Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
File: _X0csRSU6ziY8Q09Y1vnXxay3FE.mft (raw, json)
Hash identifier: 1hrP9AkicLxoLT9vCbu62qu15fPLEGETViajHLfaCIY=
Subject key identifier: 73:EA:EB:4A:6D:A1:5A:B4:7B:75:BC:E2:49:A5:FA:19:EB:AF:BC:42
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial: 01A18307CB6D819391518509B4C58B757A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
Manifest number: 110C
Signing time: Wed 28 Oct 2026 15:01:28 +0000
Manifest this update: Wed 28 Oct 2026 15:01:28 +0000
Manifest next update: Thu 29 Oct 2026 15:01:28 +0000
Files and hashes: 1: E82B-w4jJKhyGgYx3Ej9sCBHvb4.roa (hash: A+TYWIOmRpCeA175k18MhvZXgytX5Jk9nQ0FQ6VBaqA=)
2: Q4zQF0crGItA_1w0I9xQ7hGAgWQ.roa (hash: JfuU3qW2LSn3VZ4RrrVe6pLBVqp+kUuKYjX2iO0ocCI=)
3: _X0csRSU6ziY8Q09Y1vnXxay3FE.crl (hash: bsXklORHzTfPeNc/SV1cWEz5Q+GOxr0B7fznXUuc63c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:cb:6d:81:93:91:51:85:09:b4:c5:8b:75:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Validity
Not Before: Oct 28 15:01:28 2026 GMT
Not After : Oct 29 15:01:28 2026 GMT
Subject: CN=73eaeb4a6da15ab47b75bce249a5fa19ebafbc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:29:ab:6e:3a:38:7d:40:78:42:86:ae:1a:
c6:6f:b2:57:27:a5:fb:fc:a3:25:9e:a1:8e:6d:e3:
39:71:83:c6:df:eb:a3:c7:cd:c7:d4:eb:f4:1a:6c:
7e:a3:08:37:08:d6:cb:4b:23:be:26:9f:b7:03:ff:
d4:ff:0b:66:91:33:33:58:bb:aa:48:e9:1f:0b:7a:
bd:6e:66:91:da:f2:12:87:59:69:a5:90:c8:4a:3a:
62:9d:1d:b9:0d:89:4e:da:c8:87:ac:4a:80:69:50:
ab:8c:80:05:e8:3a:27:e2:6b:8a:60:f7:9d:27:71:
b6:2a:54:1e:dc:4e:95:73:12:01:d2:9e:e5:8c:9c:
07:a1:f8:6f:31:29:9b:94:da:a7:59:58:8c:e1:18:
e6:45:a1:72:3d:c9:d4:a6:07:22:1e:df:95:e3:32:
d4:fd:07:fe:12:46:ed:53:17:ff:69:93:7d:13:de:
24:c6:24:28:e1:70:73:09:2b:18:da:7a:b7:63:f3:
01:06:76:cf:86:79:95:19:ca:66:3d:73:69:a8:4f:
8c:82:ed:f2:a3:23:9d:75:40:ec:71:5c:af:60:ee:
cb:a1:89:88:03:44:74:40:d6:b0:af:f7:8f:42:e9:
11:98:a4:71:3b:db:10:d8:b0:c1:1b:bd:38:ae:b8:
a5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EA:EB:4A:6D:A1:5A:B4:7B:75:BC:E2:49:A5:FA:19:EB:AF:BC:42
X509v3 Authority Key Identifier:
keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:11:9a:af:5d:08:f3:ad:57:65:b8:82:8c:d0:13:1e:b4:8b:
ed:a7:38:a3:3d:6f:a3:26:eb:0e:d7:31:80:07:7b:ec:20:89:
69:c4:40:7c:df:bb:b7:99:d8:17:87:40:e0:3e:89:dc:86:eb:
85:15:d9:d1:91:c3:db:8f:d7:a4:f7:5a:20:b2:c9:f5:d2:5b:
56:d5:9d:f5:4e:6b:b5:29:ec:ad:03:35:56:f9:8a:52:32:52:
2b:ab:87:d1:49:c2:ff:04:1e:ec:02:a7:dc:42:aa:77:a1:51:
bf:2f:ee:06:0a:27:92:d2:23:c4:da:f4:f2:90:5a:91:51:86:
ba:53:29:b5:13:3f:c5:89:60:7c:4e:cf:2b:fd:fe:8a:41:fa:
01:5d:3a:70:61:14:7e:e2:27:92:39:1f:88:19:56:f7:1f:e0:
2b:a7:ca:fe:a4:08:90:75:d6:d3:7a:10:13:ba:45:f9:8e:ab:
a1:ad:8c:c3:d6:b6:73:98:93:bf:45:67:4a:4c:d3:21:a0:42:
b0:de:bd:25:2d:41:6a:66:e0:31:f1:ac:c4:32:0d:69:3c:41:
9b:9f:81:e5:60:43:01:f5:b8:38:bb:0d:95:7d:bd:ff:31:b4:
59:1a:26:a7:15:86:97:03:fc:8f:cf:eb:49:46:79:3e:e1:65:
93:aa:d3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:21:58 2026 by rpki-client