Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier: YW2rlC+Ti9EbCeWD2T3FF3+hT/OBDfQ8ViUGDIyM4Uk=
Subject key identifier: 8B:6C:30:D3:C6:C9:3E:22:23:0D:4E:83:1E:85:79:FD:DF:6A:12:96
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 01A1C44217038C50335C11CC6777B4DBA358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number: 1AED
Signing time: Tue 10 Nov 2026 07:00:27 +0000
Manifest this update: Tue 10 Nov 2026 07:00:27 +0000
Manifest next update: Wed 11 Nov 2026 07:00:27 +0000
Files and hashes: 1: de466HJKUUh9qzSm7vPuIvQK2K4.roa (hash: bLKcdLjOZO35Svt8ZkDvizAh+B8p1vB+kGhar/4ahFk=)
2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: AXBezr3CuZMt1t3TRz3Zv2tAyaYRl6lRjjHKrbTtP+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:42:17:03:8c:50:33:5c:11:cc:67:77:b4:db:a3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: Nov 10 07:00:27 2026 GMT
Not After : Nov 11 07:00:27 2026 GMT
Subject: CN=8b6c30d3c6c93e22230d4e831e8579fddf6a1296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8d:32:cb:80:96:0a:cc:24:b3:3f:f7:ca:d7:
e2:6e:1c:92:57:ab:94:4a:23:40:b3:f2:6f:30:4b:
22:bc:89:ca:91:91:69:7d:03:64:e8:7e:7d:76:7a:
47:b4:5f:ac:c1:02:bc:bd:1b:3a:0b:dc:44:56:45:
70:9f:72:4a:ef:d7:e0:dc:4b:d0:f5:9f:24:c6:9d:
6c:db:75:a4:37:e1:50:75:c1:37:77:33:f9:2f:40:
fa:82:3b:44:21:62:30:0b:0b:aa:99:81:ad:89:97:
3a:f8:ba:6e:3c:5c:0a:4a:03:63:b7:1e:7b:8f:d8:
e3:0a:66:4a:b4:f5:9f:fc:a5:04:69:03:66:7f:e5:
f1:c8:8b:33:4c:d4:c4:c4:07:cb:a8:52:bd:e2:df:
32:f6:5d:e5:60:db:7d:aa:6d:b5:7b:e3:42:d1:fb:
c5:5a:12:ec:ba:d4:86:ea:f5:6e:ff:9d:eb:8c:a7:
a5:cc:06:af:f1:02:ea:81:da:89:fa:fe:eb:2e:fe:
ae:fc:7a:f9:ca:12:09:14:7a:0c:b2:a5:54:3c:11:
ad:75:68:6b:93:20:97:3c:c3:47:e4:2c:9b:2e:d0:
80:21:70:67:c3:8f:9e:ee:9d:55:d4:7a:2a:89:cf:
28:78:3e:bf:a5:10:9b:a6:55:a5:ea:41:df:60:6a:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6C:30:D3:C6:C9:3E:22:23:0D:4E:83:1E:85:79:FD:DF:6A:12:96
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6c:08:fd:a9:9d:8c:55:ed:d1:1a:23:14:95:07:f6:d8:b0:
3b:46:1f:32:6d:7d:e8:29:fa:be:e9:51:20:a3:03:c0:ce:e2:
25:c1:9d:a5:64:5e:83:1b:61:2f:d9:84:f2:c4:ec:85:0c:b5:
bd:6f:fd:5e:dc:91:0e:49:db:38:f9:0a:f9:aa:14:db:ae:77:
75:cc:70:45:e6:46:6d:62:1e:c9:fc:6a:32:67:ee:0d:c8:9c:
e1:7a:66:ec:fc:4c:c9:e7:07:08:c8:dc:6a:80:68:db:1b:29:
b0:63:f7:cf:3e:76:5a:b7:ba:3d:11:93:7d:13:8d:21:fa:f8:
81:d0:54:d0:b6:a1:95:1d:2a:38:74:2a:4c:fa:2a:66:8c:7d:
ff:f8:4c:75:d0:f5:6e:43:75:2b:75:b1:ff:14:19:52:dd:77:
20:60:93:bc:d9:4e:5b:5c:b7:ee:cf:56:f8:20:a6:5b:0c:dd:
8c:1e:2a:22:5e:f0:db:df:3a:c1:ac:3d:d1:b0:5d:46:c9:2b:
3a:05:86:bf:8c:f5:bd:49:37:e7:d4:51:b2:53:10:47:18:a5:
58:a5:c6:8a:ca:90:38:1f:04:5e:50:4e:11:58:b5:11:16:ee:
a1:0b:93:9a:ff:20:ca:c5:30:38:a5:90:3b:34:24:e4:00:90:
da:75:8c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 14:33:46 2026 by rpki-client