
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft
File: xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft (raw, json)
Hash identifier: 9cw0b+rtUDw9ioMgpcvgUlbC7AA5HrQEDSJ/Y/fV78M=
Subject key identifier: 3D:90:57:63:4C:0D:0C:B4:3E:00:CB:B9:ED:2B:D0:64:40:3A:77:E9
Authority key identifier: C6:B6:19:D4:D1:83:57:45:B0:4B:E9:E4:4D:AB:10:2D:06:14:62:2F
Certificate issuer: /CN=c6b619d4d1835745b04be9e44dab102d0614622f
Certificate serial: 01A17FCF9127D8F497098E6E648D394B6940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft
Manifest number: 0140
Signing time: Wed 28 Oct 2026 00:01:11 +0000
Manifest this update: Wed 28 Oct 2026 00:01:11 +0000
Manifest next update: Thu 29 Oct 2026 00:01:11 +0000
Files and hashes: 1: 5ToKLF8AZKviRK8eveHz3y2eCJg.roa (hash: 7dZ4D04yJMNxgBoOD4N7srtpsPwEeXW0J8iTVYWeQ8s=)
2: O3Vhd8Uq2eyOQ_jBHy0CJlVwNZ8.roa (hash: TnvhV7uWoy8gIV9VJvw9Ua1JaBEXv8Nh3q4HaNov/Pk=)
3: YGhXb0KBwMPD0eKyFjo-wPSvg7A.roa (hash: QIjaZBuvHBXuD+BQAt0PNBm4499hR/AfSSSNvFa+qG0=)
4: nN73NbUGqukOpA94Jjdh8i2ig_E.roa (hash: v+MEZ6gE/2SzkGEIJerhbHxOQ1qEZGl9aNZd7P5DCZ8=)
5: q4wW-YXv4K_Q2__Fto1OvGJawss.roa (hash: jnTnq/LFPODqTvtlZrmgjvpj+t1fUdEjh4tvKg0JZjc=)
6: wqiyCuPlBwl0V2dv27OCD_ym6j8.roa (hash: cfx0UFR+LbEyoqcHZVCvxbww/uNktl+L5oOZlTwnYPo=)
7: xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl (hash: ynHuKIqtp6U098CPtxlm+KZEZn5TJB4tL22YllFLfuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:91:27:d8:f4:97:09:8e:6e:64:8d:39:4b:69:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b619d4d1835745b04be9e44dab102d0614622f
Validity
Not Before: Oct 28 00:01:11 2026 GMT
Not After : Oct 29 00:01:11 2026 GMT
Subject: CN=3d9057634c0d0cb43e00cbb9ed2bd064403a77e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:70:87:a7:65:0c:a8:64:3b:1c:7d:26:aa:
bd:c2:68:b4:dd:93:86:81:50:9d:6d:20:f2:17:50:
1c:78:fe:8c:22:f4:00:75:5a:7f:4a:fd:bc:97:92:
89:a7:92:ce:5e:d1:82:63:6c:c8:11:45:05:35:7a:
8a:43:37:14:ac:2a:ca:30:ae:4d:79:18:97:8e:dc:
c5:fb:ec:06:35:4a:e8:2c:4d:99:8c:7b:58:55:a0:
b1:6a:1c:b8:d0:e5:2e:8f:07:ec:f3:ab:05:8b:60:
59:ce:70:0a:dc:b0:85:dd:ba:c0:c4:16:bf:dc:f7:
13:d5:6a:8a:9e:81:80:a8:0f:08:d2:96:6e:30:b2:
75:51:67:87:49:9c:74:ea:e1:b9:6b:16:eb:74:d2:
19:cd:0f:9d:4b:72:1e:2f:98:88:a7:71:e3:32:44:
2d:f1:0d:75:b4:7f:b0:a7:95:2d:b9:82:5e:47:a8:
6e:08:53:0c:34:99:5d:11:4d:31:a1:bb:86:24:ea:
1a:bb:c0:e5:ff:bd:bc:ef:34:4c:e3:ca:ad:90:44:
52:bd:7b:ff:09:e8:a4:e7:34:27:ab:1d:0b:b0:2c:
13:18:16:3f:35:53:d9:f3:0d:de:f3:6c:1a:c1:01:
2a:f7:93:0f:0c:0b:14:e6:a4:78:c6:3f:e5:bc:14:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:90:57:63:4C:0D:0C:B4:3E:00:CB:B9:ED:2B:D0:64:40:3A:77:E9
X509v3 Authority Key Identifier:
keyid:C6:B6:19:D4:D1:83:57:45:B0:4B:E9:E4:4D:AB:10:2D:06:14:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d0:09:a1:5a:51:79:64:09:94:7f:d0:e6:5b:92:54:85:19:
18:14:1f:bf:ec:b9:32:fd:38:c5:22:f5:95:d5:9b:19:fe:48:
23:86:2c:ae:81:2f:9e:9b:c2:68:00:97:ca:82:28:02:f3:f7:
56:f3:c6:8f:3b:80:38:63:46:c9:e5:d4:b6:0d:cd:55:f1:18:
4a:ce:da:51:75:d6:75:48:07:3d:5f:21:cb:79:f2:fc:de:0f:
d9:60:6f:97:fc:b2:33:f6:0b:4e:3f:54:4e:c7:f9:66:a8:28:
50:45:85:ad:aa:9b:c6:78:19:b0:f3:04:44:ca:fb:43:ab:d3:
15:b4:64:50:14:88:1f:7a:c2:87:5e:b0:32:f8:b7:db:df:c6:
86:4e:0f:71:86:1f:be:19:46:ac:72:6c:2e:2e:f7:b6:73:c3:
74:1a:db:cb:70:c8:fd:e2:b0:83:81:79:22:93:c3:31:c0:b2:
cc:96:51:55:46:5a:a3:89:94:94:f8:f5:b4:1b:0b:57:d0:44:
54:11:06:42:c0:41:35:97:d0:ab:39:db:7f:ab:13:8b:55:20:
be:50:2b:e6:a8:8c:62:e5:c8:c0:4b:a7:47:ca:92:e1:ef:6f:
23:fa:c1:0d:6e:39:6b:97:60:26:fb:6c:ab:73:cd:bf:40:c7:
5b:38:15:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:42:51 2026 by rpki-client