
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: g11q/fn5XDMuQvOtp9OQKydU1aq3KLESoxVGjIDEQUE=
Subject key identifier: A6:0A:D6:65:21:9D:E6:C4:91:EA:E0:C9:3B:EE:1A:E2:1F:6A:BA:6F
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 01A1002398E6FBA496D17FE3980B09644A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 0C31
Signing time: Sat 03 Oct 2026 05:01:35 +0000
Manifest this update: Sat 03 Oct 2026 05:01:35 +0000
Manifest next update: Sun 04 Oct 2026 05:01:35 +0000
Files and hashes: 1: OBJUqWKdq6kiQbp0gg2le_lxwc8.roa (hash: Q6TNVRFJT35RFtqmG8IVN0WlQLvaNhPi6XH41fNOOas=)
2: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: 8DbFmbNG18gKIVr5uvrcCD08knWZIGPnWpv8GIaJzTU=)
3: pDXgmFSEjeXu5kTO9JnxKOTny04.roa (hash: zBFnWy98uBKGBRB8AClKYux+jyTzJfSF7W9SKPlT+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:23:98:e6:fb:a4:96:d1:7f:e3:98:0b:09:64:4a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Oct 3 05:01:35 2026 GMT
Not After : Oct 4 05:01:35 2026 GMT
Subject: CN=a60ad665219de6c491eae0c93bee1ae21f6aba6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:68:1f:d1:1c:1b:f6:c7:26:38:03:2a:c4:
6d:84:5d:6e:a8:5e:8e:ea:56:aa:61:bc:d9:d8:99:
e5:2a:c2:95:7e:36:5e:fe:4e:54:7f:0a:c1:fd:f2:
01:72:c5:1c:07:30:47:b6:fc:44:9d:b5:c8:0c:bd:
93:eb:61:2d:51:76:c4:ce:8a:1a:c6:c0:fd:b8:95:
f3:74:61:51:ae:57:d2:86:da:eb:3b:94:aa:7b:45:
5d:e8:92:a8:d1:34:96:1b:0c:74:1d:ad:8a:2c:5f:
cb:49:60:33:bb:41:2d:79:86:02:66:62:4c:1c:2b:
b4:f5:a5:79:df:95:9b:4b:a2:53:95:86:c4:52:09:
e9:69:eb:30:24:cd:79:d1:c2:92:93:c2:81:36:2d:
98:70:3c:37:d7:af:44:95:d9:55:dc:44:cf:85:f0:
52:fe:73:bf:a2:bd:58:e0:1c:0f:19:ba:13:90:61:
50:59:8c:cc:66:89:d9:79:58:d3:27:94:2e:76:c2:
e8:2c:a1:6c:5a:d4:64:08:03:4e:97:c7:e6:7b:21:
38:dd:09:8c:b5:11:2f:8d:e1:11:8a:5e:ca:a7:12:
be:12:cd:a0:78:5e:8d:11:b1:57:c7:27:df:5f:01:
a3:be:88:f6:2b:3f:f8:22:50:92:a5:c4:b9:14:0f:
0f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0A:D6:65:21:9D:E6:C4:91:EA:E0:C9:3B:EE:1A:E2:1F:6A:BA:6F
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:e6:94:0e:b6:63:a7:93:70:e2:0f:48:1a:5b:c0:a6:9b:29:
ad:4c:5f:cc:43:7e:92:96:63:ff:1f:5f:0b:e2:0f:84:b7:59:
42:2a:c8:de:2e:38:19:eb:33:0a:59:63:55:96:5f:7d:81:0c:
6d:0d:d0:ed:59:f3:09:c2:4d:11:ba:eb:70:b1:c1:27:85:c8:
c0:cc:58:eb:91:39:f7:32:89:ed:fb:e0:ad:2a:50:3c:55:56:
fb:dd:c2:c0:45:07:8e:37:0e:04:e0:cf:26:66:e8:4d:94:5a:
98:29:ee:8d:8e:58:e4:e7:32:a2:0c:2f:b0:4f:52:77:f2:09:
ae:70:dd:fc:74:0b:3f:33:89:51:fa:a1:be:39:14:93:e1:ab:
c9:93:65:a9:19:be:27:08:97:9c:8b:01:6c:6a:66:2b:7b:47:
ec:92:6c:53:e7:7a:19:90:2d:fa:1c:19:0c:7d:d6:9b:21:d1:
bb:d2:54:d4:91:c2:1c:53:3c:40:1b:5b:09:53:1b:e1:db:ca:
8f:4b:25:62:18:78:ce:12:29:5e:41:8c:bc:ef:f6:1b:eb:78:
76:a9:88:1a:e3:a9:19:d6:8f:db:67:03:23:2b:19:14:dc:f9:
49:ac:8f:62:d7:05:8f:4a:96:b3:ad:dd:42:d0:81:72:9c:0b:
32:27:75:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:48:20 2026 by rpki-client