Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
File: x2oNsIMDONLSlh5Mj_sKtaA__l8.mft (raw, json)
Hash identifier: fotSmsa3tYWk9xun3OB6Yv75EilTy9dCSC9C6ukbmD8=
Subject key identifier: 4B:53:CA:3E:9B:4C:E4:D6:D8:48:87:05:1B:99:75:3F:2D:2E:CB:E8
Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Certificate issuer: /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Certificate serial: 01A17C6006B18FE40E879945A961307FB435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
Manifest number: 1550
Signing time: Tue 27 Oct 2026 08:00:30 +0000
Manifest this update: Tue 27 Oct 2026 08:00:30 +0000
Manifest next update: Wed 28 Oct 2026 08:00:30 +0000
Files and hashes: 1: c50lvA8Sv1SylXjp89qLN1R1K0Q.roa (hash: H5BoXSVjiAe/7XcTXvyS3Sc4Z7PHgmQ7yK1Eha9K6xk=)
2: x2oNsIMDONLSlh5Mj_sKtaA__l8.crl (hash: +KHIhRhEh0b0ILrhLoIZfrs3M5nJ+iMsbocdfru8ZG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:06:b1:8f:e4:0e:87:99:45:a9:61:30:7f:b4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Validity
Not Before: Oct 27 08:00:30 2026 GMT
Not After : Oct 28 08:00:30 2026 GMT
Subject: CN=4b53ca3e9b4ce4d6d84887051b99753f2d2ecbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:c8:96:f7:a4:26:2c:87:3b:8b:18:c4:f6:
16:7a:3f:4a:3c:bb:43:83:fe:0b:a8:64:07:12:35:
27:1b:ad:4f:ca:a4:75:39:23:80:0c:77:cc:e1:0b:
e2:af:f8:67:90:99:75:e2:4b:d7:c7:b5:a4:4e:0c:
39:e6:17:40:fe:7d:43:26:cb:6c:fd:74:0a:18:f5:
1e:d1:62:6d:f8:60:3e:92:92:5d:e6:f5:84:5b:3b:
e4:52:7d:d3:64:2b:06:6b:08:3f:23:35:2b:54:87:
62:61:c7:17:0d:ee:fc:3d:05:6f:2a:95:8d:51:03:
5d:c7:1f:1a:ca:d2:57:21:55:8d:8d:db:87:aa:d4:
a8:dd:ed:99:a8:8a:3e:eb:ef:74:b9:dc:ca:77:4f:
58:ad:78:aa:bb:25:b1:24:c0:13:c0:41:7d:99:fc:
ad:40:ac:4b:0b:2a:4b:ac:75:41:46:dd:da:43:e4:
af:52:7c:03:06:23:87:54:44:bf:58:79:46:d3:96:
75:de:92:25:ed:d6:01:4a:2d:f8:17:d0:74:db:64:
e9:d9:3c:d9:6c:e2:11:b0:3f:87:6e:48:f1:db:ca:
47:11:f0:f7:cc:e6:3c:0e:1a:1c:d9:7c:e2:87:11:
8e:d2:f5:b4:4c:97:9c:41:1e:3a:44:69:2a:3b:a6:
c8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:53:CA:3E:9B:4C:E4:D6:D8:48:87:05:1B:99:75:3F:2D:2E:CB:E8
X509v3 Authority Key Identifier:
keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:00:80:ca:c2:06:b4:b3:12:e9:57:a6:53:a7:7a:a5:89:a8:
45:24:e8:bc:6c:5e:51:a5:20:0f:1a:1d:ec:3e:2d:cd:14:69:
5d:54:88:40:be:b4:99:55:a8:f6:a1:53:04:7f:5a:d7:e8:b8:
ab:90:1a:72:73:d9:8f:61:ca:eb:b8:54:aa:ff:8a:9b:b9:2f:
04:51:16:17:cc:43:62:c2:1d:96:02:1c:a3:8c:ad:be:4a:11:
b5:c1:3c:73:26:dd:50:a5:c0:79:8b:f3:c5:d7:b4:98:d3:e3:
61:20:84:39:d6:ca:2e:0c:99:1c:5a:bb:42:1a:bc:13:b3:65:
1a:8f:2d:c7:84:80:e5:49:cf:1c:cd:0e:71:7b:38:b4:53:c8:
57:25:a3:2d:92:6e:86:5c:70:12:40:d7:32:b6:b3:f2:6e:40:
e2:00:99:ba:2e:e8:30:4d:e5:fb:52:6c:07:f7:85:06:48:6d:
64:80:85:2b:74:44:e0:c9:f0:a1:d7:4d:8d:87:53:c3:f5:39:
85:dd:7f:2b:41:d6:df:41:33:a9:01:c4:9d:10:70:b7:b7:94:
c5:4f:56:2c:30:08:e6:cf:9c:a6:73:4d:09:3b:71:3c:dc:81:
f7:7d:af:06:12:32:56:44:59:67:e5:be:60:43:b9:0d:9c:73:
6c:a6:14:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:58:52 2026 by rpki-client