Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.mft
File: x7xUf6s2vxLz79kfQID5rJxvOEY.mft (raw, json)
Hash identifier: sMAM1EDM83RKm0VFmYNiAwgSUyEs8WybTKBgWgpruj0=
Subject key identifier: 0D:A2:42:C8:61:C4:38:C9:D6:B2:73:DA:47:D5:A9:BE:D9:55:7C:19
Authority key identifier: C7:BC:54:7F:AB:36:BF:12:F3:EF:D9:1F:40:80:F9:AC:9C:6F:38:46
Certificate issuer: /CN=c7bc547fab36bf12f3efd91f4080f9ac9c6f3846
Certificate serial: 01A08BD5C976C69EC195E2FCEB6321513CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7xUf6s2vxLz79kfQID5rJxvOEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.mft
Manifest number: 4B
Signing time: Thu 10 Sep 2026 15:00:38 +0000
Manifest this update: Thu 10 Sep 2026 15:00:38 +0000
Manifest next update: Fri 11 Sep 2026 15:00:38 +0000
Files and hashes: 1: bM71cryNLqDLi-ELPu481fSpeBA.roa (hash: 3Xz3nEMwoJWizfCQTyZZHoKYJqJtKSQZLvpMJUW4vW8=)
2: x7xUf6s2vxLz79kfQID5rJxvOEY.crl (hash: QewDsY/HqND6siECBBTwNtdwgWA6xQlT6iC6vtjH0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7xUf6s2vxLz79kfQID5rJxvOEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:c9:76:c6:9e:c1:95:e2:fc:eb:63:21:51:3c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7bc547fab36bf12f3efd91f4080f9ac9c6f3846
Validity
Not Before: Sep 10 15:00:38 2026 GMT
Not After : Sep 11 15:00:38 2026 GMT
Subject: CN=0da242c861c438c9d6b273da47d5a9bed9557c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a5:e6:c5:54:ef:12:2b:04:36:cb:b7:07:ea:
c4:9b:b2:58:ac:a8:14:51:70:c1:25:b2:dc:9f:82:
46:11:d9:27:6d:08:72:b6:16:33:4e:6d:b3:20:d7:
20:d6:55:80:db:7e:be:f0:27:d6:38:2e:4f:37:27:
7e:a9:fc:31:9e:d7:44:b1:19:b1:48:83:b9:16:24:
1c:90:3c:2c:77:42:0f:99:d7:92:84:dd:bd:9b:97:
83:bf:22:f7:3e:1b:69:35:48:b6:e3:fb:a3:bb:b4:
33:b1:4a:e6:e3:fe:2f:ea:ac:e2:83:8b:89:7f:df:
8c:ca:a9:ef:c4:30:80:18:06:42:fd:39:69:06:8c:
30:f0:c0:26:3f:e3:1d:e9:1e:70:75:0c:83:b0:c9:
c2:0e:13:5b:4f:ab:d3:b4:1e:27:f8:1c:16:b9:df:
91:2e:79:2d:f6:8c:a8:d5:06:23:7e:fa:05:09:35:
b0:16:30:1a:e0:8f:24:35:31:f5:6f:a8:e9:71:6f:
3b:62:02:6b:bd:aa:ee:8d:dc:d2:4f:82:4f:2c:b9:
bf:b6:2a:7f:5f:97:66:0e:7e:67:ea:d5:de:e9:31:
b3:46:56:13:4d:ef:68:c9:fb:47:e5:bb:b4:43:79:
54:81:cc:f1:61:c9:b0:56:de:dc:72:f4:a5:2d:fb:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A2:42:C8:61:C4:38:C9:D6:B2:73:DA:47:D5:A9:BE:D9:55:7C:19
X509v3 Authority Key Identifier:
keyid:C7:BC:54:7F:AB:36:BF:12:F3:EF:D9:1F:40:80:F9:AC:9C:6F:38:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7xUf6s2vxLz79kfQID5rJxvOEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/218c0d-1ffe-46d5-b560-af10683f37f1/1/x7xUf6s2vxLz79kfQID5rJxvOEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:48:49:00:0c:62:49:a8:3a:32:2b:8a:dc:de:a5:64:48:2b:
6e:4f:50:ec:0f:98:37:49:01:a6:f8:e1:b1:c8:9f:b6:b3:ec:
72:33:95:b3:65:e7:80:22:b5:a4:4f:68:a1:a0:f7:a5:e2:fe:
f0:7e:8d:8a:d2:0d:22:91:bb:63:58:e0:94:e0:fa:40:e7:ba:
2d:26:87:d7:0e:4a:19:84:43:43:2f:98:a9:f2:d2:bc:36:7a:
16:aa:8f:25:c4:dc:d1:7b:a3:4a:32:2c:6e:3c:6a:cf:c5:2e:
ec:60:fa:ba:8d:71:58:ca:27:4e:38:5b:74:89:34:9b:39:05:
5f:6a:4b:0d:d4:70:4a:bf:0e:44:16:02:dc:2a:79:9c:16:28:
36:d1:db:db:c5:77:a1:9c:f0:6e:01:fe:24:b9:e5:46:c3:92:
f5:34:99:e0:ee:53:ed:43:bb:82:e1:31:c2:61:4d:e9:de:ab:
cb:f4:26:c7:ff:63:ab:e5:45:8f:d8:cf:6f:d5:97:fe:5c:db:
d8:68:d9:22:0e:e7:6a:d8:0a:a1:08:c2:d8:48:9a:f1:13:41:
37:c8:93:14:69:cc:7e:f6:91:ce:b2:8f:37:ee:29:d9:d9:4d:
2d:a4:ae:a3:23:0f:fe:5d:08:89:e8:fd:f8:43:4d:34:09:40:
c4:19:33:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:38:54 2026 by rpki-client