Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier: HCu5GWPtzb+tGaUzQW806c8Bozq1tamr4/A1RC8VCvs=
Subject key identifier: 0A:C5:DE:6E:8E:11:65:8C:6A:11:22:C1:57:6C:79:3B:6A:35:15:0F
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 01A18CAFA0AFD6B7FB0092AFA4465635E008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number: 1AD4
Signing time: Fri 30 Oct 2026 12:01:22 +0000
Manifest this update: Fri 30 Oct 2026 12:01:22 +0000
Manifest next update: Sat 31 Oct 2026 12:01:22 +0000
Files and hashes: 1: YYRSpcNyohXAVMmCQRhhQXcor54.roa (hash: fuXM313ONuqmW2wV79N+ZCUER2LAZ4hkP7+nINYw4hI=)
2: iKpp3qI47nAdkGSzRA3WViJJwfU.roa (hash: cua53JtZVRFiG1D02IQc2WZ6uSxKMIhsPK5IrnlN2iI=)
3: vkpwNDj7xXwx6pMj2XVWZxBCxc4.roa (hash: YGEdE5O7bWJqyVhJI5l0CUgDvZQQki89nPNnaYxZHCc=)
4: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: 8hEupZ3g1yRPa8oyIZmu3xK9E0B0ZjsQO14N/sgZBKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:af:a0:af:d6:b7:fb:00:92:af:a4:46:56:35:e0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Oct 30 12:01:22 2026 GMT
Not After : Oct 31 12:01:22 2026 GMT
Subject: CN=0ac5de6e8e11658c6a1122c1576c793b6a35150f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:e5:c9:c8:ef:38:ac:a6:ab:30:b3:9b:b6:
10:ee:e3:7d:e2:7f:22:da:eb:a4:fb:ee:ca:7e:3e:
a3:70:76:b6:6d:48:c3:c2:69:84:db:78:48:43:dd:
5a:8f:3a:fe:a1:e2:57:af:ce:3d:55:7e:0d:f0:8a:
be:b1:18:32:0e:a9:08:d4:51:5c:f8:64:03:75:0d:
1e:f7:5b:6a:b9:01:90:dd:7a:d6:7c:8e:82:3e:d7:
72:aa:ab:37:65:a8:a2:6a:70:7d:99:94:84:3c:5b:
17:d6:bd:bc:e8:8f:0f:b3:50:6d:41:0c:f9:4a:35:
41:be:f4:48:ae:f2:5d:d4:b4:b9:a8:f4:94:3a:c3:
80:c8:48:3b:30:b7:49:2e:22:1e:36:8b:1e:ef:80:
ba:e8:67:73:4f:06:6d:49:b4:61:fa:87:57:47:18:
32:ac:cf:ba:0c:fe:d6:39:19:1f:dc:cd:be:aa:b7:
a5:c3:b9:39:9c:d1:bb:97:f1:42:71:15:47:ff:3e:
a0:b0:6b:49:e9:45:c2:12:c7:22:d7:1f:16:81:29:
b4:ca:6a:07:f0:18:d7:d8:70:1d:08:c3:44:22:74:
f6:85:1c:25:4b:da:1f:25:f9:f3:8b:b4:1a:b0:73:
4a:98:83:4d:9e:f6:96:3b:37:11:55:bb:73:6b:ca:
60:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C5:DE:6E:8E:11:65:8C:6A:11:22:C1:57:6C:79:3B:6A:35:15:0F
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5e:79:5a:00:12:48:7b:b3:14:be:6f:14:d2:a6:35:31:25:
bc:8f:99:08:4a:4d:3a:88:1d:40:ae:b9:13:ac:df:29:27:dc:
f5:dd:64:b2:df:a2:41:d0:e9:e8:e4:a3:61:ea:c2:43:26:99:
a3:52:72:44:7a:aa:de:b8:cf:00:b5:81:f3:d8:24:f0:2e:53:
6f:c3:d3:2e:a9:f4:74:33:37:20:bf:5f:3d:1c:53:09:43:79:
7e:94:4d:4a:01:ff:52:5a:40:bc:e7:a3:99:b9:55:d8:15:be:
9f:2a:60:a2:dd:a0:29:f5:7c:02:96:3f:24:d6:2e:bd:b3:9b:
fa:d3:19:79:f3:2f:5e:7e:a4:dc:33:53:00:7c:ea:35:ec:b3:
45:ea:b2:28:2e:02:0d:a8:c6:e7:4f:a4:4b:94:82:71:87:74:
c0:b9:59:60:e3:66:71:17:be:96:f1:e4:87:47:91:5b:65:26:
8c:15:0f:b7:85:34:23:68:e9:3b:32:2d:eb:1c:0f:b8:3c:24:
93:91:3b:a0:81:31:48:da:a7:52:e5:ea:19:af:32:4f:eb:df:
a5:1b:fd:98:a6:fb:63:09:4e:e2:71:98:c7:61:54:ed:bc:d7:
c4:57:58:af:6e:25:c2:c3:dd:a0:80:8f:0a:30:7f:d2:33:56:
f9:68:fc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:57:01 2026 by rpki-client