Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier: obb/Z1tfMK4EKbuKgkyX4HBbDTDF0hCVS6ohZtlPpm8=
Subject key identifier: 96:05:32:5F:79:1C:3F:A9:5B:DA:5B:BA:81:18:7B:02:D9:DA:EF:8F
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 01A18006C0387B078857675F93E26CD02AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number: 08E0
Signing time: Wed 28 Oct 2026 01:01:28 +0000
Manifest this update: Wed 28 Oct 2026 01:01:28 +0000
Manifest next update: Thu 29 Oct 2026 01:01:28 +0000
Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: QGCNNh9SqIrcSrsZsKjRoslMK7vN2HGsRrOeFuGCYsQ=)
2: zIooxkz42P8_5ReZHQIQQDyh_E0.roa (hash: vHG8nX4oJh4/M/Rbe7SvWBLoOWc7PYioObPqt6DtUuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:c0:38:7b:07:88:57:67:5f:93:e2:6c:d0:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: Oct 28 01:01:28 2026 GMT
Not After : Oct 29 01:01:28 2026 GMT
Subject: CN=9605325f791c3fa95bda5bba81187b02d9daef8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:98:16:ff:72:49:35:57:ee:6d:21:eb:d6:
49:1c:14:3d:d7:d0:cf:aa:21:79:61:7b:50:1f:6c:
77:1f:1c:bf:33:b0:86:05:c3:7f:bf:d8:7b:dc:f1:
91:47:83:3c:0b:54:1c:7f:b0:dd:72:9f:ac:30:c6:
8d:37:a7:0c:e4:5a:71:8f:0d:f7:15:37:95:a7:30:
60:a1:17:b1:f3:9c:82:c9:3f:04:bf:9b:6f:90:f1:
1a:3d:30:e2:08:22:84:00:e5:d9:c2:d7:55:d6:5f:
ac:e1:7b:d6:8d:24:ca:7d:e8:53:82:b5:fc:0f:a5:
12:c0:6f:a2:7c:50:6b:43:f1:6f:13:4a:f1:26:fb:
d2:4c:a9:96:06:50:6b:52:8c:1b:09:30:25:ae:62:
26:8b:80:c6:ca:bb:19:21:e2:37:70:95:30:d3:30:
21:f8:ac:92:16:a6:a4:ea:ae:64:3e:57:8d:9d:80:
f7:e3:9d:77:d4:39:7a:36:c7:fe:3f:0d:ee:d5:17:
27:dd:da:5f:24:7f:b7:27:14:9b:4d:c1:d5:c4:0a:
74:ae:cf:41:ec:47:9c:08:4f:f7:ed:35:f0:0d:07:
7f:b9:d5:51:be:34:4c:4b:da:8e:46:07:57:0e:3e:
59:d7:8c:53:19:a0:8b:17:d6:cd:1c:55:00:5c:c1:
a2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:05:32:5F:79:1C:3F:A9:5B:DA:5B:BA:81:18:7B:02:D9:DA:EF:8F
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:46:62:8a:ed:90:dd:83:70:38:47:e9:12:d5:fb:72:57:de:
17:4b:d2:cf:9f:c4:f3:c6:e4:08:fd:af:2a:ec:80:be:e6:ff:
4b:23:4b:98:2d:70:c0:d7:b3:77:ed:73:40:e1:11:c4:0d:bd:
be:30:34:67:ba:9b:0d:a4:58:03:7f:33:2e:c6:8c:c0:88:c1:
d0:54:70:42:f5:f2:60:0f:a2:69:61:36:6b:6f:d5:d9:ad:c3:
db:f8:ca:3c:79:d1:73:6a:83:d4:ef:9a:22:3d:0c:ff:7b:7e:
c7:c8:0b:2e:23:9b:e0:a0:d5:78:6b:eb:e7:3a:c9:21:ea:23:
91:11:3b:a6:f7:d3:22:a5:6a:4f:bb:c9:75:e5:62:c2:d7:42:
4a:40:fc:10:e0:0e:65:7d:7c:be:0e:da:cd:fd:67:2a:6b:9f:
dc:ac:6e:4e:cb:80:94:15:73:31:7c:77:58:cf:bb:c2:3d:b8:
78:12:14:3b:f7:8d:cd:9f:10:6f:70:95:09:ae:d5:bc:5c:65:
fd:13:5b:cf:27:37:12:5a:e2:cd:48:a6:b6:b3:3e:b6:6f:3a:
54:d7:41:9b:05:c1:51:3f:6e:0f:6d:dd:15:20:c5:e3:6e:d4:
bb:10:32:67:ab:8c:35:14:d2:a4:76:73:bc:7d:3b:57:92:6c:
dc:fe:cd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:23:52 2026 by rpki-client