Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
File: _XjxP_qS8HTr5VfSotKa0Noz5dg.mft (raw, json)
Hash identifier: yAycn0EqkX/FjX0fftbLz6M6nYrYtWKJTUSaXPNKzgU=
Subject key identifier: BE:56:1F:93:8D:21:5C:5A:9D:6A:C8:6F:7C:14:F4:DC:0C:5B:5E:CA
Authority key identifier: FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
Certificate issuer: /CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Certificate serial: 01A107A60F4CA3B04C926991E95A77431400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
Manifest number: 0FE1
Signing time: Sun 04 Oct 2026 16:01:25 +0000
Manifest this update: Sun 04 Oct 2026 16:01:25 +0000
Manifest next update: Mon 05 Oct 2026 16:01:25 +0000
Files and hashes: 1: H7yvjO1PteMvFud2cVf980xvhOM.roa (hash: RhQsj0SDsU/JKqzjG9Bf/mkgnMQmL8vD/s9sreGOu30=)
2: _XjxP_qS8HTr5VfSotKa0Noz5dg.crl (hash: /XYUtOGKEQ4v0sfFDbmLP8T4/iVfHUFftectiW1Vu7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:a6:0f:4c:a3:b0:4c:92:69:91:e9:5a:77:43:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Validity
Not Before: Oct 4 16:01:25 2026 GMT
Not After : Oct 5 16:01:25 2026 GMT
Subject: CN=be561f938d215c5a9d6ac86f7c14f4dc0c5b5eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:3e:b9:6d:6d:2c:ec:66:ba:fd:28:98:57:
cc:43:4f:b7:f1:c5:12:a3:61:d2:34:eb:c5:ef:95:
2b:3e:ae:a1:32:8c:10:8d:2b:c4:de:98:78:53:00:
73:c0:f4:76:b5:55:15:b8:a5:5e:f1:ec:cf:87:1c:
38:c4:bf:7e:df:e7:35:d1:9f:d0:d8:b1:a3:04:5c:
c4:d8:ee:42:cf:a2:91:60:d8:24:dc:13:06:46:e7:
d7:d8:82:78:df:4c:68:20:44:65:48:37:2c:e2:27:
1a:74:5a:9e:a6:22:01:9e:60:b6:ab:f2:be:30:b3:
44:ff:6d:62:ae:c0:d5:58:90:27:52:04:82:fa:bb:
b2:5b:c8:33:35:6e:38:cc:9e:f1:55:35:86:e8:91:
f1:7b:02:44:84:89:f9:f0:c1:d1:49:c7:a5:79:e5:
9a:05:4e:6d:b5:89:b2:14:2a:ca:99:34:fb:c5:89:
dc:14:29:af:7c:4a:98:e5:3f:27:2f:9b:71:a3:6c:
5a:dc:6f:d8:40:7c:33:05:31:f5:d5:b2:8a:82:01:
43:c2:a1:65:9c:2b:f4:f0:d5:77:7e:c6:53:6c:a8:
77:ee:e0:dc:f3:69:4a:6a:17:0d:87:20:bd:94:31:
a6:7f:db:b9:6f:22:fc:21:a7:00:42:07:a6:46:24:
51:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:56:1F:93:8D:21:5C:5A:9D:6A:C8:6F:7C:14:F4:DC:0C:5B:5E:CA
X509v3 Authority Key Identifier:
keyid:FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:37:0c:bf:ac:d4:49:78:9b:0f:e4:07:9c:66:a6:f9:e3:5e:
3d:4b:0b:75:97:b7:76:51:c0:8d:db:be:11:96:2e:c4:35:1f:
a3:b7:ef:4c:0c:43:d4:7a:9c:33:0f:cf:7a:67:60:a0:10:1d:
a5:71:7a:ed:37:c5:42:bf:3a:f1:f3:d1:b2:24:4c:87:12:d2:
bc:85:e5:c1:7e:e5:ec:02:33:5d:f3:16:23:e9:0c:de:af:43:
73:9e:43:6c:61:b2:bc:18:99:a7:2d:1b:70:b4:21:1f:0b:df:
b7:48:5b:e4:bf:89:ea:21:6c:07:9b:40:c6:5b:38:4e:7b:8f:
09:69:97:a9:cf:6a:d1:43:61:76:43:44:b0:5b:9d:9d:33:87:
ab:f6:eb:5c:59:2e:80:63:90:3c:7e:d6:60:63:13:4a:a8:2c:
29:9c:11:b0:2d:f1:19:c8:fb:dc:f0:15:54:95:c6:17:9c:26:
7d:5d:ce:d3:a5:0c:28:ac:e3:35:9d:43:06:25:38:8a:a3:92:
4d:e6:30:1a:cd:fb:1b:fa:85:0b:94:4b:c7:76:25:0f:ce:60:
a1:20:d4:15:94:45:73:82:82:b9:ad:c3:bd:cb:ea:dc:6c:5f:
db:0b:51:cc:60:9a:e1:92:a2:c1:b9:5d:9f:76:ae:fc:4e:c1:
7d:f0:6f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:31:58 2026 by rpki-client