Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.mft
File: x7xUf6s2vxLz79kfQID5rJxvOEY.mft (raw, json)
Hash identifier: UnA6zwJ3sr1tIrTch/8YHZHKehiXDJiR91kARCQYA/g=
Subject key identifier: 89:1D:E3:AF:CE:BE:CD:9C:C1:E1:96:F3:30:1A:F8:B4:6A:3A:32:CB
Authority key identifier: C7:BC:54:7F:AB:36:BF:12:F3:EF:D9:1F:40:80:F9:AC:9C:6F:38:46
Certificate issuer: /CN=c7bc547fab36bf12f3efd91f4080f9ac9c6f3846
Certificate serial: 01A18E9D441C0791998011D14293BCA66D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7xUf6s2vxLz79kfQID5rJxvOEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.mft
Manifest number: D1
Signing time: Fri 30 Oct 2026 21:00:33 +0000
Manifest this update: Fri 30 Oct 2026 21:00:33 +0000
Manifest next update: Sat 31 Oct 2026 21:00:33 +0000
Files and hashes: 1: bM71cryNLqDLi-ELPu481fSpeBA.roa (hash: 3Xz3nEMwoJWizfCQTyZZHoKYJqJtKSQZLvpMJUW4vW8=)
2: x7xUf6s2vxLz79kfQID5rJxvOEY.crl (hash: UpfDzDy/PAv7rPWPRCE/0vd6WHuTlaic7aHJf74MnLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7xUf6s2vxLz79kfQID5rJxvOEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:9d:44:1c:07:91:99:80:11:d1:42:93:bc:a6:6d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7bc547fab36bf12f3efd91f4080f9ac9c6f3846
Validity
Not Before: Oct 30 21:00:33 2026 GMT
Not After : Oct 31 21:00:33 2026 GMT
Subject: CN=891de3afcebecd9cc1e196f3301af8b46a3a32cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:5b:a7:ae:70:9e:18:9b:bd:a2:d2:4e:1c:
8e:c2:06:c5:43:eb:b1:34:36:98:8c:d3:73:f7:38:
75:c8:dc:a6:e8:cf:a4:c3:e8:05:94:b3:c1:d9:ed:
e2:8d:fe:91:c9:36:57:6e:87:20:33:66:f5:b5:61:
ba:a8:a8:35:24:db:35:6b:6a:6b:2e:8a:98:3a:18:
ca:9e:6c:ff:c7:f6:77:e5:af:98:7f:dc:36:6a:6d:
ef:88:f0:02:f5:e3:16:16:7c:62:e0:59:6c:34:80:
d2:09:4d:fa:ad:d3:5c:e5:da:8e:1a:6d:00:3f:fe:
b4:51:33:94:27:72:9d:ec:9b:1d:96:d9:33:91:76:
ff:7a:24:7d:39:e9:5f:ad:6d:34:26:97:12:a6:3d:
d7:b2:bb:70:e9:21:b5:35:8f:0e:3a:74:51:bc:b5:
7a:36:5e:49:0e:a5:72:3b:61:4d:21:b9:94:7b:e2:
8f:3b:f3:a0:d6:e5:96:bf:d9:6b:52:5b:3b:14:6a:
e7:93:99:91:3e:a5:d4:71:f7:8b:34:78:eb:6b:04:
fd:47:e4:63:0a:5c:76:d2:52:93:09:2e:7c:bc:bf:
30:c2:e9:5b:57:9e:24:40:82:c4:2b:ae:13:aa:e7:
9b:fc:00:be:07:6a:fd:84:b5:e8:21:77:cf:45:e0:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1D:E3:AF:CE:BE:CD:9C:C1:E1:96:F3:30:1A:F8:B4:6A:3A:32:CB
X509v3 Authority Key Identifier:
keyid:C7:BC:54:7F:AB:36:BF:12:F3:EF:D9:1F:40:80:F9:AC:9C:6F:38:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7xUf6s2vxLz79kfQID5rJxvOEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:9c:12:40:8a:7e:1d:ac:0e:90:f4:ba:d6:b5:18:1d:29:e6:
34:44:af:43:61:aa:f4:44:97:e3:6f:7f:75:3a:cb:0b:1e:ae:
5e:10:dc:d3:a1:5f:1a:1b:ec:26:24:b6:14:09:a0:3d:25:c1:
e6:63:68:88:53:66:49:c7:d3:be:15:d6:1c:a6:f0:31:b2:fd:
79:1b:1f:15:fb:b3:f6:28:9c:1c:dd:91:62:3a:fc:be:7e:09:
bd:35:eb:3c:0c:95:a0:6c:6e:e9:71:ed:6f:9d:68:11:a2:b2:
7c:e2:b9:29:56:ef:d1:c5:59:c9:16:15:8c:a9:a2:47:65:53:
5a:8f:c1:4d:6c:1b:f0:26:92:9a:cc:74:93:ea:93:49:46:bd:
49:2d:68:2f:52:0b:68:ad:25:77:ff:8c:97:cb:8f:2d:d3:5a:
d5:b9:50:c7:e6:e2:fa:52:af:41:d7:89:cc:b8:7a:f0:2d:65:
c0:fb:96:9c:5d:4a:fc:be:4c:4a:52:d1:3e:24:5d:09:89:2c:
94:47:05:b0:96:77:44:6d:33:c5:5f:23:61:89:76:97:74:7e:
54:9a:65:76:dc:1b:b8:c9:16:24:9b:ee:4b:b1:c8:e3:82:a8:
5c:18:13:48:63:2f:cd:e2:c3:47:a2:5f:98:52:2b:c6:73:24:
4e:1a:72:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:19:06 2026 by rpki-client