Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
File: xNoGacxfwdqe7YsKEzphv-PfWFY.mft (raw, json)
Hash identifier: YnvYStGv9Q8OTPAfEXzYkWPWrEslDz7y1hRn9HS7EAw=
Subject key identifier: 29:95:DC:E1:B1:A3:35:F0:01:11:7E:C4:0B:19:57:E0:3C:FA:2F:CE
Authority key identifier: C4:DA:06:69:CC:5F:C1:DA:9E:ED:8B:0A:13:3A:61:BF:E3:DF:58:56
Certificate issuer: /CN=c4da0669cc5fc1da9eed8b0a133a61bfe3df5856
Certificate serial: 01A08D563E35A35CBBC591D37ABE9D51AEE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
Manifest number: BD
Signing time: Thu 10 Sep 2026 22:00:34 +0000
Manifest this update: Thu 10 Sep 2026 22:00:34 +0000
Manifest next update: Fri 11 Sep 2026 22:00:34 +0000
Files and hashes: 1: pYUYQEf2s7Z-P_vS-0K2KryHc60.roa (hash: HUauXiB8EmNlBFz7vLwqL2QKaYGDn/MlUmtQHsbrszw=)
2: xNoGacxfwdqe7YsKEzphv-PfWFY.crl (hash: /zNnFb/2UuLs6jhszsmo//oD1vPlo09z8PktfNh/bMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:3e:35:a3:5c:bb:c5:91:d3:7a:be:9d:51:ae:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4da0669cc5fc1da9eed8b0a133a61bfe3df5856
Validity
Not Before: Sep 10 22:00:34 2026 GMT
Not After : Sep 11 22:00:34 2026 GMT
Subject: CN=2995dce1b1a335f001117ec40b1957e03cfa2fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:56:4c:7e:bf:bd:b5:64:b7:b8:69:3e:3e:
5d:cb:4f:de:30:0a:d4:da:06:d4:85:fb:90:e2:67:
6a:a8:4e:f2:14:36:c2:5c:14:2b:64:86:1e:ef:26:
e2:77:e5:08:98:cb:10:54:5a:dd:69:f7:ba:8d:1f:
f8:7a:fc:41:ab:e1:e5:f8:1f:53:2f:64:d1:f7:10:
c1:df:09:48:e2:7c:e9:92:78:49:69:18:0f:16:b3:
69:d1:f9:26:af:bc:f4:20:2e:aa:8c:85:be:6c:d8:
51:ea:6e:92:2a:75:ad:74:2e:f3:1d:ae:0a:9d:63:
dc:d4:a3:d1:e8:5b:1e:f2:ea:df:05:1c:03:58:e4:
2f:7d:19:4d:8d:e8:b1:f6:69:25:6d:7d:f7:2e:61:
e9:9b:50:1a:2a:87:b8:be:5b:e7:db:50:2b:51:bf:
fa:98:91:ad:12:12:df:b2:ca:65:94:02:81:76:a0:
2c:08:2a:5e:97:fc:80:77:da:bf:3e:3e:e9:8a:6c:
3c:a7:e5:bd:7d:8c:f7:da:16:9a:64:b5:a6:fc:d2:
e3:f8:9e:42:bb:1f:d3:0f:2e:86:2e:c3:ee:54:e5:
b5:b1:9f:17:03:01:22:53:9b:d3:11:e8:b0:32:f0:
fb:2b:bd:80:fd:c7:b1:6a:6f:f8:63:2c:0b:fd:d0:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:95:DC:E1:B1:A3:35:F0:01:11:7E:C4:0B:19:57:E0:3C:FA:2F:CE
X509v3 Authority Key Identifier:
keyid:C4:DA:06:69:CC:5F:C1:DA:9E:ED:8B:0A:13:3A:61:BF:E3:DF:58:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:af:53:dc:a3:7a:35:fc:35:65:26:01:a1:88:b9:8d:56:d5:
45:ce:c0:31:1c:9d:27:6e:ea:86:08:14:02:2e:93:5c:00:36:
f2:4c:40:86:f0:a3:4b:05:86:35:f5:96:5a:c3:72:4e:9d:54:
4d:73:40:54:2d:6a:f1:a2:f0:8a:7b:ca:c5:32:29:81:f3:5a:
e5:ea:3f:9d:69:b7:02:0c:51:31:d2:87:13:69:7e:bb:a4:b0:
7f:d4:7f:67:9c:47:8b:d6:6f:d1:e9:a7:50:c2:08:7f:cd:4e:
8d:82:ef:c6:0e:e9:3b:bd:16:e7:ca:49:dd:83:ef:25:bb:1b:
99:15:2a:ef:d5:6c:5d:1f:48:a8:92:ec:09:75:d9:de:81:1e:
66:24:38:9d:12:3c:7d:f5:5e:d8:36:72:13:cc:47:ac:1b:73:
eb:4c:92:6f:b6:ce:95:87:38:aa:98:db:75:0f:8c:08:c1:08:
e8:24:7b:84:92:d6:1c:8c:2e:0c:5d:07:8d:f6:2c:00:df:9f:
b7:79:54:eb:58:73:2a:53:ed:a3:ce:66:0a:36:7e:d2:3e:a3:
8e:f8:e0:46:07:45:54:d4:f9:5d:49:9b:14:cd:d1:a9:e8:d5:
12:1e:b7:ad:09:1e:8a:40:d5:cb:04:a6:d1:b6:db:ff:9c:dc:
e3:8b:1b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:08:45 2026 by rpki-client