Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier: xk6I/Pkq9+u0TLFir0wm6F+qhtAExD78YliBFG8kOe8=
Subject key identifier: C8:01:A1:8A:61:2B:FE:27:F5:E5:84:65:70:A8:E9:12:D4:80:59:57
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer: /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial: 01A106930CC6431576A0310659A7C625822F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number: 1A1B
Signing time: Sun 04 Oct 2026 11:01:02 +0000
Manifest this update: Sun 04 Oct 2026 11:01:02 +0000
Manifest next update: Mon 05 Oct 2026 11:01:02 +0000
Files and hashes: 1: a3vqBzTeMihaLI7nX3YXTwT9QXM.roa (hash: YtcSgTlR3L7xs2ulbON7vgzLF5ftnMrGCR+z8FjX7OE=)
2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: zgu/8gl++xrMCvMZb5DG2CpmuNRw1Qwb1bgSVuEij74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:0c:c6:43:15:76:a0:31:06:59:a7:c6:25:82:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Validity
Not Before: Oct 4 11:01:02 2026 GMT
Not After : Oct 5 11:01:02 2026 GMT
Subject: CN=c801a18a612bfe27f5e5846570a8e912d4805957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:ac:04:11:83:84:c4:e3:04:b0:50:e0:e2:
1b:df:9e:ad:41:7d:5a:ee:e9:3d:b2:6a:75:91:1e:
b1:01:8c:3e:58:82:5f:17:19:64:24:14:b7:e5:a7:
85:fd:bf:5a:cd:47:9b:b8:bc:30:38:d9:6d:14:50:
f2:14:3a:06:e0:ac:4f:41:cd:51:fe:51:25:e4:73:
34:7c:db:fb:6e:8d:a5:a8:95:23:6f:a9:07:68:3a:
33:eb:01:30:9c:9b:af:63:64:ff:7a:3d:c4:e6:19:
99:f3:94:45:13:7e:cd:f0:63:4e:13:7e:a3:b3:18:
2b:85:5f:dc:93:05:2a:fb:fa:e9:c0:01:f2:d9:37:
3f:97:0f:cb:71:c3:6c:1a:b0:da:92:8f:e0:2e:8f:
7e:4d:89:09:c8:fe:40:82:13:5c:e1:e1:86:14:7b:
20:20:50:74:cc:ce:06:f0:7d:a8:cf:ca:84:28:48:
75:96:d0:6b:52:54:08:8a:b2:a5:6a:0f:2d:e4:eb:
59:99:52:3c:69:d4:da:a5:83:99:ac:62:b6:fa:e0:
bc:a0:df:aa:d7:47:9d:f3:56:1f:16:20:9b:34:22:
8b:e6:88:7a:07:7d:3a:2f:aa:84:a8:db:a9:85:62:
d6:01:c9:15:63:cf:dc:6f:fa:58:b8:fb:75:46:10:
84:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:01:A1:8A:61:2B:FE:27:F5:E5:84:65:70:A8:E9:12:D4:80:59:57
X509v3 Authority Key Identifier:
keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:55:29:f1:1c:92:ab:1a:ca:39:a6:ff:49:38:5d:42:fd:b4:
5a:e1:74:e5:d8:94:e4:26:e3:99:8b:9d:7c:18:34:87:8b:53:
3d:2e:87:db:5b:e3:0f:f9:20:58:56:56:69:a1:8c:4c:e4:85:
31:79:f5:33:28:2e:6e:32:d4:bd:c7:9c:fb:16:ae:fe:69:be:
be:c3:dd:52:07:f4:7a:bf:57:8a:ea:85:16:a6:f5:68:3f:e3:
10:de:79:d4:af:e2:02:55:a4:b8:e8:7b:f1:49:c1:e1:0e:20:
e2:c9:b5:8a:c2:4d:0d:d6:e2:a5:2b:95:52:35:de:a0:e2:ae:
28:55:f4:ff:28:3f:aa:8a:71:30:ec:45:ec:66:51:9f:23:2b:
fc:59:80:21:69:fd:28:30:f4:da:fe:cc:38:88:2d:30:90:6f:
4d:35:4c:26:e7:21:19:b7:fe:26:9b:ce:5e:3d:a3:9b:95:ce:
0c:50:c5:98:f5:be:2d:bb:ef:b2:52:4b:d5:95:b7:5a:7a:8e:
a4:84:b8:72:42:bf:38:4c:15:40:d5:4b:a9:f8:43:53:6e:7a:
91:46:c6:68:3e:70:11:8f:ab:69:a9:1b:99:7a:d7:03:71:fe:
a2:79:b6:b0:71:f0:3b:91:cf:e3:b0:07:47:88:df:20:29:1f:
6c:b9:0d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:14:29 2026 by rpki-client