Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
File: xLejOGcjuooupILHtoAxpUEirE8.mft (raw, json)
Hash identifier: DiwN37eMJBV15PUI8FzuhHXPQshtV/wU+JHx2gWREW8=
Subject key identifier: 3A:F5:D6:A5:84:97:C7:B6:6B:0F:76:1A:2C:10:26:28:9E:66:CC:F8
Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Certificate serial: 01A18DC23AC6EAEA753CBA804F1AC5B40D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
Manifest number: 0935
Signing time: Fri 30 Oct 2026 17:01:18 +0000
Manifest this update: Fri 30 Oct 2026 17:01:18 +0000
Manifest next update: Sat 31 Oct 2026 17:01:18 +0000
Files and hashes: 1: Zk7CyKdXSESzaNUGpp0RHxT1B8g.roa (hash: jS+bnhYvgZZWXRhPBaO9DtSmsb6YqqmNYBdoxXcELc4=)
2: xLejOGcjuooupILHtoAxpUEirE8.crl (hash: KPlobzamHe2+0Y1NbsHsVsBh1+qFr6AdZAKe0BckB2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:c2:3a:c6:ea:ea:75:3c:ba:80:4f:1a:c5:b4:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Validity
Not Before: Oct 30 17:01:18 2026 GMT
Not After : Oct 31 17:01:18 2026 GMT
Subject: CN=3af5d6a58497c7b66b0f761a2c1026289e66ccf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:57:19:09:d8:d7:d0:db:39:dd:66:2a:ba:
c3:28:51:d4:e7:e6:94:e7:02:b3:46:30:66:c3:03:
43:6f:08:eb:bf:a5:f1:e3:34:21:de:61:62:2c:d1:
af:58:2f:46:92:98:fe:b2:0f:21:8f:58:60:5f:31:
18:2f:16:96:83:7b:a6:07:b0:46:2c:21:59:25:88:
73:64:74:54:68:a3:1e:13:59:2c:9b:34:82:ba:cf:
06:b5:34:82:63:38:d4:ab:03:fc:a0:db:3f:66:f5:
1b:cc:42:29:59:0d:af:43:83:b1:9f:c3:57:7c:96:
e0:94:48:ca:fb:45:80:ad:05:63:52:61:80:06:a1:
ec:b4:e4:8f:d7:ed:59:e0:4f:7f:e1:49:1e:d1:d2:
12:55:4c:c2:1b:95:f5:de:74:fb:03:d9:4b:ce:6e:
ea:12:3d:46:1f:40:72:d7:57:3d:ad:6e:ac:cb:c0:
f2:7f:d2:33:23:a4:99:d4:3f:59:c1:92:20:3d:28:
5b:cb:17:eb:14:cb:65:f3:8f:8e:9e:22:82:c5:b2:
25:d7:a6:cb:46:26:e8:eb:98:ba:8c:a2:ef:1a:8e:
bf:d7:41:2b:ea:f1:73:f9:b2:77:f7:c3:7f:32:81:
70:b5:03:63:fc:26:7c:8a:69:34:58:35:ea:42:64:
4a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F5:D6:A5:84:97:C7:B6:6B:0F:76:1A:2C:10:26:28:9E:66:CC:F8
X509v3 Authority Key Identifier:
keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0e:d2:42:76:29:c5:fc:67:22:4f:63:2c:6f:ea:25:0b:4a:
7e:97:38:a0:69:c2:e6:73:0a:7c:71:3d:81:47:d3:c3:63:23:
93:3c:45:a6:8b:20:e5:31:c1:ef:41:37:81:3d:ac:49:63:e8:
7b:d6:ab:6e:9d:20:4c:29:e2:6b:f1:b7:26:7b:54:27:56:fc:
d3:fb:62:d5:47:1f:81:f2:15:8f:f1:40:3a:ee:ab:7d:5c:99:
7c:4f:64:04:b9:8a:de:3b:18:e5:ab:f3:5f:27:a2:aa:da:3d:
dc:2d:9d:67:52:dc:e6:41:ad:3a:74:32:a1:b5:e4:83:7c:da:
1c:c4:c1:14:35:99:a4:bb:91:48:ad:ed:9b:67:96:08:05:cc:
53:69:5c:8f:9e:e5:03:df:bf:db:cd:aa:18:94:74:cc:8d:87:
50:61:47:e8:21:76:bb:30:3d:48:11:c8:19:b3:73:75:98:4a:
2d:32:b1:22:37:4a:b3:af:17:0d:0c:97:e4:67:dd:e4:38:01:
92:79:c4:12:7b:17:ed:1d:f6:89:34:79:7d:e9:47:1e:36:d7:
4a:85:41:78:6b:fc:ca:65:a5:42:fa:73:8b:63:9f:a5:09:09:
fe:48:c1:02:6a:db:1a:31:ef:dd:df:ea:7b:19:e3:91:41:80:
a3:c2:5f:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGNwjrG6up1PLqATxrFtA2AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjdhMzM4NjcyM2JhOGEyZWE0ODJjN2I2ODAzMWE1NDEy
MmFjNGYwHhcNMjYxMDMwMTcwMTE4WhcNMjYxMDMxMTcwMTE4WjAzMTEwLwYDVQQD
EygzYWY1ZDZhNTg0OTdjN2I2NmIwZjc2MWEyYzEwMjYyODllNjZjY2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueJXGQnY19DbOd1mKrrDKFHU5+aU
5wKzRjBmwwNDbwjrv6Xx4zQh3mFiLNGvWC9Gkpj+sg8hj1hgXzEYLxaWg3umB7BG
LCFZJYhzZHRUaKMeE1ksmzSCus8GtTSCYzjUqwP8oNs/ZvUbzEIpWQ2vQ4Oxn8NX
fJbglEjK+0WArQVjUmGABqHstOSP1+1Z4E9/4Uke0dISVUzCG5X13nT7A9lLzm7q
Ej1GH0By11c9rW6sy8Dyf9IzI6SZ1D9ZwZIgPShbyxfrFMtl84+OniKCxbIl16bL
Ribo65i6jKLvGo6/10Er6vFz+bJ398N/MoFwtQNj/CZ8imk0WDXqQmRKOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDr11qWEl8e2aw92GiwQJiieZsz4MB8GA1UdIwQY
MBaAFMS3ozhnI7qKLqSCx7aAMaVBIqxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYTdiZjYtNjUyNS00Mzk0LTgwYmEt
YmQ0MGRmYWU3ODg2LzEveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hYTdiZjYtNjUyNS00Mzk0LTgwYmEtYmQ0MGRmYWU3ODg2
LzEveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeA7SQnYp
xfxnIk9jLG/qJQtKfpc4oGnC5nMKfHE9gUfTw2MjkzxFposg5THB70E3gT2sSWPo
e9arbp0gTCnia/G3JntUJ1b80/ti1UcfgfIVj/FAOu6rfVyZfE9kBLmK3jsY5avz
Xyeiqto93C2dZ1Lc5kGtOnQyobXkg3zaHMTBFDWZpLuRSK3tm2eWCAXMU2lcj57l
A9+/282qGJR0zI2HUGFH6CF2uzA9SBHIGbNzdZhKLTKxIjdKs68XDQyX5Gfd5DgB
knnEEnsX7R32iTR5felHHjbXSoVBeGv8ymWlQvpzi2OfpQkJ/kjBAmrbGjHv3d/q
exnjkUGAo8Jftg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 02:18:53 2026 by rpki-client