Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
File: rxxaicQTkD_UwrlE07xJezIZYsY.mft (raw, json)
Hash identifier: yboUJgyETyXRaLnuFOv7W+CY11S47kr4/CJsj417QKI=
Subject key identifier: 51:AE:CE:EB:55:60:5A:F4:80:B7:0A:24:F2:FF:B3:9A:E0:77:59:84
Authority key identifier: AF:1C:5A:89:C4:13:90:3F:D4:C2:B9:44:D3:BC:49:7B:32:19:62:C6
Certificate issuer: /CN=af1c5a89c413903fd4c2b944d3bc497b321962c6
Certificate serial: 01A17BF1FB67C43E1751351B63DE06C01660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
Manifest number: 013E
Signing time: Tue 27 Oct 2026 06:00:18 +0000
Manifest this update: Tue 27 Oct 2026 06:00:18 +0000
Manifest next update: Wed 28 Oct 2026 06:00:18 +0000
Files and hashes: 1: a7niK7itDYSAcUcCWKLaVdepvNQ.roa (hash: zEoozmz189Usv1lYQlwpIyRkVXe/3xP6YFoEE3AiyZQ=)
2: rxxaicQTkD_UwrlE07xJezIZYsY.crl (hash: wwF7jv+wCKvPErgLJMuJaxSHkHGi44YJETpyadsD8uI=)
3: tE6JJBGGYfL7pOmd9ScGG-PBKR0.roa (hash: U6b+qcJDlZitVxi4VTwdzLaOqGFdF5aocVEDkGTIcVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f1:fb:67:c4:3e:17:51:35:1b:63:de:06:c0:16:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1c5a89c413903fd4c2b944d3bc497b321962c6
Validity
Not Before: Oct 27 06:00:18 2026 GMT
Not After : Oct 28 06:00:18 2026 GMT
Subject: CN=51aeceeb55605af480b70a24f2ffb39ae0775984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f8:f1:c5:e0:41:70:a3:1e:a1:17:10:02:ec:
2d:90:56:42:aa:b8:27:53:40:d7:d5:2c:5f:f7:b9:
25:21:11:4a:e9:c3:91:c1:2b:34:cc:f9:ea:4c:79:
93:87:e8:87:c1:44:29:bc:91:67:4e:4f:8a:ed:ba:
54:47:40:17:6f:de:66:c7:f5:8f:d8:b2:14:13:63:
60:93:2e:14:56:18:69:d2:b2:6e:3d:9b:62:e9:31:
81:c4:80:65:ee:95:78:83:48:1e:35:c6:10:a8:ba:
d8:10:d7:3c:0a:61:53:9e:1b:a0:6b:8f:0e:ec:5c:
3a:ca:db:be:83:8a:90:54:02:d6:36:d3:4c:2b:04:
c6:29:c6:ec:54:03:22:e7:b0:fb:45:2d:0a:97:1b:
b2:94:89:29:ed:33:7d:ca:07:b5:4c:11:ab:f9:c5:
e1:c7:e1:b4:c0:92:d3:b0:9e:ff:eb:bc:d4:85:ef:
46:dd:ab:6e:f1:9b:a2:9b:a6:c4:42:d6:63:2b:bf:
3d:63:42:e8:00:37:28:d8:8d:d5:ff:2d:53:07:6a:
b6:bd:60:a7:db:bf:20:1b:8e:3b:69:15:fc:04:2b:
ef:98:85:e9:1c:dc:89:88:3c:ea:16:c4:3f:84:2b:
65:a4:9d:c1:33:6a:6e:1a:75:88:cd:86:61:62:bf:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AE:CE:EB:55:60:5A:F4:80:B7:0A:24:F2:FF:B3:9A:E0:77:59:84
X509v3 Authority Key Identifier:
keyid:AF:1C:5A:89:C4:13:90:3F:D4:C2:B9:44:D3:BC:49:7B:32:19:62:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxxaicQTkD_UwrlE07xJezIZYsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/rxxaicQTkD_UwrlE07xJezIZYsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f7:a9:7b:f2:8a:42:4d:71:60:8a:87:39:67:e8:db:bb:8c:
03:5c:68:0f:c6:dc:4d:a4:c3:23:8d:96:87:6e:fa:81:d8:f9:
56:c9:0f:70:90:15:04:c5:99:c0:55:32:dd:fc:fa:c7:cb:36:
d4:9d:26:9c:3c:da:bf:fa:cb:e9:38:ac:8c:4a:f0:93:37:6b:
50:35:b9:fe:b3:5e:b4:2b:c4:fd:ef:08:c6:4a:a1:cb:af:8a:
00:4d:c8:ef:d6:52:85:53:34:c6:42:f7:08:0b:ab:da:b7:84:
8d:cf:e7:40:ad:63:f8:19:59:0f:ed:60:41:44:06:46:66:e4:
a6:14:a2:61:e2:9d:39:0c:68:3e:91:c6:a1:e5:ad:e9:8b:5f:
d8:af:ee:f7:ab:85:83:61:e6:9a:1c:4d:46:e8:0a:1b:5a:bc:
07:01:a7:84:e0:d4:64:33:c1:bb:36:02:fe:83:9a:c7:71:e7:
00:b9:76:3a:82:77:b6:fb:c7:0d:7b:3b:33:2c:dd:08:6b:0f:
1a:bb:db:2d:55:0a:94:24:56:1f:33:7a:4d:ba:7e:cf:20:75:
e2:9d:c5:db:36:a5:4d:e2:e6:a6:88:d2:4c:06:7b:b1:1a:ae:
b6:12:04:fc:a6:5e:63:3a:4e:ba:f5:44:f8:ce:cb:cc:6c:8d:
41:7f:ed:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:55:15 2026 by rpki-client