Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
File: xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft (raw, json)
Hash identifier: bsHDL6exH4dfMGDNnGpeOysSQ12xsqyv92TV8QKvjTw=
Subject key identifier: 5C:72:C8:F5:9D:42:10:F7:8A:8B:5B:43:9D:F2:17:33:2D:34:12:2B
Authority key identifier: C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
Certificate issuer: /CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Certificate serial: 01A0C746B6F1771C2ABEADDDB3EB50FD386F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
Manifest number: 0C05
Signing time: Tue 22 Sep 2026 04:01:35 +0000
Manifest this update: Tue 22 Sep 2026 04:01:35 +0000
Manifest next update: Wed 23 Sep 2026 04:01:35 +0000
Files and hashes: 1: bkpFrc_6laoYbGdkqTlHlW-Qe80.roa (hash: p/3gwRkkBDXycKoUYkEzWpJbWT3T+RMybdZ5AMyzIgo=)
2: xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl (hash: k6CHyoD4Nud0KYt8PVltQMI1JcPA+zbFH/uaAQO80AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:b6:f1:77:1c:2a:be:ad:dd:b3:eb:50:fd:38:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Validity
Not Before: Sep 22 04:01:35 2026 GMT
Not After : Sep 23 04:01:35 2026 GMT
Subject: CN=5c72c8f59d4210f78a8b5b439df217332d34122b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cc:75:7d:70:0b:ff:87:31:e3:bf:fa:3d:f4:
82:4d:54:ba:cc:58:e2:5a:39:80:2d:43:49:ff:97:
9e:18:81:e5:ae:24:d3:76:18:d4:f3:60:3f:68:70:
fd:c5:89:56:10:c9:89:bc:b7:24:6e:19:76:82:e3:
f9:dd:6a:44:b2:b8:6a:6c:79:1c:b5:71:c1:00:27:
68:99:92:ec:55:14:0c:11:62:38:c6:13:70:f7:c0:
5b:41:24:40:4d:23:2f:ac:6e:b4:ef:53:b0:76:73:
a0:6a:80:80:64:2e:a3:3d:f1:89:2e:4a:ac:95:35:
7e:c2:98:da:08:13:f2:2e:f8:32:6f:27:fe:4a:60:
21:6e:5c:f3:e4:e3:cf:60:56:e7:64:d2:75:50:f6:
ca:63:6d:8e:c7:ab:c9:73:07:0a:0b:83:0b:a2:23:
0d:f2:e9:1c:7f:0c:47:61:40:c0:18:c6:15:63:d8:
ae:98:df:3e:f7:88:7a:56:86:0e:7f:00:b8:f9:3e:
1c:20:9f:c7:96:1e:d7:44:54:f6:d8:fd:4e:01:3e:
4f:2a:51:32:94:0c:bf:4c:be:ed:0e:bd:1e:a1:18:
9c:eb:58:66:37:2d:bd:91:9f:9e:e8:79:bd:e0:62:
da:d2:a0:aa:99:d9:db:d4:46:0b:27:83:de:a4:36:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:72:C8:F5:9D:42:10:F7:8A:8B:5B:43:9D:F2:17:33:2D:34:12:2B
X509v3 Authority Key Identifier:
keyid:C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4b:0a:8f:08:44:99:a4:5a:41:ce:3b:4f:73:48:7d:8f:35:
41:d2:b2:57:e7:b9:3a:b2:84:fc:ed:19:e5:47:e8:98:f2:90:
63:04:9a:06:a5:3c:eb:7d:15:37:2c:c4:b8:6b:b8:68:65:63:
70:5c:93:e5:61:7a:34:62:1a:d6:4e:ea:50:24:33:7c:7b:fa:
2b:74:0c:b8:3f:86:dd:f7:96:f5:cf:77:28:88:a0:07:78:e4:
c8:53:6c:cc:a9:23:7d:06:25:a3:a5:68:21:ea:b7:a5:50:95:
c0:6f:9b:9b:61:5f:7e:70:d3:5b:0e:b9:1a:0b:e1:d4:3f:5f:
5e:71:0f:e7:a0:66:e3:65:11:c9:d1:52:f1:12:e4:e1:45:d1:
e7:d7:8f:55:dc:3c:e5:b7:f8:70:5c:78:80:19:8c:0a:5d:30:
cd:d7:a3:07:61:56:12:66:e6:6a:1c:68:11:2d:a6:62:6e:55:
68:29:e9:89:ab:dc:b7:8d:3f:56:5c:a4:89:15:c1:3c:16:f9:
45:6e:c3:17:21:5a:ee:93:ea:8e:f4:a0:d4:f5:bb:b2:22:5c:
08:64:74:9e:38:40:84:2c:c4:1e:9c:2f:c3:da:ad:99:06:15:
45:cc:a5:3d:b8:7b:5b:48:55:7d:17:f0:cb:67:06:de:11:73:
a3:23:12:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:34:25 2026 by rpki-client