Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier: jHSJM+JS5mqhNgyhL+P6cuoq+nrZczF/Cbk0bvp9QgU=
Subject key identifier: D5:6C:43:C3:E0:4A:D6:F1:10:A6:D3:3B:BF:5D:B1:C1:13:0A:C0:1A
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 01A0811C14C3A8A6E6CCEEF0D25D86FB97E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number: 085C
Signing time: Tue 08 Sep 2026 13:01:36 +0000
Manifest this update: Tue 08 Sep 2026 13:01:36 +0000
Manifest next update: Wed 09 Sep 2026 13:01:36 +0000
Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: 7eJ4/MGtiBVOGZ3YOR/picOFu2WU6MUZUurNr+8kBWA=)
2: zIooxkz42P8_5ReZHQIQQDyh_E0.roa (hash: vHG8nX4oJh4/M/Rbe7SvWBLoOWc7PYioObPqt6DtUuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:1c:14:c3:a8:a6:e6:cc:ee:f0:d2:5d:86:fb:97:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: Sep 8 13:01:36 2026 GMT
Not After : Sep 9 13:01:36 2026 GMT
Subject: CN=d56c43c3e04ad6f110a6d33bbf5db1c1130ac01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:8f:eb:78:fc:31:f1:fd:0e:9e:47:51:68:
de:87:72:6b:ca:95:3d:86:fd:42:77:b6:a5:a7:90:
15:73:27:77:ec:16:62:ec:c9:bc:59:bc:ed:4e:8b:
d2:e9:fc:bd:4d:32:3a:6f:7b:57:2f:e0:23:0c:3d:
ad:fc:14:41:e5:ba:55:f7:cd:3a:70:00:a9:fd:87:
5a:08:b7:6f:d0:68:89:f5:3d:22:7d:5e:3d:b0:b8:
fa:bc:88:dd:28:58:9e:4b:f2:8d:fd:37:05:7d:c1:
0f:69:d3:d5:e3:ca:91:96:52:0d:1f:9a:a7:b3:43:
87:61:07:a7:79:0e:05:41:11:cd:77:a6:d4:a1:60:
5b:e5:49:bf:c6:5c:64:53:48:22:7c:43:3e:a5:6c:
a1:99:a2:4f:7a:b8:d5:17:52:71:a5:b5:5d:1b:c4:
c4:c7:77:31:a0:9a:5d:08:a8:a6:30:0f:bf:17:58:
43:2c:77:ad:3f:cc:82:e7:b5:1f:78:7c:a8:3d:52:
63:5b:a3:c9:cb:be:e0:53:5b:28:54:7a:80:72:06:
6d:c8:cd:72:94:a0:25:8c:ec:f0:0b:43:7e:e0:6a:
44:1e:7b:a3:55:f8:35:05:df:6a:4a:8b:43:7f:21:
da:16:01:f6:71:8b:9b:e8:9d:b4:01:eb:05:ca:b2:
80:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6C:43:C3:E0:4A:D6:F1:10:A6:D3:3B:BF:5D:B1:C1:13:0A:C0:1A
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b9:3b:82:e1:74:28:a4:73:7f:c1:e0:b8:98:21:f1:18:e1:
93:af:be:f3:5a:64:6f:6f:95:e0:39:bf:51:f3:2d:2e:5f:a0:
e4:ea:b2:a3:33:fc:b8:2f:af:ae:ae:9b:13:ca:74:c0:7a:eb:
99:43:b9:f2:76:82:46:ac:72:f0:53:ca:80:56:06:f0:3b:b6:
33:5d:fd:e8:2c:cc:17:46:14:17:1e:81:fc:c5:08:86:5e:03:
7a:cb:43:3b:32:81:ec:72:0a:7d:db:1e:81:d3:01:1a:1a:dd:
3b:09:5e:f4:30:0a:ca:cf:52:99:c3:82:72:c9:d3:f5:17:3c:
09:f2:92:2d:f6:d5:5b:8f:fe:1c:d8:25:f3:03:ff:ff:40:52:
2b:8d:0c:a9:8a:b4:ef:a1:26:7b:bf:65:2d:bd:87:57:95:f8:
94:2e:af:6c:0c:fe:29:d2:d8:b6:1b:f9:9f:6c:84:f2:2f:a0:
47:03:c0:51:ff:0a:f3:d3:80:81:da:23:9f:01:49:c2:fe:bb:
00:85:05:50:44:68:d2:70:14:7f:0e:e1:71:c3:83:a9:00:b2:
a1:51:30:7d:59:6c:d8:f5:a7:0a:b0:12:a9:56:5d:6f:76:e2:
68:be:16:8a:14:4c:5b:c8:77:f0:5d:7a:75:38:50:36:8e:cd:
74:2e:f7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 23:59:34 2026 by rpki-client