Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File: xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier: cu8z62vZvWZctahagm+uN8gtM0lF3uiEaTpnUJT/xLw=
Subject key identifier: B6:98:C0:E3:69:A5:35:E0:D3:CA:E2:FC:0B:81:7B:49:83:F6:57:1B
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 01A1841A2C900BFA4ADEB20CBF2EE53A1BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number: 0BC1
Signing time: Wed 28 Oct 2026 20:01:10 +0000
Manifest this update: Wed 28 Oct 2026 20:01:10 +0000
Manifest next update: Thu 29 Oct 2026 20:01:10 +0000
Files and hashes: 1: DXdb0QbgjHMGHimqfVTZInAkH0I.roa (hash: zClF7sUyyb6keJxNkbEQRGoa69WKNSmQnfjqa4nnCv8=)
2: rDKGPxVegdVjKSh5RnICAFOVm5s.roa (hash: Xcgmgg/GuSeVcsd6rM/OBeKREsZ93Yvuqbvwr0v7xYc=)
3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: yF13jDpYyboDF8OjHydzkE2qwT9uGL0Bis9qlt0sTBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:1a:2c:90:0b:fa:4a:de:b2:0c:bf:2e:e5:3a:1b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Oct 28 20:01:10 2026 GMT
Not After : Oct 29 20:01:10 2026 GMT
Subject: CN=b698c0e369a535e0d3cae2fc0b817b4983f6571b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:87:69:8c:1d:b0:80:4c:42:0d:5a:cb:99:
bb:6e:02:fb:02:cd:b3:e7:f0:d7:5b:29:b7:24:f5:
e8:f6:0f:2e:6d:3f:c1:a2:29:47:91:ca:e9:2a:d1:
f9:e6:bb:8a:cb:b1:3c:65:60:5a:57:55:46:81:5e:
7f:23:cc:57:ca:2b:51:d1:8c:fd:4d:98:ee:63:99:
3e:53:a0:e8:60:67:a3:13:54:b8:45:0c:3f:a3:09:
3f:71:47:e6:3c:c3:38:ff:82:4c:1e:7d:e4:a2:35:
2a:1e:43:3a:1c:8e:16:74:24:52:f9:23:d2:24:a0:
d7:4f:94:73:04:bb:53:3d:fb:f5:f5:ba:75:05:d9:
ae:f8:60:c8:f5:fa:fa:c1:36:78:fe:96:31:48:b9:
3b:3f:4e:37:65:7d:6d:4b:aa:47:be:57:0c:0e:d8:
31:d9:83:b0:e3:2e:81:55:83:91:7d:0a:f0:a6:c5:
a5:69:fa:87:d4:df:53:4e:88:a6:21:4a:b0:6d:84:
2b:b2:40:d7:c0:c5:58:e0:aa:88:e2:47:7e:9e:6f:
22:94:fc:0c:c6:80:39:8a:8a:ca:55:97:2a:d2:d7:
de:a1:ea:0e:83:aa:36:3b:6d:78:96:23:e5:17:7b:
8f:ec:36:6e:e5:1b:ad:40:b0:cd:de:c0:81:3c:2e:
46:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:98:C0:E3:69:A5:35:E0:D3:CA:E2:FC:0B:81:7B:49:83:F6:57:1B
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c3:00:62:07:c2:2f:11:10:14:b1:61:fa:61:4f:ff:cd:ac:
39:0f:9a:0d:f1:45:4b:9b:4d:f5:7a:69:76:fb:b0:6a:ee:d6:
86:61:16:10:99:26:58:77:01:fc:52:c3:c9:3a:dc:6a:b6:fd:
9d:34:bb:3f:1b:54:f6:ef:17:8d:db:6d:cf:9e:3f:10:c2:46:
40:56:60:02:b1:65:8c:52:7e:9c:fd:7a:75:09:b9:4c:8d:19:
a9:88:06:3f:51:f8:f5:a9:2a:e2:14:c8:38:e7:b8:78:61:31:
d3:0b:8a:8b:df:2c:48:a2:6c:a4:d9:0b:4c:bc:b9:3f:88:f9:
11:a0:72:61:f3:30:47:da:cb:a2:10:79:6a:66:bd:1c:f0:e8:
92:27:70:5f:9a:75:db:99:ee:a8:c2:87:b0:2d:79:14:a0:00:
0d:12:a8:99:dc:6f:5d:ea:57:67:74:9d:b5:40:55:f7:02:be:
3c:09:16:c3:6c:9f:8f:8b:f0:6a:56:16:cd:08:7c:ef:5b:60:
de:62:71:76:79:5f:0a:90:ed:fc:b8:0a:be:ec:07:d6:5e:98:
38:c5:13:d7:b3:91:70:63:8f:e3:20:a5:8b:5b:95:41:2b:11:
f1:7b:b1:29:04:a9:9c:e9:62:f1:74:62:08:54:b9:22:ba:ce:
46:94:7d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:50:32 2026 by rpki-client