0c:33:fa:24:c4:2f:c0:
ad:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6C:F5:ED:9D:C5:28:4E:CB:72:97:FE:74:A4:F8:B7:32:29:78:C4
X509v3 Authority Key Identifier:
keyid:C7:BC:54:7F:AB:36:BF:12:F3:EF:D9:1F:40:80:F9:AC:9C:6F:38:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7xUf6s2vxLz79kfQID5rJxvOEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:20:2c:52:12:34:05:03:49:78:04:aa:93:c8:ef:ba:d4:b4:
b8:7f:eb:01:a0:d9:29:13:02:ff:36:7c:36:28:93:16:e5:b3:
1c:8c:50:e8:7f:92:be:01:71:2a:d8:89:f4:7f:e9:9e:e6:e0:
40:3f:3e:ba:01:ad:00:cf:ed:48:43:50:ed:0b:60:30:75:92:
10:56:4d:40:69:3a:3e:11:f3:2f:9a:67:39:de:e7:5a:08:b5:
c6:d2:51:12:6e:2c:6c:45:44:4f:d5:fb:d6:f1:46:2b:90:b5:
fd:6b:3b:47:cd:7b:5e:3a:a7:5c:95:d9:c9:3f:a1:a8:82:99:
e8:74:8a:89:52:0d:0b:9f:cd:1b:c9:f0:cf:f9:ea:4c:89:38:
38:d0:92:3b:0e:ce:97:07:18:b4:d3:b5:c6:cd:29:08:f8:e2:
fd:5e:f8:bb:cb:d4:87:25:74:4b:2d:16:24:bc:6b:70:49:a8:
60:8c:2c:be:3d:07:00:c7:d4:85:11:3d:c7:15:5a:31:ed:f0:
43:1c:2d:b9:ed:69:9a:ac:85:11:00:f3:ef:72:30:5a:2e:c0:
58:6b:36:2d:2e:a1:8b:56:38:c7:5b:26:a9:31:4d:ed:9c:79:
1f:de:1b:ac:ff:0a:68:12:07:25:f9:35:d9:8c:6e:7f:54:b6:
0b:b3:9c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:24:46 2026 by rpki-client