Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
File: xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json)
Hash identifier: Z6FB1MspN+84LD4NMuN+knUVn8WnVT9icOoc/MCHuTg=
Subject key identifier: 89:7E:58:DC:8F:A1:E8:DE:65:16:DB:7F:CA:84:74:56:07:6A:CA:44
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial: 01A18262E640FF50F3B576D2C512C33CE436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
Manifest number: 19DD
Signing time: Wed 28 Oct 2026 12:01:21 +0000
Manifest this update: Wed 28 Oct 2026 12:01:21 +0000
Manifest next update: Thu 29 Oct 2026 12:01:21 +0000
Files and hashes: 1: D338NBLG4gy0L0rQfLDLBBvijvs.roa (hash: xpSbCbvFe4HKnfPpEx3Bzh3tFz7qEtAGaiCairLokvk=)
2: QPtWU0Le-lGW94gMt-weMxaQnAs.roa (hash: 5vjcWa21i4k2fuEZMcu0bZIC3kY6Cj7yBN5sMrwLc3E=)
3: RdR5cSmbR14gpItKWt96zEaO0yI.roa (hash: NnRSJqZRm+JgqhvDLWWc4r16w/z5e4rD4AECWuZmvio=)
4: twYt6qj-wTyUeYXy66c4-gjVtXw.roa (hash: Wg1hNsEn74fIoOmvEkDupCA55dXbo6Jgxn8PskTnyqM=)
5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: h2hDsJsCtToBh5qPYD8AVKOiCw2Ixgf7kPTaKNzCbl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:62:e6:40:ff:50:f3:b5:76:d2:c5:12:c3:3c:e4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Validity
Not Before: Oct 28 12:01:21 2026 GMT
Not After : Oct 29 12:01:21 2026 GMT
Subject: CN=897e58dc8fa1e8de6516db7fca847456076aca44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5d:d2:31:6d:b1:44:08:b4:0a:78:9e:a0:dd:
97:58:58:22:75:38:89:a1:a1:3b:ae:d5:c7:3f:74:
fa:5a:33:87:62:d2:c6:63:fa:04:f1:38:83:87:18:
dd:0c:9b:e0:c9:e6:6e:53:f4:8f:a3:c9:be:6b:b7:
5c:c3:51:93:5d:23:95:ca:da:a6:14:28:e6:cf:98:
41:b9:b8:e9:c4:0d:e5:a8:d0:8a:41:ad:59:86:82:
f7:02:9f:13:6c:19:64:fb:78:59:4f:f0:24:1f:51:
08:86:b2:8a:26:58:d8:56:fe:57:87:82:60:59:47:
1f:17:c4:95:5b:96:e7:55:02:67:44:87:9a:27:ae:
a9:6e:d5:21:ca:5a:45:ac:f8:e5:eb:75:70:60:80:
2f:e5:45:28:09:04:86:8a:52:c2:bf:ca:b4:d2:64:
9f:32:6d:1b:1e:71:6a:3d:6d:dd:5d:aa:79:66:7f:
75:6e:b1:fb:ee:0a:47:ca:96:5f:5c:74:93:f8:39:
88:80:24:3e:2c:6e:0a:1f:8e:ef:32:77:76:66:f2:
4b:46:4c:37:57:6c:7e:cf:13:2b:63:cf:b8:2f:1b:
cf:6e:18:9a:75:0a:02:08:5c:cd:15:1e:e3:76:07:
54:f8:f5:a9:79:c1:58:ba:73:1f:3c:71:fe:66:10:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7E:58:DC:8F:A1:E8:DE:65:16:DB:7F:CA:84:74:56:07:6A:CA:44
X509v3 Authority Key Identifier:
keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c9:6e:97:af:2a:d4:3b:9d:17:c4:f0:8a:6d:75:5c:8a:1c:
7b:1b:ce:39:b1:ed:4e:d7:7e:43:7e:ec:64:5d:a2:a4:fb:84:
0a:f2:6f:f9:b3:07:c8:58:1c:9f:0f:74:0d:17:a7:8c:98:d1:
1d:74:7a:86:60:6e:5c:d7:02:1f:e1:17:99:e8:05:a8:f1:be:
8b:db:3a:eb:03:67:e7:c5:7e:f6:11:56:ac:be:07:00:3f:ba:
48:50:9e:9d:ce:66:bd:a3:a3:fe:e0:89:18:73:47:94:15:c5:
ca:49:83:53:cf:cd:7a:26:36:ad:b5:a0:24:0b:97:e9:bf:8a:
8f:de:e3:0a:ec:79:38:a7:9a:9c:53:d5:2d:28:47:c9:1f:0c:
63:66:f3:20:32:70:bd:30:c8:05:5d:ae:5f:6b:9a:ff:26:4f:
db:66:e5:67:85:f4:0a:03:ff:bb:45:39:bc:49:a6:8a:f2:e2:
75:c2:83:e5:5f:58:25:40:7f:d0:0f:0a:c4:7a:67:0f:d4:40:
77:64:cf:5a:d6:00:f5:cf:02:30:21:e2:8d:2d:17:15:b4:33:
e6:11:9a:02:c2:43:be:ae:1f:59:98:69:1b:81:b6:c8:74:8b:
ab:2f:83:d8:98:39:01:25:f3:b1:33:87:1f:db:c9:1c:06:0d:
2e:f4:00:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:07:37 2026 by rpki-client