Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier: Bow+NExi8SIHyhH0YgIA1QJ2f6WAwhbJQLRh6dRjMvA=
Subject key identifier: B4:1A:74:C5:B7:74:87:F7:C7:8D:1B:95:E0:32:61:93:7B:5E:9D:D1
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 01A1186255D8808AB7A6282103F30C667BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number: 1A92
Signing time: Wed 07 Oct 2026 22:01:00 +0000
Manifest this update: Wed 07 Oct 2026 22:01:00 +0000
Manifest next update: Thu 08 Oct 2026 22:01:00 +0000
Files and hashes: 1: BQKL8EXCPvyOQg1ICU181HzsTLY.roa (hash: MQTZW+TVECgfYFhuLaoeF6hUd6ELHRAnYHxRk4WvfLE=)
2: FxY1RAn7Uc02QNfQHdB91asNvfo.roa (hash: XFxgE3CskWpWNCg7s6TQKuMZYsJq+2wXqoHIuIsrGSk=)
3: mvSatyfuo61e-RTaG2TAjXDZEec.roa (hash: Wd+3k5bQsb75PtYForkA7tIC7S5S2MMNM7YiFG0yOOs=)
4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: +uqyvu01dcb/fr4uS8hirFhH2SNbv/zLQRCiQA5UxzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:62:55:d8:80:8a:b7:a6:28:21:03:f3:0c:66:7b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Oct 7 22:01:00 2026 GMT
Not After : Oct 8 22:01:00 2026 GMT
Subject: CN=b41a74c5b77487f7c78d1b95e03261937b5e9dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:ae:f8:a7:cc:90:b3:16:c3:2e:f1:47:8b:
3f:01:f8:5e:e8:7b:60:ba:64:78:ee:c4:ac:c3:d4:
fd:a2:c3:8f:67:ca:64:20:9a:75:8e:37:65:1a:12:
02:28:af:bd:8e:86:9f:7f:78:92:0d:37:08:cd:b8:
d6:d4:14:f8:2f:ff:42:d2:c7:d1:a6:57:7c:b6:bd:
0b:e4:27:aa:a8:38:12:38:41:74:ae:21:fa:5c:23:
d0:ce:2f:12:71:e6:f2:33:f6:51:6c:78:21:83:5b:
9e:d5:6e:51:df:13:ae:0f:a5:29:72:f8:df:2e:7b:
94:3b:fc:a4:e9:1d:1d:d5:36:53:d7:9f:c0:6e:ae:
4a:c7:26:c0:cf:04:36:35:35:18:ed:26:89:57:ae:
03:2c:18:1b:2f:c0:24:78:d8:81:b8:ed:1f:23:85:
7a:89:7f:9f:d1:a5:0d:bb:4d:83:4b:24:dd:68:7a:
e8:fc:35:a6:4f:5a:75:56:9c:e5:33:05:26:0a:a6:
db:51:54:00:f3:82:ec:7d:71:6f:2f:9c:bb:a2:54:
7f:e7:68:9f:e3:29:5d:6c:1b:1d:93:4c:72:7f:5d:
88:75:38:af:e6:7a:af:5d:7d:ee:8c:f7:34:25:38:
70:30:35:e0:a6:28:0a:37:c1:f3:e7:09:9f:8a:44:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1A:74:C5:B7:74:87:F7:C7:8D:1B:95:E0:32:61:93:7B:5E:9D:D1
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c2:68:40:a4:8e:1e:6a:d2:27:fb:ce:1e:44:82:24:8b:b2:
fd:86:04:44:45:68:8e:fa:4f:f5:6d:a9:b8:db:87:02:6a:b1:
97:cb:30:40:f5:07:f2:dc:fe:5c:bf:c7:a2:e0:d8:8a:2c:9e:
f9:c6:a7:e4:be:67:9a:86:ab:8b:7a:d3:6f:3a:2d:ec:5e:f0:
df:63:26:ee:65:6c:c9:60:3a:a4:84:ac:9f:0f:4e:8e:22:77:
ca:0d:41:07:a4:a4:d1:54:b0:5d:b3:7d:af:d4:e0:3f:33:ed:
be:55:55:2d:ca:09:09:6d:58:d1:b6:d4:cb:2c:5a:55:cc:1e:
68:85:2a:b4:bc:47:8e:7c:8e:53:33:2a:16:f5:b1:e8:76:c3:
46:52:ab:7b:d9:d3:b2:7d:b5:e8:d4:c7:c6:c0:40:df:c5:62:
d5:14:3d:3f:f7:7f:d5:07:14:2e:9c:bd:0a:62:cc:9d:a0:5e:
ad:fb:a6:c3:a4:7f:6c:b7:c5:35:31:c2:d2:68:b8:01:2b:77:
ba:7c:88:7c:87:44:e7:99:66:83:63:e6:9a:bb:ca:2a:48:c3:
cf:5e:14:6a:40:f1:4f:16:7f:0a:3e:6c:93:fc:4b:bf:4f:29:
4c:19:83:ad:38:85:91:17:39:32:76:50:ce:b6:3c:86:08:99:
be:32:92:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:53:53 2026 by rpki-client