Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: ljhMUCPYiixBednKYE8PCcxNR7iwBM23sATiwFI3HL0=
Subject key identifier: C7:3A:39:00:67:A7:AA:3B:AD:8A:83:42:36:6B:D2:76:8C:CA:6F:D0
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 01A17D7328B6E618A8BAA858BCACA8A07933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 1AD5
Signing time: Tue 27 Oct 2026 13:01:01 +0000
Manifest this update: Tue 27 Oct 2026 13:01:01 +0000
Manifest next update: Wed 28 Oct 2026 13:01:01 +0000
Files and hashes: 1: LS5MCCO9caJteSNm3UxfcHvxWuY.roa (hash: x6EZSVRR5fQkZJq/8+MpkayOyy+ArponPDKCWMu+oZw=)
2: b2OvrwS5fdlnhd8jiScteBrMJzo.roa (hash: 2y9dXhwloiTIsuknPn5cIK/PWnisQw1xqs5MGBYxLGI=)
3: rj-0V1J38VZQrRPfHd8xSzQLmRI.roa (hash: hduanHT2uT8V/UIO7xHWzu4Y55+PQEhZP0n2Pd1XDes=)
4: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: EtlSSa1noBivFtl0kC1lMeXocDIY5dhUOFXx1M48xTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:28:b6:e6:18:a8:ba:a8:58:bc:ac:a8:a0:79:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Oct 27 13:01:01 2026 GMT
Not After : Oct 28 13:01:01 2026 GMT
Subject: CN=c73a390067a7aa3bad8a8342366bd2768cca6fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:69:b1:fd:83:a3:7c:0d:89:d3:dc:4e:d5:
78:7e:27:a1:4f:eb:e6:31:14:de:c3:b6:90:17:00:
77:b3:28:c7:6e:ca:18:b7:87:12:38:49:49:9e:41:
3e:26:c4:6d:06:03:a7:bd:df:e1:3a:2e:f5:43:cb:
26:dd:d6:81:31:76:3d:2d:e5:4a:3e:da:b0:24:2e:
cd:e4:a5:5c:32:85:23:9f:20:72:58:be:9e:91:38:
cc:af:32:7d:5e:90:a5:31:72:c8:6d:51:c7:b6:1f:
9f:77:06:3f:8c:95:8f:85:8c:80:78:fc:69:7b:12:
e2:5c:d5:ab:d7:c7:9f:70:17:89:99:f9:f0:b2:ad:
0f:ed:79:5b:ee:7b:5d:40:04:53:b5:cf:f8:58:65:
57:97:c0:dc:3d:25:e0:f3:16:54:6e:fc:e5:66:8d:
5f:b5:ee:9f:86:0a:73:ad:99:fe:50:a7:f5:2b:90:
9c:bc:f0:e5:45:9d:5a:f8:ad:50:5e:45:6a:d7:f4:
cf:98:06:94:96:94:02:6d:4e:6c:b8:f9:7f:bc:08:
52:97:d2:b7:a9:f8:b9:7a:bd:d8:3f:3a:55:ce:db:
e6:b7:67:f5:ba:f1:0f:e5:4d:95:08:da:08:98:6c:
7d:10:b4:ef:2a:79:d5:2d:c0:b0:4f:9a:79:6c:68:
e8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3A:39:00:67:A7:AA:3B:AD:8A:83:42:36:6B:D2:76:8C:CA:6F:D0
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:54:4c:dc:e9:e4:88:fb:24:1f:1d:1e:48:e7:35:bb:43:90:
f5:63:7d:9c:d2:02:65:93:d8:de:cd:ba:9c:7c:fa:c5:60:1e:
16:dc:59:76:8b:dd:cb:59:81:27:84:8d:89:48:5f:93:64:25:
cd:8a:12:dd:5b:29:32:b3:c0:15:c2:7b:3d:6d:ed:49:72:86:
82:4a:22:c8:7d:f1:97:4e:e8:aa:7b:20:73:d0:c5:99:f8:1a:
6d:c5:32:50:63:c8:1d:2d:a5:6f:2e:1a:8f:e6:6f:0e:ee:60:
b9:93:6a:c6:ad:5d:32:82:64:27:36:80:55:7f:63:59:88:d3:
3e:4a:04:84:97:ac:9a:fc:8d:af:d5:5d:f4:15:59:1d:c0:d9:
58:56:88:ce:d6:d2:e7:87:86:aa:61:17:9e:4d:97:32:8d:e9:
d0:70:35:d8:77:06:a7:47:3c:d1:47:ec:bc:5a:31:3e:5d:fb:
0d:74:c3:98:4e:1d:e4:65:c3:61:63:2f:95:84:ae:6a:7a:22:
fc:c8:8c:fe:c9:ba:48:77:51:8a:68:39:7e:07:85:e3:8d:bc:
b3:d3:0e:da:96:91:c7:6d:bc:1d:c7:95:f4:99:70:4e:2b:24:
51:c7:ed:fe:a9:b3:72:ab:21:01:96:7c:f3:bb:aa:55:ab:c7:
be:77:34:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:28:20 2026 by rpki-client