Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/b075d8-ea2c-4eed-aa32-c43e6463914b/1/xAtul79gE80uTaA_q_iOuM7SKTU.mft
File: xAtul79gE80uTaA_q_iOuM7SKTU.mft (raw, json)
Hash identifier: rlzhRgX7P82Vr695ipttl0JeT298PCSaEU2Nyc0MmEs=
Subject key identifier: 62:9C:5C:CA:23:75:A8:AC:6D:45:4E:F7:C9:B3:20:A9:FC:48:C4:E7
Authority key identifier: C4:0B:6E:97:BF:60:13:CD:2E:4D:A0:3F:AB:F8:8E:B8:CE:D2:29:35
Certificate issuer: /CN=c40b6e97bf6013cd2e4da03fabf88eb8ced22935
Certificate serial: 01A1893FF37B47A822C1CC3292DE1E0E2370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAtul79gE80uTaA_q_iOuM7SKTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/b075d8-ea2c-4eed-aa32-c43e6463914b/1/xAtul79gE80uTaA_q_iOuM7SKTU.mft
Manifest number: 2E
Signing time: Thu 29 Oct 2026 20:00:31 +0000
Manifest this update: Thu 29 Oct 2026 20:00:31 +0000
Manifest next update: Fri 30 Oct 2026 20:00:31 +0000
Files and hashes: 1: U14tkML2oHhyUZjw4xb5UX9PBkQ.roa (hash: 2HKtHvrDbBvJk+DbwpVGJ5/tJ++9TaxEcofrwn2XlsQ=)
2: xAtul79gE80uTaA_q_iOuM7SKTU.crl (hash: q6qXYAVzwmUk8o1Rewvo/nkK+Vi334IjXhMyiB8ewOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/b075d8-ea2c-4eed-aa32-c43e6463914b/1/xAtul79gE80uTaA_q_iOuM7SKTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/b075d8-ea2c-4eed-aa32-c43e6463914b/1/xAtul79gE80uTaA_q_iOuM7SKTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAtul79gE80uTaA_q_iOuM7SKTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:3f:f3:7b:47:a8:22:c1:cc:32:92:de:1e:0e:23:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40b6e97bf6013cd2e4da03fabf88eb8ced22935
Validity
Not Before: Oct 29 20:00:31 2026 GMT
Not After : Oct 30 20:00:31 2026 GMT
Subject: CN=629c5cca2375a8ac6d454ef7c9b320a9fc48c4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:78:4f:90:b5:07:4d:7e:1b:52:cc:93:36:
6c:23:ec:83:49:78:00:4b:14:59:df:9f:40:d2:e1:
0e:8a:8f:9e:8f:f7:78:87:eb:7d:77:4e:02:81:ac:
f8:58:4f:94:a6:ca:aa:5e:2e:c0:ae:07:75:39:c3:
6e:ea:78:a8:08:e8:0b:08:8f:38:d4:c2:04:39:ae:
18:ed:d4:4f:7e:3e:0c:b4:53:4a:e2:d5:8d:5a:7f:
fc:75:f0:d8:69:5c:3b:60:fa:ea:d6:f1:c4:6a:2b:
59:73:47:0a:1c:9d:61:35:7c:da:03:58:dc:4b:93:
44:79:40:65:b5:9e:86:ba:cc:dc:62:ed:66:ab:71:
12:30:24:0b:18:43:e9:86:df:61:24:67:4d:f7:34:
f4:c8:47:37:6c:9a:66:18:d8:90:66:58:f3:4f:9a:
90:4c:28:c1:31:ce:b6:38:83:63:77:93:57:71:c3:
93:3a:90:8d:64:c4:06:fe:09:e5:8a:2e:fc:8d:b7:
ad:40:b5:33:33:81:d2:f0:a2:fb:05:6d:f5:f9:12:
ef:25:de:26:bc:19:e3:cf:3d:70:28:21:87:98:1c:
a4:81:16:c5:a7:9a:0c:c9:b5:7a:84:3d:f0:c6:2e:
7b:25:96:70:e9:50:a6:47:4b:b2:d2:39:b6:04:ee:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9C:5C:CA:23:75:A8:AC:6D:45:4E:F7:C9:B3:20:A9:FC:48:C4:E7
X509v3 Authority Key Identifier:
keyid:C4:0B:6E:97:BF:60:13:CD:2E:4D:A0:3F:AB:F8:8E:B8:CE:D2:29:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAtul79gE80uTaA_q_iOuM7SKTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b075d8-ea2c-4eed-aa32-c43e6463914b/1/xAtul79gE80uTaA_q_iOuM7SKTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b075d8-ea2c-4eed-aa32-c43e6463914b/1/xAtul79gE80uTaA_q_iOuM7SKTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:48:ce:ab:1f:11:85:dd:94:f2:e9:81:21:fc:f3:36:33:d6:
3a:71:4f:29:6e:7d:5e:9f:e1:42:92:c0:9a:18:21:f8:55:a5:
bd:bb:f9:f3:17:43:bc:8f:29:29:99:f1:a4:4e:11:c9:b7:cd:
72:fb:1c:2c:16:2a:98:9c:2b:07:e3:c5:bd:79:36:e8:29:34:
d8:16:9d:91:82:5c:bb:ea:38:f7:62:5e:1b:c5:c3:33:2c:a2:
84:44:ad:2f:8b:e9:41:f2:11:a8:ee:2c:29:f3:b3:46:59:4e:
d7:90:ff:a6:a1:a4:32:7e:14:1c:93:02:0e:df:49:c3:4e:2d:
5f:0f:73:28:d0:90:27:b4:86:a3:72:a3:a0:36:af:e1:22:5e:
6b:47:a5:7c:52:a6:59:4d:77:66:d3:59:e5:f4:c5:9b:f5:ca:
db:b2:35:93:d0:49:b5:96:77:ed:ab:c1:55:a0:e9:9b:bf:1f:
28:b4:a8:81:66:73:36:63:a5:24:42:57:85:eb:14:c3:fe:ba:
38:a3:c0:85:dc:fe:c2:3c:74:5e:38:96:8d:72:f1:92:e8:c7:
86:86:73:88:a6:8a:f3:f2:f3:fe:5d:1c:68:76:ce:0e:18:03:
d2:39:7c:f9:fd:11:c6:4d:6c:45:96:ae:e3:17:87:39:43:7d:
60:94:4c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:07:30 2026 by rpki-client