Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: PdRPNn6VRDbf4UelYQH2kgqAylabwM9zqnr+IB0k2kE=
Subject key identifier: C2:7A:F7:89:EE:7F:A2:F3:FC:B0:93:76:F6:F9:9F:81:06:D0:4F:9E
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 01A15B8C48A94591E26F336EBA10E55B5FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 0E21
Signing time: Tue 20 Oct 2026 23:01:22 +0000
Manifest this update: Tue 20 Oct 2026 23:01:22 +0000
Manifest next update: Wed 21 Oct 2026 23:01:22 +0000
Files and hashes: 1: OvbRlSnTXlATqx6AnWYr1toDU7w.roa (hash: Q7J38waQ9GMMd+3BefTKWI7xIc5v9QQp9c12zI1W6yo=)
2: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: 978M6COkQ7cxmqhv2HUYfsUqr3jEOfOhILea8V3VLFc=)
3: ka4LXP3r8o1mdLFuGzD128vQb8c.roa (hash: b2UoUARxm+G737EGkLibfrOXAzwN80OkLpiAV/fDR/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:8c:48:a9:45:91:e2:6f:33:6e:ba:10:e5:5b:5f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Oct 20 23:01:22 2026 GMT
Not After : Oct 21 23:01:22 2026 GMT
Subject: CN=c27af789ee7fa2f3fcb09376f6f99f8106d04f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:8c:08:3a:a4:38:bd:60:b0:94:b7:7e:a4:
15:97:72:86:ee:0a:61:3f:ba:56:33:b5:2d:5d:1c:
81:fb:b9:a4:36:3a:c0:a7:4c:a1:70:4c:13:f9:ce:
71:db:b2:9b:2b:7e:b2:a6:1f:ef:c3:75:9d:8b:33:
b6:ac:b9:87:44:e5:8b:7b:92:40:4c:00:5a:32:21:
7f:49:97:33:5e:37:c9:31:83:78:7c:c4:9a:24:64:
12:20:d4:26:24:2e:77:8a:7a:5b:ec:c0:cf:c7:1b:
d5:a3:a7:1b:e8:b7:aa:e9:ea:f0:10:19:40:d5:63:
d3:cc:1a:b2:44:f7:96:6d:cf:89:5f:7d:0b:f1:c3:
30:1f:29:90:0b:34:5a:56:7e:a8:ab:7d:af:62:92:
54:2b:e9:8f:5e:19:25:0c:6b:21:fa:17:fa:50:8b:
9a:fd:b9:c0:4d:04:df:b7:ff:bd:ef:0c:c7:2d:c9:
d6:01:df:c9:17:bd:25:e5:b3:40:bc:92:a6:56:d5:
cc:a3:2a:53:bb:21:fb:72:62:82:54:9f:67:7d:5b:
f5:61:c5:05:2f:ff:aa:ce:e2:d4:6f:62:1d:dd:8a:
41:29:6b:df:90:6d:2c:4e:e5:d2:38:1f:4c:46:89:
be:f9:30:9f:8c:75:5e:b8:1a:f5:43:84:92:1f:83:
19:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7A:F7:89:EE:7F:A2:F3:FC:B0:93:76:F6:F9:9F:81:06:D0:4F:9E
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8f:b4:b8:82:7d:03:a0:8f:fe:24:0e:bc:30:ba:a3:55:8b:
b7:46:4a:1c:92:b0:ea:d1:77:af:ab:cf:11:27:57:f5:77:2b:
af:cd:6b:97:49:42:3a:2e:48:f1:90:45:b8:1e:87:3b:8b:e8:
ec:bd:2f:64:df:7d:cf:9b:0f:85:b3:c1:ff:19:18:de:b4:14:
f9:fc:6b:c6:47:7f:9b:8e:87:55:47:7a:5c:94:0e:fd:80:6d:
94:b2:b8:58:d3:f4:9e:c6:1a:99:3c:0a:19:95:87:91:0e:c1:
15:a8:50:c9:63:05:6d:7c:45:6f:09:77:53:2c:dd:89:ab:28:
07:0f:c5:c1:80:06:0f:25:07:29:6c:a2:8f:73:0b:d8:bd:85:
1e:c3:43:7b:74:a8:74:a6:81:37:27:2a:3d:67:73:b5:46:88:
0e:d5:15:11:29:90:bf:b6:bd:4f:a7:a7:16:9a:d5:9f:c5:d9:
fb:d3:9c:e8:e8:24:dc:84:12:6c:c8:10:93:f8:ca:c6:04:77:
2c:ee:90:13:b8:82:56:df:2f:7f:75:64:fe:ba:fe:b7:97:dc:
18:7c:f9:66:9b:11:2e:fe:ac:3c:0b:9f:3a:02:0b:08:fb:9b:
61:c5:d3:8d:50:1b:1c:66:93:68:0f:b9:4a:33:83:08:e9:42:
d5:71:65:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 07:17:41 2026 by rpki-client