Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
File: xLejOGcjuooupILHtoAxpUEirE8.mft (raw, json)
Hash identifier: e1z49czYlb5CblgSMUawrOjKWmw668G6kF8Av8ap+Mc=
Subject key identifier: FD:5F:DB:2F:97:D9:C3:9D:0E:A7:14:37:C5:1D:F4:BE:9D:E5:6A:40
Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Certificate serial: 01A08AFAB196B631D063607A55AB78D7DA4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
Manifest number: 08AF
Signing time: Thu 10 Sep 2026 11:01:20 +0000
Manifest this update: Thu 10 Sep 2026 11:01:20 +0000
Manifest next update: Fri 11 Sep 2026 11:01:20 +0000
Files and hashes: 1: Zk7CyKdXSESzaNUGpp0RHxT1B8g.roa (hash: jS+bnhYvgZZWXRhPBaO9DtSmsb6YqqmNYBdoxXcELc4=)
2: xLejOGcjuooupILHtoAxpUEirE8.crl (hash: St0i3HAcxlr17uLtKMoWwpX87fGmul/0KLXV2ghsgbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:b1:96:b6:31:d0:63:60:7a:55:ab:78:d7:da:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Validity
Not Before: Sep 10 11:01:20 2026 GMT
Not After : Sep 11 11:01:20 2026 GMT
Subject: CN=fd5fdb2f97d9c39d0ea71437c51df4be9de56a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:ef:00:ed:dd:b8:bf:38:dc:f0:cf:1f:57:
5e:99:d9:d4:ae:47:d2:79:0d:60:d5:81:39:9c:c0:
90:4e:49:87:76:98:79:d5:2b:9c:36:d7:5a:05:2d:
ef:84:4d:0a:ab:4d:5d:a2:12:0b:74:36:f3:8e:1c:
df:a0:52:d8:7c:db:27:f0:3a:6d:51:d7:ae:df:24:
77:95:a6:13:c0:5f:e5:14:f7:8c:b7:4e:f0:30:a4:
1e:aa:ef:b6:6e:59:55:f7:4a:cf:f4:e8:73:85:1d:
7c:7b:e7:d4:50:9c:b3:64:e8:2f:38:6d:2d:66:a3:
4e:f9:2b:1c:88:ba:e4:fc:5d:53:a0:39:69:da:7f:
de:5a:58:ae:65:6a:0c:bf:28:93:87:34:14:cd:2d:
98:68:de:4c:04:07:4d:12:8e:fa:c8:f0:31:91:5e:
76:8d:0a:e5:c2:9b:53:9d:31:0e:25:0a:6c:f4:95:
08:47:aa:d3:94:50:fb:96:41:84:44:3d:23:10:44:
e0:e7:48:b0:17:a5:99:2e:7b:e4:39:1f:ed:f2:94:
dc:1d:4c:70:6c:53:a3:3a:f4:bb:23:43:87:f1:85:
5b:f6:d4:7f:2b:1e:a2:f6:c5:cb:68:70:61:0f:66:
ca:91:42:2f:93:c9:e3:9b:f3:af:ff:45:4c:9f:bd:
84:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5F:DB:2F:97:D9:C3:9D:0E:A7:14:37:C5:1D:F4:BE:9D:E5:6A:40
X509v3 Authority Key Identifier:
keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e5:cd:28:f2:95:a3:69:4c:16:f1:d8:08:91:d6:5a:8e:e8:
60:cb:c3:a8:b9:3b:e0:dc:de:7f:ad:29:68:d8:6e:08:71:a4:
4c:19:89:db:5b:70:ff:24:4b:00:5d:d6:6c:ed:ce:21:0f:2d:
73:e3:2b:11:9f:6b:dc:18:cb:af:08:70:40:4e:dd:33:74:9e:
ec:5a:94:b3:a6:8d:90:96:62:4d:20:f7:f7:33:ad:81:fd:99:
1e:49:97:94:d5:1c:42:22:b7:8b:26:ed:52:c9:42:d7:65:29:
d5:29:c7:eb:74:c6:34:8c:38:7e:f5:24:f5:5a:a8:57:c0:28:
9c:87:72:23:ef:c6:fc:91:f8:2c:8c:08:bd:a1:36:92:ff:27:
d0:ef:76:fc:3a:55:eb:e0:e4:d6:99:9e:06:6a:b9:46:71:62:
60:08:14:ff:35:95:cc:4e:be:9b:d6:68:f0:33:65:cf:e1:16:
75:1a:c1:3d:7b:51:63:d8:88:08:58:b8:45:21:f3:7d:a2:22:
32:a5:2d:38:34:6a:55:8b:53:d8:2e:24:d0:43:f0:cd:ac:f1:
3c:6c:07:1a:25:d4:d5:2a:ee:e4:64:32:66:e2:68:9e:75:40:
fa:58:df:b1:42:57:a4:d2:f0:4f:9a:e4:26:6e:d2:25:32:e8:
da:dd:bf:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+rGWtjHQY2B6Vat419pOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjdhMzM4NjcyM2JhOGEyZWE0ODJjN2I2ODAzMWE1NDEy
MmFjNGYwHhcNMjYwOTEwMTEwMTIwWhcNMjYwOTExMTEwMTIwWjAzMTEwLwYDVQQD
EyhmZDVmZGIyZjk3ZDljMzlkMGVhNzE0MzdjNTFkZjRiZTlkZTU2YTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqLvAO3duL843PDPH1demdnUrkfS
eQ1g1YE5nMCQTkmHdph51SucNtdaBS3vhE0Kq01dohILdDbzjhzfoFLYfNsn8Dpt
Udeu3yR3laYTwF/lFPeMt07wMKQequ+2bllV90rP9OhzhR18e+fUUJyzZOgvOG0t
ZqNO+SsciLrk/F1ToDlp2n/eWliuZWoMvyiThzQUzS2YaN5MBAdNEo76yPAxkV52
jQrlwptTnTEOJQps9JUIR6rTlFD7lkGERD0jEETg50iwF6WZLnvkOR/t8pTcHUxw
bFOjOvS7I0OH8YVb9tR/Kx6i9sXLaHBhD2bKkUIvk8njm/Ov/0VMn72EaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1f2y+X2cOdDqcUN8Ud9L6d5WpAMB8GA1UdIwQY
MBaAFMS3ozhnI7qKLqSCx7aAMaVBIqxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYTdiZjYtNjUyNS00Mzk0LTgwYmEt
YmQ0MGRmYWU3ODg2LzEveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hYTdiZjYtNjUyNS00Mzk0LTgwYmEtYmQ0MGRmYWU3ODg2
LzEveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuXNKPKV
o2lMFvHYCJHWWo7oYMvDqLk74Nzef60paNhuCHGkTBmJ21tw/yRLAF3WbO3OIQ8t
c+MrEZ9r3BjLrwhwQE7dM3Se7FqUs6aNkJZiTSD39zOtgf2ZHkmXlNUcQiK3iybt
UslC12Up1SnH63TGNIw4fvUk9VqoV8AonIdyI+/G/JH4LIwIvaE2kv8n0O92/DpV
6+Dk1pmeBmq5RnFiYAgU/zWVzE6+m9Zo8DNlz+EWdRrBPXtRY9iICFi4RSHzfaIi
MqUtODRqVYtT2C4k0EPwzazxPGwHGiXU1Sru5GQyZuJonnVA+ljfsUJXpNLwT5rk
Jm7SJTLo2t2/XQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:33:01 2026 by rpki-client