Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json)
Hash identifier: 3N8p2gw4P7w0XhZvtgt5ghdPVsrYY8SJ7W3Dz2RxxOI=
Subject key identifier: 08:60:A0:A0:47:89:70:40:77:E0:72:2D:5C:44:69:C6:CB:AE:9E:AE
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 01A1133C6F60504F8D68F42486DC22C22797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
Manifest number: 1A8F
Signing time: Tue 06 Oct 2026 22:01:30 +0000
Manifest this update: Tue 06 Oct 2026 22:01:30 +0000
Manifest next update: Wed 07 Oct 2026 22:01:30 +0000
Files and hashes: 1: 1-8oUTWUAuLAV-0eAuYQDr-5uUjg.roa (hash: j/xhG+Ho5blnFZVSciVE3ALUT+d6u+iQqAAWN+Se5oY=)
2: MHchnxV8uLs8pcvJTcOPLL-Bbbc.roa (hash: vPV8+4NZsXrCq8XvABi4c8I9ILlUiPMubO8YOy17XOc=)
3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: Hry0iVKavrtIvtJ5wtJISAruKfWUlj9fwctp5QUxdZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:3c:6f:60:50:4f:8d:68:f4:24:86:dc:22:c2:27:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Oct 6 22:01:30 2026 GMT
Not After : Oct 7 22:01:30 2026 GMT
Subject: CN=0860a0a04789704077e0722d5c4469c6cbae9eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:c2:82:00:8e:39:f6:c5:dc:b7:66:f6:8a:
bc:93:e4:5e:63:98:fe:50:60:57:95:45:bf:33:55:
3b:c2:de:c3:f6:af:95:6f:6a:d3:d5:aa:dc:90:85:
92:2b:61:f7:92:aa:42:8a:97:32:85:fd:74:e2:2d:
93:99:6e:0e:04:39:d8:58:df:f8:75:b3:5a:26:a2:
31:71:de:e8:b2:6e:48:35:f5:98:f0:aa:98:3c:96:
af:6a:d7:6d:2c:85:0e:ea:2e:73:53:c1:ba:08:f1:
d4:7d:85:89:f7:83:37:cc:25:e1:14:76:bc:28:22:
32:da:4a:c8:17:04:ac:32:29:2f:b2:63:1d:a4:7b:
72:50:7b:33:1c:2a:01:3b:ae:0d:b0:58:fb:14:43:
de:ed:dc:cc:cd:0a:b9:6d:47:5e:fd:94:4b:7f:7a:
f9:4f:cc:0c:a3:3e:b9:9f:9b:fe:f9:cc:c3:77:b4:
b5:6c:15:94:ee:3a:4c:d8:be:50:f7:24:df:2b:d8:
3d:f8:34:8b:a4:44:e3:a0:70:89:26:71:0a:df:6a:
32:74:b6:97:9d:d4:15:82:56:2a:72:b5:77:4c:1e:
aa:5e:34:21:67:6c:8d:a9:b9:1f:fa:e6:0b:9e:10:
3d:0e:6d:72:d8:0f:c8:62:fe:5e:63:71:54:57:32:
59:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:60:A0:A0:47:89:70:40:77:E0:72:2D:5C:44:69:C6:CB:AE:9E:AE
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:30:9d:3b:9d:8e:0f:19:1d:be:0b:44:f9:56:f9:26:da:0e:
ba:ce:40:2f:78:36:6d:9c:a8:69:e4:d5:fd:5e:f4:83:11:04:
6b:ee:e4:ea:48:55:ee:7f:d9:de:fe:34:85:fc:ad:c8:99:17:
36:7a:4d:2c:36:66:88:2f:a8:ba:db:b3:4b:1b:6e:13:62:bd:
3b:89:1e:27:34:cd:28:57:61:78:90:e8:00:64:11:82:80:2c:
3d:79:7f:fa:36:38:0f:2f:63:d9:65:38:85:74:9e:51:70:be:
95:25:65:8e:34:44:37:bb:ee:88:59:ee:f5:a8:b2:21:00:3e:
ef:1e:e1:af:9e:11:b4:a2:50:e9:e3:d8:4d:cf:20:66:40:7d:
43:c0:11:87:70:ec:55:9b:52:c6:ab:30:e7:84:67:de:6a:74:
6b:b1:4e:f5:12:f5:02:f4:74:17:be:81:b9:c9:ef:6a:9f:39:
8a:35:e4:4a:d0:57:2d:99:36:d6:11:2a:54:1c:96:14:5f:20:
66:74:3a:9e:40:c5:b6:b5:b8:d5:f8:7c:5f:9b:dd:81:4d:a7:
d5:9e:a3:02:ea:a3:6b:66:bd:84:6b:72:3a:e7:a3:e0:fe:9b:
83:78:cb:54:de:45:af:9f:48:7c:01:6c:0a:ef:28:f3:77:e4:
93:e3:a2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:02:17 2026 by rpki-client