
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
File: xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json)
Hash identifier: gCjxb0a5imaABoP7a54XlUf7H+FeOADNLJz7TTNxcqg=
Subject key identifier: 46:D5:89:B4:E9:0C:56:5C:1B:B3:09:B8:A4:ED:E6:08:DC:E2:91:DA
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Certificate issuer: /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial: 01A13DEEC0C326DCDE95BB48DF184147A989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
Manifest number: 18A7
Signing time: Thu 15 Oct 2026 05:00:19 +0000
Manifest this update: Thu 15 Oct 2026 05:00:19 +0000
Manifest next update: Fri 16 Oct 2026 05:00:19 +0000
Files and hashes: 1: 5VgBPMnvg-Y4r70mw9zcqUHf-ms.roa (hash: P3U3l0akrscgsoVcKLjR90FDWEx4VR/+ukAn/96yuzo=)
2: HJwZlYqEjcC0kZy6mydcGkGnl2Y.roa (hash: UPYyl+3V1/TwBPn6nhuPF5CRvh3gv8SQW9YgSKrnSbs=)
3: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: vn+GlapXtOvtZrO855lViGs/ANIEtXqXadZZBWWbCf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:c0:c3:26:dc:de:95:bb:48:df:18:41:47:a9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
Validity
Not Before: Oct 15 05:00:19 2026 GMT
Not After : Oct 16 05:00:19 2026 GMT
Subject: CN=46d589b4e90c565c1bb309b8a4ede608dce291da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b5:35:9d:72:e0:a0:63:2a:6f:eb:4b:39:bd:
e2:bb:1e:3f:95:21:fd:0c:47:d8:45:43:6a:b1:3a:
79:b5:97:ce:76:b3:bf:a1:52:26:df:59:33:0b:76:
49:6e:86:e0:97:cc:11:a9:5a:8f:06:b6:cb:f2:9e:
25:97:32:a3:30:28:0a:68:44:bc:80:8c:d9:14:f8:
cc:c4:bf:48:bd:e5:b9:41:57:0f:d4:4b:58:9e:f4:
4c:05:39:78:17:94:47:30:8c:a0:bb:73:ee:29:af:
b0:fe:4c:bc:45:1a:aa:3a:5a:18:10:a1:f3:27:0f:
de:6b:76:0c:4f:f9:ec:00:ab:9e:0e:34:ac:37:60:
30:db:e4:97:68:da:0f:5a:49:55:cb:b3:78:b0:b3:
9d:5c:aa:86:f1:b6:72:7e:af:68:93:8a:8d:8a:fa:
f1:3e:81:d4:1d:61:8f:91:06:bd:45:90:94:e7:44:
d1:4b:71:57:9c:96:96:ba:30:59:8b:1f:a4:f5:be:
d4:cf:94:74:6d:f0:97:db:7c:77:ba:2c:14:57:df:
83:80:b5:3d:c7:d7:4e:5d:2f:51:92:d8:2f:c6:b9:
09:b0:5c:c7:38:85:25:60:06:67:1b:e2:ba:65:46:
db:2c:b3:a1:74:f0:ef:96:8d:36:aa:25:f0:ed:da:
f1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D5:89:B4:E9:0C:56:5C:1B:B3:09:B8:A4:ED:E6:08:DC:E2:91:DA
X509v3 Authority Key Identifier:
keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7f:fe:83:9f:4f:b2:b9:02:47:4c:1a:71:f9:fe:94:dd:17:
50:67:2e:6b:cd:de:bb:63:82:d2:30:a0:16:05:20:6f:9e:73:
f9:23:87:0c:07:02:c9:df:71:66:3e:4f:91:15:20:3b:1b:be:
38:4f:2a:ca:24:dd:f5:c9:ae:a1:ba:9c:3d:d9:a5:ae:04:42:
4c:44:15:96:8e:ea:94:2e:cb:7e:90:19:82:0f:07:e6:05:bf:
1d:fe:7e:c9:64:6f:64:b9:12:d6:35:65:a9:09:3a:95:54:ce:
53:fe:30:68:54:36:4d:84:7b:f0:4b:06:03:13:5d:db:68:9d:
39:dc:38:75:1a:5a:37:c5:c8:c2:4c:c8:f2:85:7f:62:20:a7:
e2:68:25:e0:6f:c4:65:65:c8:a8:bf:9c:e9:55:12:ae:aa:77:
d3:cf:54:52:a3:29:43:dd:3a:f8:7c:5e:a5:9e:00:bf:e5:78:
1d:c5:84:07:b5:c9:8e:dd:0d:06:dc:8e:e7:97:48:e8:3c:0d:
32:3b:08:e3:30:88:09:ec:69:60:36:fc:61:28:d7:96:c4:50:
b8:89:14:d3:32:66:6e:66:7e:80:ad:f7:0b:d2:d9:77:7a:ea:
d7:24:f6:40:8d:99:36:6b:63:a6:c4:fb:e5:f6:4d:76:05:34:
5d:38:37:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:11:49 2026 by rpki-client