Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
File: xU9qEXeCbFq2S9OvATiptXpLkeU.mft (raw, json)
Hash identifier: HUXvaDz9ESgTUZmUEiHumy3O6fNEHYoNyBGzIvTokHk=
Subject key identifier: 0B:74:DE:C6:D8:36:42:17:79:3B:7B:21:07:7C:DA:F9:6D:D2:F5:D8
Authority key identifier: C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
Certificate issuer: /CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Certificate serial: 01A1C4E79FAA2766B888908BE89E48CA2B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
Manifest number: 037D
Signing time: Tue 10 Nov 2026 10:01:16 +0000
Manifest this update: Tue 10 Nov 2026 10:01:16 +0000
Manifest next update: Wed 11 Nov 2026 10:01:16 +0000
Files and hashes: 1: AAL-YY9GVuWqbLX5GG1k3ImctWA.roa (hash: dOcDqpARrTucPUNtlVinnlKcwBaTZo2MLnDCrG84YIw=)
2: xU9qEXeCbFq2S9OvATiptXpLkeU.crl (hash: FJsTViuFqLnvaTFh+4tTO3rwVYa0ElDt6h4Td/xZP2A=)
3: x_VjdL15EqUB70pwRzrAehHyTNo.asa (hash: roR1zfTDox/ACVmuA2wDu2cHX32k232PLN3hkotoI04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:e7:9f:aa:27:66:b8:88:90:8b:e8:9e:48:ca:2b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Validity
Not Before: Nov 10 10:01:16 2026 GMT
Not After : Nov 11 10:01:16 2026 GMT
Subject: CN=0b74dec6d8364217793b7b21077cdaf96dd2f5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:d6:51:66:58:8d:5d:ca:27:1f:a5:e4:de:
c9:2c:b4:b1:82:5a:0a:43:64:54:81:39:af:55:02:
76:5d:71:bf:cc:ca:67:41:8b:87:8d:fc:63:d6:dc:
a5:3a:bc:11:1e:54:12:3f:5a:f0:69:a6:5b:13:d1:
2b:da:83:fb:33:6b:29:dc:00:e7:ae:7b:a7:db:31:
61:4f:1c:25:95:20:31:ea:f3:51:47:31:42:b1:5f:
11:20:67:3d:84:ba:c1:1d:73:b2:a2:43:44:47:11:
b1:9e:1f:b4:a2:b9:b5:eb:ff:08:1e:33:6a:65:02:
14:de:59:af:c2:e5:a7:8f:5d:32:08:d9:b9:2d:aa:
f6:9d:fb:03:2a:5a:7f:5a:d5:69:8c:aa:61:e0:db:
cb:0c:23:24:be:c2:9b:4f:ba:ed:b5:29:08:65:98:
19:39:c6:30:c3:45:33:c7:82:8d:51:b1:1d:0e:1c:
5c:60:59:5d:37:21:04:08:5b:d8:f4:3c:d9:b1:4c:
f3:c9:8d:ba:b8:30:bb:9c:af:52:2f:42:d2:11:79:
2f:ed:54:21:2b:bd:7e:3b:b7:9f:ba:af:cb:e0:ed:
a0:b0:f7:39:8e:cb:ad:32:60:f6:16:ba:01:db:95:
f0:09:30:7c:23:e4:1c:23:e2:dd:2a:db:1d:bb:1b:
63:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:74:DE:C6:D8:36:42:17:79:3B:7B:21:07:7C:DA:F9:6D:D2:F5:D8
X509v3 Authority Key Identifier:
keyid:C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:6f:e6:e2:57:18:98:f2:62:b9:a7:61:3a:1c:2a:91:e1:80:
2d:a7:6e:a0:66:7e:27:8b:94:b7:67:65:d9:22:c9:51:57:01:
c1:f3:95:67:a2:d9:1f:3a:48:4c:37:55:ce:54:6e:2b:74:1c:
94:fb:62:5b:11:73:e0:6f:6e:72:0b:1c:39:bf:cb:0d:a7:a6:
53:2d:48:a8:c2:0a:82:a3:ec:4c:69:e7:1b:0a:8e:22:45:f0:
6c:3a:43:22:5f:df:c4:d3:33:de:83:6d:1a:26:ff:2d:82:d3:
59:29:bf:a9:a8:83:79:8a:9f:92:c7:75:62:98:f8:97:9a:18:
40:a6:82:34:27:23:40:cf:ff:5b:c6:c3:6b:d9:1e:02:38:ee:
4f:ee:f5:08:d7:d6:36:a2:51:30:a1:9f:7e:be:60:4c:e2:89:
bf:e0:18:9d:4f:87:d5:40:f1:88:4a:08:b6:b2:66:83:8d:ab:
a1:23:18:63:3b:6f:31:3d:bf:cf:d6:c9:fb:e8:74:d1:39:58:
d7:cb:e5:2f:7e:f8:e4:c6:38:82:37:c3:14:e6:c4:c6:17:01:
9d:39:7a:f3:6a:27:26:50:4c:68:6b:bc:52:ce:a4:89:80:35:
d0:a9:9e:9c:9f:3a:14:41:47:18:76:d7:e8:6b:f5:60:f5:7c:
03:b7:24:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 20:36:46 2026 by rpki-client