Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File: x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier: hA2jKYQDwILLa180Q2B6mQowGzUIzIyGUIz3l+3MrD0=
Subject key identifier: 7A:2A:36:F6:52:5E:A0:50:AD:48:A5:98:DC:E4:3E:4B:25:A0:8B:B4
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 01A12A9F94C7C06D12218FAF9062334CC05E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number: 16E3
Signing time: Sun 11 Oct 2026 11:01:03 +0000
Manifest this update: Sun 11 Oct 2026 11:01:03 +0000
Manifest next update: Mon 12 Oct 2026 11:01:03 +0000
Files and hashes: 1: VVO2x6L7LFTZsVY_zaZrcjz-CLU.roa (hash: mrQRCF7HAxobAPy4OykpZkTQroOOHVdF+aZo6ajUous=)
2: XSKluvUTTgVd2egTpJ08l-exvKw.roa (hash: k4WvTC/++ULE/2LzyeolM06KPsDEfc4ZDC8+guSUNtQ=)
3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: 9gxSt+xavBl3thuWF3Rr6T26J5m+aL3e8tMbA98kuOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:9f:94:c7:c0:6d:12:21:8f:af:90:62:33:4c:c0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Oct 11 11:01:03 2026 GMT
Not After : Oct 12 11:01:03 2026 GMT
Subject: CN=7a2a36f6525ea050ad48a598dce43e4b25a08bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:f8:79:4a:5d:ab:15:dc:41:c4:c9:8a:f0:
97:0b:3f:1d:f8:5a:13:42:31:a4:b3:10:ed:27:e2:
c9:59:c1:2b:4f:7e:a8:9e:7b:b7:15:74:7a:c8:b9:
53:08:69:ad:4a:20:5b:87:e4:55:dd:e9:e1:47:d1:
33:71:01:2c:ca:e9:4b:dc:7e:2c:08:eb:cf:df:cc:
24:a6:77:7c:0f:03:32:a5:80:de:d1:16:c9:3e:fa:
91:7e:87:7e:46:f6:88:27:0f:a1:30:00:20:37:ae:
61:3f:ff:20:f2:0d:4b:e5:54:cd:98:37:34:8d:99:
69:6a:0d:39:ba:bc:c4:e7:be:49:de:46:89:a4:1c:
5c:e8:49:4b:c7:75:d0:37:22:f4:6b:8f:22:c9:9d:
7e:f9:e1:7e:14:16:2a:fb:37:b3:74:30:c2:98:24:
f9:a6:f0:1e:3d:ef:81:90:41:14:6a:d4:50:0e:27:
21:fc:8c:b1:3c:3b:ec:20:31:54:32:1c:4c:cb:22:
83:5a:18:11:f1:62:de:60:71:cf:c0:04:b6:7c:cc:
ac:a3:43:3a:4b:49:61:a0:a0:f4:f5:e8:0f:be:08:
a6:03:8d:85:ba:72:79:11:e6:9b:af:08:68:fe:b6:
2a:df:12:39:fa:c3:ce:1d:a3:35:6c:34:ea:4f:45:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2A:36:F6:52:5E:A0:50:AD:48:A5:98:DC:E4:3E:4B:25:A0:8B:B4
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7c:84:18:c9:58:d7:0c:7b:19:d4:f6:b7:16:eb:3a:f5:ed:
1b:7a:63:04:99:51:b0:5f:2c:9c:e9:1a:d8:6e:67:1d:86:18:
3a:78:ee:cf:1b:af:8c:62:61:47:1f:2c:88:b2:39:75:32:9b:
a0:bf:af:f1:73:4f:8a:40:61:2a:ba:ec:fd:1e:d3:5f:5e:1f:
f4:70:03:96:31:83:20:13:0e:b6:5a:7e:1f:bb:2e:43:b7:fd:
1a:72:c2:ad:30:68:2d:ab:85:93:a1:69:97:00:5a:05:9e:7c:
50:b9:9b:25:8c:f8:12:48:c0:c1:9e:14:35:5e:f8:5f:56:94:
f1:de:9f:60:e5:9c:ec:7a:2d:f9:6a:f1:e3:03:f9:e5:b1:2a:
9a:e3:bd:0b:a5:83:38:4d:3a:38:a2:d5:87:8b:ae:4c:10:57:
e5:30:cc:9e:2e:c3:08:98:ae:b3:16:28:a3:e1:fe:aa:8c:bc:
75:1b:be:eb:02:e8:9b:af:86:3d:2b:60:60:ab:b1:be:67:69:
88:5c:29:ff:ec:e5:52:be:05:24:0e:f6:4a:d2:ce:c5:f8:f0:
a1:fe:ed:c0:5b:82:a9:4b:86:2e:61:1b:81:59:83:2a:bc:c7:
10:1a:50:3d:77:df:c2:7f:4a:24:b6:26:05:b7:00:a9:53:bd:
0a:c1:c9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:10:36 2026 by rpki-client