Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
File: xNoGacxfwdqe7YsKEzphv-PfWFY.mft (raw, json)
Hash identifier: fm1FIoZQIoT1uIbjxVHfNFdzrbF/1vz5erIfkLf5DBA=
Subject key identifier: D1:86:9A:99:80:EC:BE:59:DA:B4:B0:E0:4D:41:D9:B2:AE:D8:C9:5B
Authority key identifier: C4:DA:06:69:CC:5F:C1:DA:9E:ED:8B:0A:13:3A:61:BF:E3:DF:58:56
Certificate issuer: /CN=c4da0669cc5fc1da9eed8b0a133a61bfe3df5856
Certificate serial: 01A1920C25E34EFB258C954CB7B0ACF95EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
Manifest number: 0144
Signing time: Sat 31 Oct 2026 13:00:31 +0000
Manifest this update: Sat 31 Oct 2026 13:00:31 +0000
Manifest next update: Sun 01 Nov 2026 13:00:31 +0000
Files and hashes: 1: pYUYQEf2s7Z-P_vS-0K2KryHc60.roa (hash: HUauXiB8EmNlBFz7vLwqL2QKaYGDn/MlUmtQHsbrszw=)
2: xNoGacxfwdqe7YsKEzphv-PfWFY.crl (hash: O5dK9HEWb7+cRgQq5qurjV4dhAUB40lGUNJqTJvc+gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:0c:25:e3:4e:fb:25:8c:95:4c:b7:b0:ac:f9:5e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4da0669cc5fc1da9eed8b0a133a61bfe3df5856
Validity
Not Before: Oct 31 13:00:31 2026 GMT
Not After : Nov 1 13:00:31 2026 GMT
Subject: CN=d1869a9980ecbe59dab4b0e04d41d9b2aed8c95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:86:5f:ca:0b:07:e4:c1:7f:71:b5:fa:be:4d:
5b:b9:fa:11:a7:ba:c1:cb:30:b5:ef:12:21:51:a4:
57:d1:f4:94:05:0c:52:69:b9:a1:cf:90:27:7d:58:
46:04:d4:8e:3a:8d:4e:c8:44:88:5b:35:24:e4:d3:
68:69:47:5b:82:c7:1d:50:b6:f5:d2:48:31:44:ba:
8b:f9:e7:9d:f9:92:c0:ff:4e:eb:ac:e4:6d:4f:98:
fe:b7:62:e0:89:97:76:e3:8d:67:7f:99:46:26:b0:
73:00:28:b7:49:a8:d6:38:ed:b8:6f:fc:94:f0:31:
73:c6:ed:dc:f9:ea:ba:fb:c8:1b:4d:50:90:1e:9b:
57:6b:2b:7f:9c:7e:c5:04:bd:e7:5e:70:a3:20:fe:
68:d6:88:c1:b8:24:7a:06:77:9a:8d:56:e1:a3:cf:
c3:dc:99:6a:3d:53:52:ef:58:33:81:cb:e9:67:8b:
5a:49:cc:49:23:92:08:d9:e3:09:04:68:94:c1:57:
e9:4a:2b:7a:1c:c4:7a:b3:ab:9d:53:70:be:b0:f5:
54:ca:cc:80:73:fd:14:83:fa:1f:0e:d9:6b:79:94:
fe:d8:b9:9a:a9:01:f7:e0:e8:ce:6a:38:1b:56:2c:
30:a9:a7:6a:d8:e1:4a:24:1e:f2:04:05:22:c9:52:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:86:9A:99:80:EC:BE:59:DA:B4:B0:E0:4D:41:D9:B2:AE:D8:C9:5B
X509v3 Authority Key Identifier:
keyid:C4:DA:06:69:CC:5F:C1:DA:9E:ED:8B:0A:13:3A:61:BF:E3:DF:58:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6a:2d:3b:8c:66:04:65:e4:b5:2a:a4:72:de:04:34:e7:3b:
f8:e5:4d:cc:72:ba:f7:45:05:a4:41:09:8b:39:fe:2c:6c:42:
ca:8f:b9:1b:f7:0a:ed:d6:c4:e8:72:e0:3e:06:2a:35:0b:de:
90:df:b1:ce:5f:16:91:f2:6c:bc:ca:9d:b8:05:42:89:95:3d:
6e:cc:ef:5b:d0:2c:94:21:3f:30:cf:9c:9a:96:fa:21:3a:47:
84:10:5d:80:e1:41:1d:4f:f6:a9:dd:25:9d:31:45:46:c1:ac:
35:37:7d:dd:ce:25:de:44:a5:ca:54:63:32:1c:f5:3b:34:42:
33:31:86:24:42:e5:11:b6:a2:ca:c6:bc:a6:cd:eb:2e:2f:f4:
10:95:ec:a5:09:a7:f6:19:98:92:2f:f6:4b:ea:26:04:2c:be:
22:74:7a:d9:d3:33:f7:f6:02:2e:41:db:ff:03:da:fb:e6:79:
b4:5b:fa:7d:4b:85:3c:52:a6:79:5f:11:4c:a6:b1:b0:3f:04:
d4:81:be:ec:c1:db:f7:a2:ee:da:54:4c:87:ed:a2:c7:59:de:
53:6c:35:8b:ff:a1:42:37:79:32:27:9c:a7:48:6e:04:04:18:
ba:3c:6c:89:af:79:0e:ae:45:be:97:7d:43:4e:45:8a:4d:eb:
68:3a:19:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:23:25 2026 by rpki-client