Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: RVumb1dL2tw9KY5d0dq/N59TMvTGb4pHC1DQy+z0KL8=
Subject key identifier: 47:C8:81:69:57:C5:4B:5D:CD:2B:B3:E2:73:87:98:8A:1F:4D:2A:34
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 01A11CE39ED9D640F935CF0DC79ABF6D1E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 1A95
Signing time: Thu 08 Oct 2026 19:00:41 +0000
Manifest this update: Thu 08 Oct 2026 19:00:41 +0000
Manifest next update: Fri 09 Oct 2026 19:00:41 +0000
Files and hashes: 1: Z4BDlr57O_FweazPHma0rDQN-Eg.roa (hash: RRUvm/U5FkAyaYrRTEjgZo8457PWupRX0eiUbSuUq0U=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: Z7K+pXiqhAMaxnhjInqEAYEhSjvOz0nGQQlrgKzBYiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:e3:9e:d9:d6:40:f9:35:cf:0d:c7:9a:bf:6d:1e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Oct 8 19:00:41 2026 GMT
Not After : Oct 9 19:00:41 2026 GMT
Subject: CN=47c8816957c54b5dcd2bb3e27387988a1f4d2a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:85:9c:be:82:64:5a:6d:22:79:b9:1a:41:
6a:d3:fc:a2:79:3e:f7:c3:7c:78:67:3f:f9:7d:53:
ed:e7:ac:e9:16:1f:5f:46:9e:f9:65:01:9c:78:af:
68:97:d6:d9:a6:7d:14:77:a2:af:ed:b7:66:ff:79:
c9:83:85:9c:42:30:2c:31:b9:64:2b:0a:2d:08:cc:
37:10:49:0c:ad:63:53:93:df:07:47:86:68:1e:97:
ef:49:d0:fe:9b:72:00:b6:22:bf:a9:ef:8f:d9:f7:
ae:20:0f:c3:4e:50:cb:47:d2:24:6a:57:8d:e2:7f:
4f:7c:07:61:00:09:d0:8f:e8:9a:2f:9f:9f:46:e1:
d0:7f:70:2b:c0:b3:13:a0:8b:6a:39:e4:64:98:a7:
05:f3:f7:cd:cb:6e:70:db:13:77:fe:80:15:ad:82:
2a:8a:64:0e:8b:03:5e:1b:23:18:4e:e0:2e:6c:f9:
f0:e1:c8:38:7f:f6:63:ed:5e:93:ec:43:6a:56:df:
9d:00:d6:eb:76:7f:95:17:7d:f6:61:cc:b9:f1:ba:
19:86:9b:cc:90:42:41:0d:b0:60:39:26:4c:ff:d6:
92:29:a4:66:57:b5:47:ad:05:c0:f4:64:4f:b2:ff:
d5:77:02:30:3d:2e:e1:d8:32:2e:c6:10:64:aa:6b:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C8:81:69:57:C5:4B:5D:CD:2B:B3:E2:73:87:98:8A:1F:4D:2A:34
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:45:1d:d3:2a:cd:0a:37:72:f1:06:6f:92:b3:2f:8b:17:e0:
32:92:d8:65:80:bd:81:76:cd:1f:79:45:6f:bf:21:b1:d5:70:
30:9e:65:1f:d9:66:9d:a4:aa:13:82:1a:59:f4:c6:b3:8a:67:
4d:7f:12:45:8d:24:96:a0:6a:75:35:8c:72:fd:71:53:54:1d:
25:e1:cb:78:27:d1:2f:b3:33:18:d5:ca:5d:8b:9e:18:27:5c:
18:a7:a2:0b:44:f2:27:31:c9:25:97:0f:da:5d:04:d7:4d:06:
67:f2:8f:29:53:eb:d9:7d:7f:20:a8:b3:3b:2f:54:de:20:23:
5f:28:b5:f8:b7:94:fc:71:2f:4a:c4:4d:02:79:0b:ac:c1:6e:
da:29:03:06:93:6b:60:4a:ad:11:ce:06:e3:7b:56:0a:83:29:
98:4c:01:04:97:21:ba:0e:1a:eb:a8:48:3b:25:20:48:cb:46:
95:dc:a7:07:b5:ad:7d:f1:f1:13:dc:ec:2c:af:be:f9:29:30:
a3:93:04:ab:77:98:ea:87:d4:41:d6:39:6b:be:d3:11:20:bf:
ad:65:98:68:c7:e9:a0:98:be:59:bc:e9:7c:89:f7:45:7d:39:
78:79:6b:ad:47:1e:91:a3:ef:54:29:71:4e:ca:42:07:d6:24:
49:c4:10:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 03:24:16 2026 by rpki-client