Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json)
Hash identifier: b+Rr4P26kzwLoygfYCVh8jDMeFyuoeBFEpKd6qMgJrU=
Subject key identifier: 4B:2E:E1:20:94:37:B7:88:4B:5A:A7:0D:2A:8A:2F:01:0F:66:D2:53
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 01A01FE7F4A30573C32604FF5D8C76D1CD8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
Manifest number: 1A11
Signing time: Thu 20 Aug 2026 16:01:30 +0000
Manifest this update: Thu 20 Aug 2026 16:01:30 +0000
Manifest next update: Fri 21 Aug 2026 16:01:30 +0000
Files and hashes: 1: 1-8oUTWUAuLAV-0eAuYQDr-5uUjg.roa (hash: j/xhG+Ho5blnFZVSciVE3ALUT+d6u+iQqAAWN+Se5oY=)
2: MHchnxV8uLs8pcvJTcOPLL-Bbbc.roa (hash: vPV8+4NZsXrCq8XvABi4c8I9ILlUiPMubO8YOy17XOc=)
3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: 5VFoCsHSoaUCdFMp4vnEfisVB8C3fD/Bap8OxNyv/Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:e7:f4:a3:05:73:c3:26:04:ff:5d:8c:76:d1:cd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Aug 20 16:01:30 2026 GMT
Not After : Aug 21 16:01:30 2026 GMT
Subject: CN=4b2ee1209437b7884b5aa70d2a8a2f010f66d253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:55:11:ac:f2:e6:11:b8:2f:be:1b:0b:50:c4:
14:3f:c3:7b:83:45:cb:ce:d4:39:8c:f8:23:b0:48:
48:f6:f5:b6:f8:c7:8e:6d:2a:94:16:6c:94:ee:4d:
2a:a4:42:b0:63:ab:6d:7f:11:fa:9e:bb:b1:bd:7c:
85:e7:68:71:c1:94:13:e9:fa:7d:03:c6:bb:4d:26:
80:f6:86:2e:8d:21:b0:0d:a1:3e:1e:bc:48:d1:b2:
7e:e1:a5:b3:8c:4a:f6:a5:5d:26:b0:5b:98:c8:9b:
d3:ea:3d:e8:c3:a1:62:a6:8f:d0:18:09:fb:26:99:
14:94:b3:37:97:a7:22:51:fc:63:31:1b:37:b8:6c:
e2:04:b4:79:64:e7:99:a4:35:f9:48:05:ed:76:d4:
e1:96:ec:f1:24:0a:f2:6e:70:ac:cb:50:d3:c5:17:
c9:a8:2e:b6:c8:71:42:f7:de:94:52:39:31:ce:32:
a3:58:ff:f7:35:04:46:8a:f3:4e:87:f1:87:30:fb:
13:2d:66:9c:a3:50:08:89:d0:7d:d2:64:d5:e0:91:
e5:0d:04:b0:74:3a:00:77:9d:17:a2:ab:46:3a:88:
44:f6:ca:fe:7e:3d:55:2a:ea:0e:eb:71:0a:e8:cd:
1b:d0:a1:5e:4e:d1:d9:6d:bd:e9:1a:90:78:ff:7b:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2E:E1:20:94:37:B7:88:4B:5A:A7:0D:2A:8A:2F:01:0F:66:D2:53
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:20:bf:a9:1a:82:74:b1:14:2f:da:14:e5:32:8d:a3:fa:56:
a4:2c:87:c4:94:aa:7e:6a:75:2f:59:02:a5:cb:da:b2:81:3e:
37:26:b5:f1:15:05:ae:cb:6e:7f:11:19:bd:a9:71:29:bf:b9:
c8:cb:b2:a4:88:4e:00:a2:5f:1a:77:ea:73:b6:96:b3:03:93:
fc:9b:66:b9:02:40:6f:63:40:a7:72:b5:b4:91:28:c7:28:cd:
62:9f:fa:95:d1:49:4f:9c:e6:71:63:56:48:24:9f:2d:07:fa:
88:10:b0:0c:37:20:41:21:6b:1d:e6:2a:09:36:d9:5e:0b:b2:
70:87:f4:4e:32:de:27:59:7e:8a:0c:ea:a6:25:8e:98:9c:85:
c3:8e:c7:08:f1:60:4c:a8:7f:2b:20:d0:1a:5a:ac:51:3d:34:
fa:d7:0c:dd:95:e2:32:9b:bf:a1:df:e4:21:fc:a3:39:b3:b4:
14:71:16:1c:6c:5c:84:45:ef:75:96:d9:7e:90:65:f2:61:2c:
0e:1a:f7:24:65:65:41:b6:28:a8:51:ac:89:3a:2c:08:f8:1a:
34:ad:cb:fe:5a:76:5d:bd:0d:cd:b2:07:f7:da:dc:59:da:11:
15:13:05:d6:10:8b:2b:68:34:22:c9:cc:c7:1e:a9:70:68:a2:
5a:83:7d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:18 2026 by rpki-client