Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.mft
File: xJH8Ajs5EjN6xxQp2chKN15bzS8.mft (raw, json)
Hash identifier: R83t52wp5/8eEl1TTDSvQssbfscd8nI/ZlF04sZTvKI=
Subject key identifier: 1D:53:17:CD:C7:C6:CD:38:CA:4E:46:05:A1:A0:FB:D4:04:D0:26:6A
Authority key identifier: C4:91:FC:02:3B:39:12:33:7A:C7:14:29:D9:C8:4A:37:5E:5B:CD:2F
Certificate issuer: /CN=c491fc023b3912337ac71429d9c84a375e5bcd2f
Certificate serial: 01A105B83B13C9BDE26B96EE66A099C96730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJH8Ajs5EjN6xxQp2chKN15bzS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.mft
Manifest number: 37
Signing time: Sun 04 Oct 2026 07:02:02 +0000
Manifest this update: Sun 04 Oct 2026 07:02:02 +0000
Manifest next update: Mon 05 Oct 2026 07:02:02 +0000
Files and hashes: 1: wNtH8SQdtiCv3yvmwmtJ4tjEIpg.roa (hash: KFPihkmGqp/gfErugdaWlWM5LZ9F8sQft1dGIGgMm3A=)
2: xJH8Ajs5EjN6xxQp2chKN15bzS8.crl (hash: h43F+ebGBpKT8YZllN+or3dcoP46Cu3ulOgIT/+TDAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJH8Ajs5EjN6xxQp2chKN15bzS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:b8:3b:13:c9:bd:e2:6b:96:ee:66:a0:99:c9:67:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491fc023b3912337ac71429d9c84a375e5bcd2f
Validity
Not Before: Oct 4 07:02:02 2026 GMT
Not After : Oct 5 07:02:02 2026 GMT
Subject: CN=1d5317cdc7c6cd38ca4e4605a1a0fbd404d0266a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:4d:29:9a:3c:4b:d2:0b:94:e6:6d:b6:cf:
99:28:dc:5d:59:7b:41:5b:cf:16:a7:87:c7:ed:8c:
d8:e8:cd:89:ba:70:39:13:6e:a4:27:db:85:10:de:
bb:31:1e:0d:25:8f:4a:e3:73:3c:0e:3e:70:fd:29:
aa:3e:fa:6b:7c:15:0b:ed:2e:1c:e3:e4:f4:41:99:
98:bc:93:53:89:f5:b8:8e:ca:12:64:40:98:6d:ba:
f1:a2:f6:4f:9b:d0:3b:d5:72:23:f0:7b:cf:c2:aa:
36:7b:8c:d7:29:a6:80:a6:32:5a:77:8e:34:3e:15:
18:e0:62:f0:a3:d0:c5:38:f8:fc:c6:a8:e6:33:2f:
83:b6:8f:7f:d5:c9:bc:d6:ad:ed:b8:e7:cd:f3:7b:
cd:0b:ed:59:6a:1e:e9:fc:09:93:2c:6c:22:08:d4:
eb:50:41:17:18:6c:c7:55:00:4e:04:13:36:ed:4d:
19:ea:38:8d:ef:ef:86:cb:9d:21:a1:f8:93:5f:b5:
f8:0c:8f:72:33:81:94:36:73:96:1a:0a:e5:8a:4a:
fe:0d:a3:ea:17:1d:1b:88:2f:36:d1:47:54:b8:e8:
85:1d:9c:68:3f:30:c2:ef:6c:d9:e3:b6:e3:00:09:
4e:d6:01:4f:45:83:00:be:2a:07:45:ee:f8:b7:56:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:53:17:CD:C7:C6:CD:38:CA:4E:46:05:A1:A0:FB:D4:04:D0:26:6A
X509v3 Authority Key Identifier:
keyid:C4:91:FC:02:3B:39:12:33:7A:C7:14:29:D9:C8:4A:37:5E:5B:CD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJH8Ajs5EjN6xxQp2chKN15bzS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/647ec3-716c-4e34-a6e5-13b32eb93cc1/1/xJH8Ajs5EjN6xxQp2chKN15bzS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fc:15:7f:00:2e:3d:b5:02:ee:dc:26:cc:40:6a:0e:30:ae:
d1:11:b3:0d:8f:98:bc:af:14:3e:81:98:03:15:7f:69:84:50:
09:6c:ee:76:d0:29:15:87:0c:d7:3f:ed:b1:9d:68:8a:a8:20:
f2:d2:c6:06:64:5b:3b:33:81:ff:ae:40:40:49:06:9c:eb:f1:
29:5d:a2:fa:77:57:f4:84:1f:0a:60:24:18:bd:63:81:39:8b:
9c:76:78:08:cb:3a:0a:3b:25:22:72:c8:e1:0b:f4:15:d5:66:
b3:79:da:42:db:ab:d0:ef:82:31:88:5d:82:f9:21:7c:91:56:
72:09:dd:fc:7f:a8:81:84:1a:fe:32:43:75:1d:d7:17:31:1b:
93:6c:cf:96:8f:8b:a0:a3:77:6f:43:ac:50:2d:30:06:59:61:
cb:69:5f:e7:c2:09:9e:f7:a9:d1:27:e6:5c:e6:5f:0d:44:d3:
ae:09:ec:e4:21:4e:79:2d:65:f3:1b:f9:74:17:20:15:d9:5c:
01:66:e2:5a:c5:23:bc:bc:7c:89:c1:e6:67:de:e6:dc:39:68:
29:4b:d5:6f:ec:53:de:a3:77:87:78:62:7f:ae:cb:69:ed:62:
42:a7:88:ee:71:99:04:d7:68:9b:88:a3:a9:02:7e:2a:13:c5:
34:27:73:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:36:34 2026 by rpki-client