Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
File: xWwoao20vSFr9kx1szhRsARaF18.mft (raw, json)
Hash identifier: 70tQmakFDI02/v8HLNAazpPaGYFDsr8mXbNDjR9YZds=
Subject key identifier: BF:87:EE:DF:C0:93:AB:73:C1:07:A5:01:EF:87:AD:8D:97:21:82:C8
Authority key identifier: C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
Certificate issuer: /CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Certificate serial: 01A10248AB8C51F3C581495CEAEA6D96D6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
Manifest number: 0EE9
Signing time: Sat 03 Oct 2026 15:01:19 +0000
Manifest this update: Sat 03 Oct 2026 15:01:19 +0000
Manifest next update: Sun 04 Oct 2026 15:01:19 +0000
Files and hashes: 1: fzBvwE7sX01y4kB6SSgdE7n9ysI.roa (hash: qCcHE+EY0A9msSwDHW5P3s9hKxDDBKeiCJ6eljce7Pg=)
2: xWwoao20vSFr9kx1szhRsARaF18.crl (hash: sQ+4y4kz3ckZ9jtbnsa4e9qILQLRsI+fa76X0ASv4QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:48:ab:8c:51:f3:c5:81:49:5c:ea:ea:6d:96:d6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Validity
Not Before: Oct 3 15:01:19 2026 GMT
Not After : Oct 4 15:01:19 2026 GMT
Subject: CN=bf87eedfc093ab73c107a501ef87ad8d972182c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:da:19:62:cb:0c:4d:0a:2f:7f:df:d7:ab:
6d:57:8a:37:77:e2:1e:00:77:32:d2:11:d7:c3:19:
6e:c4:0e:55:ee:b1:fc:c7:e2:af:0b:4c:8d:58:00:
78:96:0b:d0:0a:2c:cb:44:71:81:f0:89:19:3a:2a:
19:85:24:fa:46:a8:ee:06:96:f4:f4:9f:78:8a:42:
98:4d:3f:80:4f:17:08:46:08:51:cf:82:fc:d0:83:
86:ea:a7:81:32:99:23:02:29:a6:20:52:57:22:cf:
56:db:0f:9c:92:7c:75:64:e8:72:a4:5c:19:3c:b8:
ba:a2:86:9a:8d:61:c5:50:24:24:76:95:ba:99:5e:
4c:55:dc:05:99:22:bd:2e:d6:d3:b6:1c:40:7c:32:
7d:04:89:46:53:3b:40:ed:8e:02:e5:41:53:99:e3:
c3:57:92:df:62:3e:27:7a:bb:e0:5e:5d:14:50:58:
b4:9f:72:97:b2:1a:0f:2a:b3:8d:9a:f3:8f:6c:9b:
5e:69:27:40:ce:79:9f:f8:9a:70:45:1f:a1:9a:db:
9a:da:e8:8e:65:75:83:f0:bc:f7:7e:08:73:17:94:
d0:2d:4f:75:ba:2f:d4:a8:f9:c6:ac:0d:03:31:1d:
3e:bb:29:ae:03:9c:b4:4f:f5:74:43:66:45:ef:e4:
dc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:87:EE:DF:C0:93:AB:73:C1:07:A5:01:EF:87:AD:8D:97:21:82:C8
X509v3 Authority Key Identifier:
keyid:C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:06:0e:dc:29:99:44:3a:44:4f:e7:69:76:91:bf:87:0d:55:
95:72:a3:22:26:16:36:e3:32:a9:38:dc:47:28:14:80:44:fd:
42:c6:3b:0a:73:2f:a6:52:5b:73:f9:4d:54:32:1b:16:71:4a:
b0:e0:ae:1f:15:e8:90:5a:14:14:83:2b:09:6d:65:65:5a:70:
31:34:9c:ac:ca:b1:8c:18:f6:6c:43:55:d9:3d:3a:32:97:aa:
ce:45:60:eb:38:34:ed:6f:85:33:d7:91:29:59:7a:ef:77:12:
81:84:15:f0:8b:af:03:f6:fa:70:ce:61:58:45:97:31:f7:67:
8c:e7:f3:1f:db:94:ba:93:04:c5:22:0b:71:50:08:b6:a6:65:
2a:19:48:5a:11:5f:50:15:f8:3a:09:16:23:57:87:69:27:f6:
91:19:ab:ad:59:ef:a0:1d:0b:99:df:c6:ac:31:43:1d:b8:40:
82:7e:cb:22:de:fd:bc:46:b9:c0:7b:dc:7b:82:0d:99:57:c7:
f8:25:4b:c6:7b:72:b6:3b:94:4d:f1:1c:6e:75:32:f1:63:eb:
ae:62:be:50:03:c9:a8:6a:fe:81:6b:56:97:c9:5b:b9:45:6d:
6f:39:89:a9:cb:72:76:3e:72:73:1b:a5:5f:fe:0a:93:0e:59:
46:08:d7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:15:56 2026 by rpki-client