
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: sI+vX4IYZRe8GFVMnsJ1zhOQMyzL8kjSmC1k8Xeoo3M=
Subject key identifier: C3:3A:D5:1F:6E:3D:7E:71:FF:A9:42:66:D6:9D:5C:5F:FE:C6:12:F3
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 01A134105BA5B0C0503E933C58131AB7325B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 07BA
Signing time: Tue 13 Oct 2026 07:00:49 +0000
Manifest this update: Tue 13 Oct 2026 07:00:49 +0000
Manifest next update: Wed 14 Oct 2026 07:00:49 +0000
Files and hashes: 1: tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa (hash: 3SzovpialpEoSK1tVIj0K+EFB6CyFsxOHbtKDkoQSb8=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: N/DAvunhGYuAvkVFWaqlUwDYmjWidfPp/xnP9KId7Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:10:5b:a5:b0:c0:50:3e:93:3c:58:13:1a:b7:32:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: Oct 13 07:00:49 2026 GMT
Not After : Oct 14 07:00:49 2026 GMT
Subject: CN=c33ad51f6e3d7e71ffa94266d69d5c5ffec612f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ec:51:f8:a6:52:f9:56:a8:88:b3:c6:6f:96:
3a:0a:d9:a3:b4:ac:11:f3:54:89:32:90:ad:87:da:
bf:81:a2:5e:fe:85:72:16:67:7a:03:57:c7:d9:49:
77:29:22:2a:bc:c0:c3:e6:52:86:8a:da:1a:9d:8e:
2e:5f:6f:e0:dc:c2:6d:05:67:c2:96:f8:5e:8c:06:
95:15:17:ef:76:d6:1c:e4:3f:ae:1b:d2:76:04:0c:
7f:8f:ee:a4:d0:39:33:d8:97:f7:aa:78:54:ba:8b:
5b:73:a1:78:bd:c7:59:55:23:c8:96:24:b6:c2:d4:
86:bf:9e:e6:65:12:1b:94:d2:f4:87:69:70:76:18:
2b:b7:6f:14:b4:57:0d:60:d0:b9:48:80:27:4e:9f:
fa:63:c1:8c:da:e0:23:98:2b:33:ec:c5:b2:a8:be:
4a:35:64:ed:05:2f:31:09:0e:bd:7e:f3:07:56:f8:
19:68:c0:6d:ce:20:e3:d9:97:5e:8b:70:a8:bf:ef:
6b:e8:06:25:8e:54:45:8f:68:14:44:90:79:e5:65:
ae:6d:ad:b9:7e:5a:e9:8e:91:17:2c:d2:68:77:13:
bd:f3:c1:45:28:2c:ca:96:7d:db:60:e3:76:88:93:
12:9d:70:cc:46:ce:99:cc:1a:4e:3c:b6:31:e3:b9:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3A:D5:1F:6E:3D:7E:71:FF:A9:42:66:D6:9D:5C:5F:FE:C6:12:F3
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5a:60:82:71:a2:8c:27:20:2b:3c:8c:34:3c:4b:a1:d9:29:
33:fb:96:74:0b:d1:b0:e2:1c:72:70:30:46:a6:1d:ff:64:56:
53:93:d2:9e:92:8b:ac:7b:87:97:e5:e3:dc:bf:d2:c6:af:bb:
f0:41:83:a7:f8:b8:78:e5:8e:22:e5:b1:d6:50:62:dc:6f:6f:
23:02:5e:c6:ff:87:7f:b3:84:07:6c:19:51:09:2e:10:59:9e:
bc:b7:33:f0:a7:cf:58:c9:37:83:71:c0:84:3d:c7:26:e9:c8:
58:8c:4c:34:d9:3f:48:ed:5c:75:33:48:f4:97:c5:8a:8e:86:
18:ec:e0:8d:1b:85:11:22:c1:c4:31:99:12:da:0a:22:bc:fd:
4b:0e:fe:01:24:f6:07:21:b7:0e:a4:4c:cb:e3:62:75:f2:0c:
c9:df:8d:86:a6:0a:b0:2c:ec:3a:c1:ee:bf:f5:3c:85:62:dc:
9d:76:8d:c5:b1:99:f8:ed:56:95:e8:c8:e3:46:23:00:cc:4f:
a0:5e:6a:ee:c7:d3:dd:c7:f6:73:e2:50:3c:b6:bc:1b:5d:5e:
15:bc:9b:32:f7:1d:e6:62:a4:fb:23:64:8f:12:9d:90:7b:fa:
9d:a9:33:2b:ce:c4:6a:fd:55:63:1d:3f:12:56:74:91:fb:4f:
28:46:c3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:16:42 2026 by rpki-client