Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
File: xBOLshC3wajwZm4HWfR18AZN8fc.mft (raw, json)
Hash identifier: 4EUXcRIPufitERBwGU4Joehnl/Tkyn7cxL55fmDGYss=
Subject key identifier: 9F:75:16:BC:48:80:B7:97:4E:99:F7:F8:C2:69:07:CF:F3:E2:8E:EA
Authority key identifier: C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
Certificate issuer: /CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Certificate serial: 01A0CC35088475F1DB6E6189CBC55D317EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
Manifest number: 0282
Signing time: Wed 23 Sep 2026 03:00:22 +0000
Manifest this update: Wed 23 Sep 2026 03:00:22 +0000
Manifest next update: Thu 24 Sep 2026 03:00:22 +0000
Files and hashes: 1: 7h5eSPNlffr_391YlxjHN1ItANQ.roa (hash: XEuG2vwGeCYbNa542z5LaRxd5TGJ34KJdQn28qGEDr0=)
2: KiNMgdfJ-jED44ngYXhsk4y4eUo.roa (hash: a7w7sWRkPS/IylXEpEG2ZktzWT1XLIn8MRkkpzcobUA=)
3: xBOLshC3wajwZm4HWfR18AZN8fc.crl (hash: DDb62Iu0jq5h8aS+Cfk4wdXe8khbK6Lo41TfKRartw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:08:84:75:f1:db:6e:61:89:cb:c5:5d:31:7e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Validity
Not Before: Sep 23 03:00:22 2026 GMT
Not After : Sep 24 03:00:22 2026 GMT
Subject: CN=9f7516bc4880b7974e99f7f8c26907cff3e28eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:e9:a5:3e:17:0c:7f:39:c2:2d:b8:8a:3d:
8d:92:b8:60:4a:78:a4:dd:00:f7:49:35:34:9d:52:
b6:a2:5c:92:99:3b:76:f1:b4:f9:60:99:7d:70:67:
ff:64:53:8e:db:ae:04:7d:44:09:c5:2c:0e:93:b2:
87:49:38:e1:1d:e3:de:15:68:0f:a9:22:bd:75:e5:
60:c3:35:16:59:9d:2c:5f:ab:8b:12:01:5a:7d:22:
fa:27:4f:92:87:93:10:17:56:a6:3d:1e:19:d2:ac:
74:fa:79:c7:9b:b7:31:f1:40:1d:2f:f2:6a:5b:99:
6e:3f:69:08:be:ae:ca:96:9a:13:9e:8e:2a:51:bb:
82:31:8f:f5:50:3b:a9:b9:7b:fc:ee:2c:5d:50:2e:
ec:c4:e7:ab:da:70:fa:7e:56:c8:5a:8b:d3:2b:48:
00:33:ba:7d:71:7b:48:20:e7:f5:97:57:47:55:47:
55:e2:bb:60:73:ef:25:10:a8:f4:87:2d:f2:4d:84:
f7:34:34:b0:15:4b:f0:27:74:8f:d6:61:5b:b0:16:
4d:54:d8:ed:57:eb:4e:43:f8:8e:f7:4a:cf:3a:33:
2b:cf:ba:3b:ab:fc:3a:20:4a:c1:e7:2f:e0:46:7d:
e8:60:b8:73:b1:51:62:3a:9e:2e:5d:ad:2e:e8:af:
39:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:75:16:BC:48:80:B7:97:4E:99:F7:F8:C2:69:07:CF:F3:E2:8E:EA
X509v3 Authority Key Identifier:
keyid:C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:37:89:03:86:a6:48:43:11:bd:6d:c5:2c:6e:05:13:65:1d:
77:22:a2:e0:85:bf:2c:0b:68:cc:47:14:83:35:eb:ff:a0:22:
96:c9:e1:65:9c:fd:9f:ec:27:d6:5b:b9:8f:f6:3f:91:fd:68:
bd:9f:bc:58:ec:e5:72:27:a6:8e:6b:df:86:b0:18:87:e7:9a:
20:3c:72:ff:f7:17:5f:18:27:bf:9d:2e:1f:ba:f8:4a:ee:3c:
e3:c4:15:7c:ac:61:7d:f7:ed:99:4e:21:e7:b4:37:3f:f7:95:
ac:16:b8:8c:74:03:3f:fe:45:d9:c5:8c:69:b0:d9:ea:55:92:
8a:6b:87:2a:4a:19:c0:72:e6:f4:86:06:cf:52:e4:57:62:55:
77:31:ed:5c:f6:8f:b0:bf:cf:3d:10:0e:07:2a:69:bb:f1:d9:
a7:d1:6e:90:d1:43:d7:a4:57:c0:0a:ab:05:33:bc:a3:b8:dd:
28:e2:10:fe:ad:94:aa:71:57:aa:a8:6b:04:3b:19:30:27:93:
cd:71:89:c1:60:c8:d9:2f:f6:f0:6f:3e:6b:35:fc:36:e8:e1:
aa:5c:8c:b5:8a:f0:52:c7:c2:7f:7d:57:c2:a0:bc:8f:29:4e:
5c:e0:b3:55:79:71:50:9d:4c:92:c5:45:fc:c4:36:fb:fe:0d:
04:04:e3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:37:13 2026 by rpki-client