Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier: A01WRn48HJOyCCrwqnrB+ZWoP5xA4Xvd6gdG+j+Pkfg=
Subject key identifier: 15:71:A6:E6:AE:CE:84:7B:1F:AD:2C:E0:CF:A6:D8:85:6B:15:F5:89
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial: 019D98BD664A8A16FE2CA193EE8E5ECB26FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number: 108A
Signing time: Fri 17 Apr 2026 00:00:42 +0000
Manifest this update: Fri 17 Apr 2026 00:00:42 +0000
Manifest next update: Sat 18 Apr 2026 00:00:42 +0000
Files and hashes: 1: XfPxNqw04f4ysUNycil0EQofl1M.roa (hash: JClRzQorRQbXDP0L/PC7A7JxisEaLLPV1aRUiLTnBv8=)
2: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: 8x4KbRxOWtjlgxeFJF2Ps7BLsKT8OqVexr629GRHd84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:66:4a:8a:16:fe:2c:a1:93:ee:8e:5e:cb:26:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Validity
Not Before: Apr 17 00:00:42 2026 GMT
Not After : Apr 18 00:00:42 2026 GMT
Subject: CN=1571a6e6aece847b1fad2ce0cfa6d8856b15f589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:6f:37:79:4e:e2:55:09:59:32:97:92:06:
8b:de:2a:1f:8d:95:6e:e3:70:bb:96:85:77:7b:dc:
fc:2b:fc:4e:e6:90:b9:67:ff:47:12:1f:26:67:d4:
f9:bf:4f:61:2f:64:ab:3b:a4:ec:43:76:f7:fd:65:
8b:61:58:85:4a:0e:95:2f:8b:ca:49:d4:56:c3:91:
ce:22:88:31:9c:10:23:ee:ee:b7:26:6c:08:71:13:
72:65:00:22:5e:4f:00:2e:c5:4e:cc:e8:d7:dd:4d:
b6:11:8c:ba:ee:93:31:68:6e:1e:ef:c9:86:4b:57:
71:a6:71:64:52:5f:c8:f9:7c:6a:8c:4b:80:fa:23:
0d:ae:a3:cb:e6:36:28:2b:46:06:a3:9a:93:a4:9a:
4b:3c:fd:1c:a6:78:bf:56:16:97:b0:4d:b8:10:d5:
56:07:be:fc:7a:78:6e:a3:05:c6:71:94:28:b4:38:
c7:9a:5f:18:62:c3:39:03:1f:58:0d:b5:62:63:f3:
53:2c:03:9b:ad:95:89:70:2b:a0:31:93:4b:d9:82:
08:30:71:62:27:b3:d3:d1:74:8e:0c:d9:1d:8b:4b:
80:b8:43:ec:fa:ad:d6:da:75:0d:11:4f:ee:25:da:
3f:c1:ef:62:0d:49:56:a2:93:8d:d5:25:04:b9:62:
81:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:71:A6:E6:AE:CE:84:7B:1F:AD:2C:E0:CF:A6:D8:85:6B:15:F5:89
X509v3 Authority Key Identifier:
keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:03:15:13:42:01:f1:dd:f9:a4:2e:c2:9d:31:04:98:c7:1e:
7d:84:09:2e:8c:f9:73:2b:99:40:aa:ab:d1:f3:df:bf:60:2e:
41:b3:07:da:19:ad:69:a2:9f:f8:db:39:07:70:14:99:7c:f9:
b9:33:9c:44:a8:e4:09:74:d4:c6:4b:cd:95:73:66:d7:7a:a5:
db:2a:4d:5c:32:69:1a:df:af:80:7e:5d:08:24:71:e8:6f:e1:
54:ec:ed:80:28:db:6c:01:ca:2e:63:3e:1d:5a:89:f3:ad:10:
3c:00:7a:0f:13:8b:c6:67:45:9e:9d:b0:d1:f5:09:90:b7:d3:
07:42:9b:82:1b:66:46:de:2e:55:8d:52:32:76:0b:b3:5f:72:
42:cf:12:65:ae:48:25:27:47:8c:ce:32:f0:09:be:b4:00:40:
17:45:20:61:38:5b:99:fd:b2:0c:a7:fa:3e:19:48:08:eb:37:
af:5c:59:33:a8:b3:f2:ed:e5:07:ea:fa:e9:d5:12:86:96:0e:
86:9f:9b:d6:f1:f2:37:d4:bd:ff:31:c2:3c:34:2b:8c:d6:c1:
8e:3b:03:13:aa:8d:6d:55:ba:45:4d:57:ab:c8:cc:46:7b:49:
5e:59:b4:1d:81:55:3f:de:8f:d0:fa:31:4c:2b:04:d7:98:62:
d1:d0:b9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:14 2026 by rpki-client