Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
File: RlxixrzUz7iTO8tqYc97Pa0vsRg.mft (raw, json)
Hash identifier: 693QKnrMZVRyoNeWRa2k89UD+Oc3EK5UmsX9dc0J/t8=
Subject key identifier: 47:78:D7:4F:5E:05:F4:B9:A2:FB:8B:80:18:98:EC:53:A6:57:36:74
Authority key identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
Certificate issuer: /CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Certificate serial: 01A08DC4BB08D372858AB0EA0694D0189ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
Manifest number: 113F
Signing time: Fri 11 Sep 2026 00:01:15 +0000
Manifest this update: Fri 11 Sep 2026 00:01:15 +0000
Manifest next update: Sat 12 Sep 2026 00:01:15 +0000
Files and hashes: 1: ENG_c-IJkYRyd704wrJW6p57tLE.roa (hash: aVJt7m5b3gAwKY//U3FCsQzjDpxFgRS6LuQjONM9IoA=)
2: LKRFm8Pw00kXQoKIo5cZaR03rQg.roa (hash: ROfiKIWzfySuULtZm3Vy25ggedOkAvvyQXevFfnrv84=)
3: RlxixrzUz7iTO8tqYc97Pa0vsRg.crl (hash: 1VcFPzu/Z9v+Wqkz8oEUjrlINo067Ag3xk4xrS1ajHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:bb:08:d3:72:85:8a:b0:ea:06:94:d0:18:9a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Validity
Not Before: Sep 11 00:01:15 2026 GMT
Not After : Sep 12 00:01:15 2026 GMT
Subject: CN=4778d74f5e05f4b9a2fb8b801898ec53a6573674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:b0:34:bd:39:91:94:fe:d1:a6:51:6f:07:
2d:56:cd:af:3d:28:c8:0d:be:cb:4a:0f:48:80:6a:
3e:74:f3:29:20:85:c9:fd:ed:60:7d:52:8c:f9:b8:
67:2c:db:ac:4f:6f:e6:30:f7:1c:12:2f:78:a9:62:
4d:a5:18:54:ac:63:87:c7:8e:ee:71:dc:e3:6a:b8:
a5:d6:f0:8c:b1:18:42:fe:77:6a:e1:b4:30:74:ea:
e0:5b:ea:41:f2:1e:5a:29:27:47:8d:00:88:3f:9c:
2b:e5:e7:df:d6:e8:98:ba:14:f5:6e:39:45:42:19:
51:33:c6:0a:f9:19:f6:d9:8a:ff:b3:81:c4:d5:f1:
41:6e:1f:48:23:3f:73:7f:59:7e:77:e0:ef:a5:88:
96:3c:99:63:97:92:86:ed:f8:e4:a5:b0:eb:e7:7d:
ed:b2:df:f8:9f:ae:df:1b:5f:f2:90:2a:8e:d9:c0:
b5:8d:23:ca:08:45:0d:aa:9b:4c:40:2f:16:a7:36:
c6:2a:da:48:f1:05:4e:a1:29:28:72:55:f2:e3:f6:
37:d0:ad:9c:3f:d3:8d:b8:d3:fd:23:40:33:4c:cc:
61:af:6d:d2:45:d5:05:20:50:be:42:f8:ce:1f:d7:
18:f4:50:32:88:9b:7d:a5:ff:dd:e0:3d:9f:cd:f9:
a8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:78:D7:4F:5E:05:F4:B9:A2:FB:8B:80:18:98:EC:53:A6:57:36:74
X509v3 Authority Key Identifier:
keyid:46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:73:d6:2e:28:ef:0f:74:04:31:f0:e5:5d:c9:ba:85:c0:2c:
d7:18:86:aa:3e:e7:a5:fe:c5:79:a6:97:49:fb:e1:35:09:cc:
c8:d7:36:e2:9d:b5:a8:71:a1:1a:08:64:4e:3f:c6:a6:68:36:
14:7e:ba:5a:08:22:ae:6f:c9:66:c3:8a:41:d5:4f:86:08:c8:
e1:84:8d:bc:c2:05:11:02:86:0f:e8:13:af:c6:05:e2:c7:a3:
73:b1:f8:a0:c8:c2:18:02:81:5d:af:ef:93:37:74:f1:9e:50:
c3:18:27:dc:60:68:8b:30:62:11:77:f3:83:72:ae:34:ff:09:
82:6a:6f:8c:62:46:02:40:05:71:a4:52:45:f8:89:ca:57:e1:
fd:31:55:79:94:81:38:42:92:6e:e7:ea:98:f0:5a:94:84:e8:
e7:8e:1a:94:93:39:98:e9:d9:e1:47:0d:92:42:68:5e:8f:37:
11:8a:7e:d1:5c:8b:94:03:ba:cc:93:9c:7e:07:2b:b1:3a:48:
9c:2e:11:7e:64:c4:36:3f:2d:43:11:ee:6e:7e:57:75:ab:42:
19:45:46:e8:9c:6a:e5:bc:76:8b:d2:a1:63:89:25:4d:ff:76:
7a:d4:98:b8:a6:a0:56:61:ff:4c:a2:4b:b9:24:71:ba:29:74:
47:7f:13:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:07:18 2026 by rpki-client