Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json)
Hash identifier: SRFoa9k94EDLs/089PfoYdnp4qGB6liX2KVAqr78qOI=
Subject key identifier: B1:A8:88:44:B1:E3:A3:35:57:9D:86:D8:DF:01:73:3E:DC:C7:04:DB
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial: 01A0C85881859C2526BDBF729DF8852E89CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
Manifest number: 1080
Signing time: Tue 22 Sep 2026 09:00:38 +0000
Manifest this update: Tue 22 Sep 2026 09:00:38 +0000
Manifest next update: Wed 23 Sep 2026 09:00:38 +0000
Files and hashes: 1: 4Kxd8dm-CWu1jCIsUqmZWt5sIc4.roa (hash: RVAhzYMBRgQ2W1wIbtL6Kztr89B+xTCwvr6xBM79OwQ=)
2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: HHUnz8gSbBCahBoyXXBuKp7wVegq0kB7ppL+wlOQbJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:81:85:9c:25:26:bd:bf:72:9d:f8:85:2e:89:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Validity
Not Before: Sep 22 09:00:38 2026 GMT
Not After : Sep 23 09:00:38 2026 GMT
Subject: CN=b1a88844b1e3a335579d86d8df01733edcc704db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:fc:f4:1a:c5:07:21:5d:d4:88:be:90:67:
52:d4:16:33:8a:9e:5f:e5:43:f4:de:30:69:da:7d:
1d:f3:2a:c9:57:42:3d:b8:30:8d:9b:bb:54:2b:36:
29:98:c8:31:d6:2b:1c:0e:82:30:82:41:5b:c3:60:
e6:81:17:ac:a8:d9:61:3f:91:f4:53:14:e7:4f:91:
11:d5:46:5f:7f:be:b0:72:75:33:12:c9:af:55:67:
f0:2a:da:77:b6:88:14:0b:01:d6:69:74:0c:27:cb:
ef:3d:f9:96:ba:aa:9d:dd:86:a2:ad:46:5a:a6:83:
5e:ea:18:ea:97:f8:8d:c9:9e:05:2a:3a:a9:9f:eb:
8a:29:9f:11:63:bd:73:f7:24:d1:c3:6f:af:9d:6e:
a5:91:ce:f8:cd:84:6b:4f:1b:78:c6:02:79:86:b1:
d0:6e:4f:33:73:e1:14:e5:04:af:14:e9:8c:e8:d5:
14:87:1f:57:4c:ea:58:e1:df:dc:73:76:9c:97:9d:
18:f9:f7:3b:39:f7:d2:7b:d7:84:d8:5e:d6:29:11:
71:2f:25:ec:2b:b3:27:3d:28:7c:d4:f7:40:16:95:
0f:6c:fe:f2:f4:7a:16:69:74:9a:3c:b8:75:b4:c1:
c6:ee:c4:29:bf:d0:e9:b5:41:40:8d:15:35:17:9b:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A8:88:44:B1:E3:A3:35:57:9D:86:D8:DF:01:73:3E:DC:C7:04:DB
X509v3 Authority Key Identifier:
keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:86:30:c3:44:46:fa:f6:55:2f:28:08:a9:9d:b7:e0:c5:72:
6c:e3:43:23:6b:6d:5f:83:df:6b:23:13:a7:fb:75:75:35:4c:
74:b3:86:37:dd:1b:3a:c3:a9:37:37:20:06:d6:d8:7a:f9:d0:
e1:c0:10:ea:f1:a6:7d:a3:04:81:f3:b5:1e:f3:2c:c7:a3:84:
2d:d3:b2:06:92:0c:c1:af:95:a3:63:af:1b:52:6f:b8:aa:6d:
50:64:f3:80:a5:ed:54:37:f1:1a:67:00:c7:d0:d8:00:7a:73:
50:55:d8:7b:d2:27:f1:04:58:00:51:f8:45:28:9c:57:1e:3c:
48:a7:e4:8c:56:4c:81:7a:fa:3a:e3:28:24:17:2b:bf:8c:a4:
8e:04:b2:cc:3a:27:63:68:3d:0d:62:5c:1a:93:88:0b:7a:aa:
62:b9:34:58:3b:7e:c4:b0:9b:4d:e1:cf:22:c7:02:b7:09:91:
11:2f:34:28:4e:ab:d2:fa:36:f6:1d:39:d7:80:bb:b9:c8:3d:
6c:98:03:80:56:b1:00:47:89:57:3e:1a:86:d8:c1:b3:1c:fb:
de:2c:31:87:15:17:e6:31:2f:3b:e5:39:32:cd:ec:1b:0c:b9:
e1:04:3d:a3:01:4e:57:96:30:e5:2b:d9:83:99:6f:2b:4c:3b:
c1:3e:d8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:17:46 2026 by rpki-client