Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
File: sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft (raw, json)
Hash identifier: Gt2dYo+UbQAB5R6M1UkVIIU1Qjn4MF8L386Xotxm9Y8=
Subject key identifier: 1A:A1:C3:0B:A3:67:92:27:97:8C:0E:65:CC:76:54:20:56:68:D0:48
Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Certificate serial: 01A119E241A30F129B7F052AA5EE5C49D0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
Manifest number: 03F7
Signing time: Thu 08 Oct 2026 05:00:20 +0000
Manifest this update: Thu 08 Oct 2026 05:00:20 +0000
Manifest next update: Fri 09 Oct 2026 05:00:20 +0000
Files and hashes: 1: Evg5E-8VSXY1dFWe0dsHFW-O_Jo.roa (hash: Icoysq39tLxqHCpP3ABhw3yUgnv4HKO+EMDypdb4KPE=)
2: r-GapXK3JuL-T7M03ZC61uSVfyE.roa (hash: AG5Eg1DYw6Qc5ggeZMDpUWKtb6RLHqA8/H20Z17wo7s=)
3: sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl (hash: KbdE6hbveeeYgLHXklYy5sETSNh5dlBc2Gi85K/bjd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:41:a3:0f:12:9b:7f:05:2a:a5:ee:5c:49:d0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Validity
Not Before: Oct 8 05:00:20 2026 GMT
Not After : Oct 9 05:00:20 2026 GMT
Subject: CN=1aa1c30ba3679227978c0e65cc7654205668d048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:cd:8d:26:c9:e3:e4:af:73:f7:4a:18:0a:
12:47:ec:b4:93:7c:5f:21:da:81:cf:20:8d:fa:6c:
3b:c9:84:08:aa:ba:ba:4a:f7:95:41:12:6b:54:3a:
44:45:d7:37:8f:da:59:71:13:70:58:8b:78:c0:e9:
4d:b5:b0:b2:76:13:6f:45:36:d4:19:19:90:74:08:
98:d0:73:a0:c6:60:65:c6:e8:95:46:6b:c5:b3:15:
8d:a4:3e:81:dc:92:21:2b:cd:8f:a8:e1:a1:35:d5:
5d:92:90:98:15:ff:53:2f:76:c2:a2:54:68:a5:a6:
83:66:cd:34:ac:62:3c:2a:90:3f:ca:13:3e:71:97:
b6:bb:6b:95:d3:af:e0:e2:77:78:68:33:20:6f:1b:
b6:0a:7d:d2:59:49:ea:e6:c8:79:57:fc:70:fe:60:
fa:7e:35:77:d9:fc:fd:72:2d:fe:2a:0e:4b:7f:01:
19:bf:a9:ee:4b:84:98:9f:78:27:7a:83:4f:dc:5e:
43:d4:51:cb:37:5f:eb:6c:80:1e:49:18:67:5f:3f:
9e:3f:23:2e:7f:ec:33:b1:ff:ff:aa:53:b1:63:e1:
d8:34:dc:9e:99:56:f0:7c:8b:d9:91:4b:3b:ae:79:
30:60:c7:b0:14:ae:25:ad:49:77:3c:4d:34:90:e5:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A1:C3:0B:A3:67:92:27:97:8C:0E:65:CC:76:54:20:56:68:D0:48
X509v3 Authority Key Identifier:
keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:09:93:60:86:ce:3b:54:5c:dd:70:e4:d1:b6:1e:a8:d9:ee:
c7:8b:a1:02:de:96:1d:fe:e4:5b:b1:09:c9:3b:51:e5:68:91:
6a:e9:60:17:e1:0c:87:2c:44:04:f4:af:f2:35:26:65:39:7e:
c4:e9:72:6e:6c:0c:27:8b:18:8d:b1:88:03:53:b4:ba:91:1f:
50:1b:17:02:f1:be:59:95:30:8a:8f:bd:59:31:13:92:6c:ec:
d0:7f:61:da:cf:56:36:72:c9:94:fd:4c:bf:a5:61:51:4d:05:
26:47:ab:c4:44:d2:e1:09:5a:af:12:53:38:74:60:75:23:e2:
d0:5e:84:22:fb:85:70:2b:22:e9:69:39:d0:ef:4f:52:e2:64:
b0:b6:bd:ea:05:68:25:60:d3:55:d5:f0:59:22:5f:66:fa:e1:
51:72:ba:27:6e:e5:e0:87:24:df:1b:c7:73:ae:55:1e:91:69:
d9:91:d5:96:58:bd:ee:5f:e0:27:80:bc:5c:23:bb:95:71:e3:
e0:ca:fc:ec:2a:4a:3c:15:5e:80:94:d8:f5:4c:a6:f1:3b:95:
07:b9:e0:db:c6:d4:8b:d7:f0:8d:df:67:aa:85:77:0b:96:c4:
8e:f2:c4:0e:3c:53:f2:65:1f:86:3d:cd:e7:93:e8:0f:33:9e:
5d:63:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:23:20 2026 by rpki-client