Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
File: x1es7dSIRbnr0Muqfb2ri8z9jWE.mft (raw, json)
Hash identifier: 9m6XZUuGWiEUVMbncxRNLKZfruiS5fhZx5N82tp1PzU=
Subject key identifier: 26:EF:60:81:63:CC:80:04:AD:D1:F2:D3:BA:8D:FD:64:EA:9A:6A:A3
Authority key identifier: C7:57:AC:ED:D4:88:45:B9:EB:D0:CB:AA:7D:BD:AB:8B:CC:FD:8D:61
Certificate issuer: /CN=c757acedd48845b9ebd0cbaa7dbdab8bccfd8d61
Certificate serial: 01A130A215A68D598B905C49004EC0D760D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
Manifest number: 0117
Signing time: Mon 12 Oct 2026 15:01:30 +0000
Manifest this update: Mon 12 Oct 2026 15:01:30 +0000
Manifest next update: Tue 13 Oct 2026 15:01:30 +0000
Files and hashes: 1: 1-Urp8rAL1ZSmlkxaPOzl5pj6sR8.roa (hash: eq+9SCGsso6J0nmlRfLYKk2u+tOTbol21TaNCHcqDic=)
2: YBBatb3zVPdSOcJ9MpSHMK867-k.roa (hash: IlKGC7X7khejWn4GInerZOXh0TDt6Gd+xhqLmW0TfU4=)
3: x1es7dSIRbnr0Muqfb2ri8z9jWE.crl (hash: 9vvc6kEFUvOX79DeFJj3aC4m6XDy69nyrm7Ah+oBc0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 15:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a2:15:a6:8d:59:8b:90:5c:49:00:4e:c0:d7:60:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c757acedd48845b9ebd0cbaa7dbdab8bccfd8d61
Validity
Not Before: Oct 12 15:01:30 2026 GMT
Not After : Oct 13 15:01:30 2026 GMT
Subject: CN=26ef608163cc8004add1f2d3ba8dfd64ea9a6aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d3:0f:7f:c2:30:a7:90:ce:38:0e:93:8c:9e:
a9:90:be:dd:0e:a6:1c:88:4a:99:89:00:7f:99:4e:
5f:cf:35:18:7e:bb:dc:31:d4:21:e8:01:97:20:55:
2f:cf:7b:86:b8:36:5f:53:32:23:1a:1c:da:31:5a:
5d:08:eb:ca:45:66:7f:56:94:65:8c:41:d2:c4:6c:
8e:5c:20:bc:00:cf:9e:bb:57:76:1f:52:54:61:7b:
0d:b7:77:78:0b:ff:c8:30:b3:55:ee:e7:e9:1b:b7:
8d:0e:e2:00:f8:bf:83:5f:fe:4b:ae:aa:fc:6a:8c:
a1:91:10:dc:18:7d:57:36:88:7f:c8:e5:e1:ee:db:
2c:13:84:e1:c2:ef:ed:9a:d3:27:eb:cb:34:c9:fc:
4a:16:f5:a3:f5:c3:17:37:7d:3b:1d:1e:08:25:36:
65:11:16:95:1d:53:c0:0c:98:8c:ce:57:50:ab:f7:
ce:49:61:97:11:6f:49:20:fc:fe:2c:f9:f6:11:d4:
54:a1:f4:80:a3:c5:07:93:ff:2d:5a:c6:2f:b6:e9:
bd:c1:ca:bd:da:64:b7:6d:0b:7c:89:fc:33:71:e6:
f8:97:7c:0b:00:4a:55:44:0c:3d:4b:c6:12:fe:46:
e8:4e:10:df:45:f6:98:7f:57:0f:dd:70:91:da:65:
35:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EF:60:81:63:CC:80:04:AD:D1:F2:D3:BA:8D:FD:64:EA:9A:6A:A3
X509v3 Authority Key Identifier:
keyid:C7:57:AC:ED:D4:88:45:B9:EB:D0:CB:AA:7D:BD:AB:8B:CC:FD:8D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:75:8b:c3:75:ae:30:f7:20:91:63:0a:b2:2f:bf:bc:f3:b6:
4e:8d:a9:95:b4:09:00:92:a5:4b:21:28:b9:a1:57:82:92:f6:
0c:71:1b:55:c7:21:2d:b7:5a:ec:84:93:1c:12:ed:7d:5f:0a:
81:92:ba:5c:97:52:5c:83:4a:cb:8f:c0:3d:1e:4b:9f:10:40:
db:c0:97:bd:f5:d3:97:71:2a:6f:e8:15:b1:c4:10:11:93:1c:
6d:07:6d:46:ce:87:ee:f0:98:ce:77:e8:43:ed:e2:40:99:3e:
c2:05:8b:c4:d7:a5:cd:5e:54:f8:bd:a3:5d:dd:2e:ef:b3:da:
3e:a6:09:43:fc:f6:9d:ae:1e:58:a6:e4:79:80:4a:84:64:87:
c2:4f:52:da:00:ee:9a:79:1d:6a:aa:bb:4a:8e:47:d7:26:18:
b5:0b:90:7c:78:be:41:27:2f:2d:ed:a1:89:7a:0a:fd:4d:43:
48:ca:32:9e:40:da:97:2e:86:ff:c9:1a:bb:24:49:7b:cf:9f:
f3:7e:e7:23:3e:fc:0e:24:5a:43:2a:76:1b:43:f2:14:90:51:
09:98:d0:21:a0:dd:05:4e:4b:34:be:5c:fd:60:66:7a:88:db:
c0:be:30:6d:4a:0d:9f:c3:63:e8:23:e6:20:a1:7f:bb:95:dd:
03:7f:32:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:29:53 2026 by rpki-client