Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
File: xBK7PaZcqrUkhR74bOm6piB04e0.mft (raw, json)
Hash identifier: Wx2IW4K1NYHlwvgxbVEda5kxVAWLxY/R7B0JwuLwqeY=
Subject key identifier: 03:56:B9:39:53:CC:F2:39:E5:2A:7D:FC:C8:C7:87:41:0C:91:BE:0C
Authority key identifier: C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
Certificate issuer: /CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Certificate serial: 01A0BF55894E0F285A970BD98AA7639A9F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
Manifest number: 1A5F
Signing time: Sun 20 Sep 2026 15:00:48 +0000
Manifest this update: Sun 20 Sep 2026 15:00:48 +0000
Manifest next update: Mon 21 Sep 2026 15:00:48 +0000
Files and hashes: 1: sesfpS4vflQUJ0zHNMlqdR_eVFI.roa (hash: EeKCakHwf9lALKZ5zNCtLbT5f2osgE69W3ufAPv/OQY=)
2: xBK7PaZcqrUkhR74bOm6piB04e0.crl (hash: 9fRxuQt8gH/qGO5oyMPUrMZfDxpPn0SJqUgaFokD908=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:55:89:4e:0f:28:5a:97:0b:d9:8a:a7:63:9a:9f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Validity
Not Before: Sep 20 15:00:48 2026 GMT
Not After : Sep 21 15:00:48 2026 GMT
Subject: CN=0356b93953ccf239e52a7dfcc8c787410c91be0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:be:1e:bf:8b:fa:57:23:8f:0f:8c:41:e8:6b:
2b:cc:1d:c0:c2:aa:27:4c:9a:df:59:b4:73:d6:85:
c1:e8:0d:57:16:66:e4:f7:15:6a:2b:7f:ac:c8:80:
95:0b:ee:e2:32:9c:ec:c1:3e:4e:7f:30:a1:40:6e:
ea:9e:c4:0c:26:1c:b6:f2:f2:56:99:c7:b2:6f:69:
bf:cf:e2:80:b1:3c:b8:25:b8:5c:65:48:da:b5:4f:
df:0f:56:b7:8f:42:8f:86:fe:84:05:4a:1a:e6:8d:
f6:e9:5d:6a:4c:7d:9a:3f:43:ce:de:86:5c:29:a0:
28:f0:98:b1:07:0e:91:3d:c3:1a:f4:b9:8e:63:0f:
cf:c2:67:43:b9:f7:5f:b9:ea:75:22:a7:47:99:58:
61:0f:9d:63:e6:74:32:2a:05:6b:60:21:64:f7:2a:
50:c1:65:37:68:52:65:9d:5a:51:8b:23:4a:c2:d5:
7f:4f:56:a3:37:39:0e:88:35:4c:7f:85:6d:4c:54:
2b:e7:e1:a1:05:63:28:34:2e:6b:cd:f2:0d:d9:a4:
a9:bc:27:ff:12:45:8a:ce:fd:89:6c:3f:1c:80:5c:
01:15:4c:26:13:82:32:bb:3b:25:51:6e:85:ea:f5:
dc:6d:42:47:39:9c:ae:ba:fa:b3:cd:82:70:e2:96:
3e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:56:B9:39:53:CC:F2:39:E5:2A:7D:FC:C8:C7:87:41:0C:91:BE:0C
X509v3 Authority Key Identifier:
keyid:C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fe:b4:a9:c8:8c:d1:72:6f:dc:74:88:e4:c6:6e:46:68:76:
88:3a:a3:41:94:1e:c2:d1:29:b0:82:1b:95:86:64:12:fa:e0:
c9:06:a6:32:33:57:f0:bd:f4:09:74:0b:aa:89:29:ba:08:06:
51:63:db:26:30:e5:f6:f3:f0:79:6b:33:67:ca:a3:03:91:46:
68:95:80:1d:61:da:b8:c6:c9:13:88:7f:6b:73:81:67:8b:41:
87:10:08:77:8a:16:c2:12:6b:99:47:8b:c5:85:77:12:ac:6d:
4a:69:87:69:33:34:07:60:e3:82:77:64:a2:1e:5c:51:42:e4:
66:f6:d5:c2:73:a3:03:60:38:12:17:e7:32:05:d9:f6:70:1f:
27:fa:fc:5c:a7:e3:c2:70:44:db:2b:3d:0f:c9:db:cb:61:41:
50:d8:a5:8f:93:c9:ed:f2:24:aa:13:97:6f:cb:f6:e8:7a:17:
cd:da:19:28:fa:f9:8e:57:f8:2e:83:08:8f:7d:44:a5:58:c5:
49:80:70:90:4c:44:bf:af:f0:98:d2:12:b4:8d:19:01:77:26:
a8:99:be:72:e9:01:4c:16:fc:05:ff:33:73:51:6b:be:31:c2:
ff:ce:48:0b:a7:4f:46:a3:35:47:c1:16:45:08:8f:f8:9c:da:
ad:0e:ad:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:39:09 2026 by rpki-client