Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier: mRFDZ7UdMLZyj2/XK+WRjp4qIr9XhGff0ivky+fEPBQ=
Subject key identifier: B4:DD:4D:3E:C4:4B:C5:49:42:AE:F5:FA:4E:00:B0:F0:B3:29:C5:8B
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial: 01A1908BE1A7DC74B524C425194E6B0740B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number: 1298
Signing time: Sat 31 Oct 2026 06:00:48 +0000
Manifest this update: Sat 31 Oct 2026 06:00:48 +0000
Manifest next update: Sun 01 Nov 2026 06:00:48 +0000
Files and hashes: 1: XfPxNqw04f4ysUNycil0EQofl1M.roa (hash: JClRzQorRQbXDP0L/PC7A7JxisEaLLPV1aRUiLTnBv8=)
2: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: iLuo+o6n+061F6ZurTuAj/kwvM+BeTrRq1vUiFLYlS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:8b:e1:a7:dc:74:b5:24:c4:25:19:4e:6b:07:40:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Validity
Not Before: Oct 31 06:00:48 2026 GMT
Not After : Nov 1 06:00:48 2026 GMT
Subject: CN=b4dd4d3ec44bc54942aef5fa4e00b0f0b329c58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:63:f2:0b:42:a6:11:e3:b9:e7:af:10:a3:
23:b3:38:ce:02:c8:83:70:32:37:a6:bf:6b:8b:72:
d1:9f:15:b6:e9:ed:9a:8f:4d:5a:84:ae:bd:8c:d0:
ef:f6:bb:c4:6c:b3:07:39:35:10:fc:9d:dd:58:c0:
99:80:ed:82:88:d8:ea:96:31:60:8f:8c:79:c2:83:
e7:a3:cc:c5:c4:50:5c:4d:a6:6b:ad:9b:0c:45:1e:
c6:cd:fe:91:2b:75:38:c9:7a:27:5a:65:2e:16:58:
a7:2f:8f:3b:4f:ea:5e:08:31:03:ac:2d:75:f9:ac:
b6:fd:a4:0a:ff:a8:9b:b1:55:07:93:12:af:a7:7c:
24:91:17:e7:e2:a1:81:a0:55:33:1b:0a:69:52:d4:
08:1b:33:ea:ca:43:24:05:5c:0e:ea:68:b9:ec:94:
c1:53:e5:de:af:dc:54:ea:50:03:b9:a0:af:ae:65:
46:a3:35:74:4e:0c:ea:ca:26:ea:8f:55:cd:81:ce:
15:09:51:21:9d:b3:ff:7b:d3:18:c7:39:1b:68:da:
5a:6b:8a:0e:9d:2a:ec:28:74:47:7a:43:55:7a:1d:
67:bf:66:fc:27:00:d7:8b:50:1c:5f:05:78:8e:c9:
a2:a7:7d:45:dc:92:f7:59:04:5a:4c:7b:f6:4e:81:
15:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DD:4D:3E:C4:4B:C5:49:42:AE:F5:FA:4E:00:B0:F0:B3:29:C5:8B
X509v3 Authority Key Identifier:
keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5c:42:c5:89:ec:c5:8f:5e:f7:b9:f1:7f:52:f4:46:fd:1a:
c3:19:a3:ff:4e:f7:e3:1d:09:53:99:98:0e:1a:fa:38:7d:cb:
23:39:7e:f6:49:d9:f9:c3:ee:64:89:37:5a:bd:fd:55:fe:f0:
8c:6a:03:46:b7:05:da:f9:bb:da:20:d2:03:4c:ca:62:8a:70:
12:74:8e:4e:f8:97:89:4a:ce:5a:0a:3b:93:a6:8a:f7:b5:82:
d7:53:1b:64:5e:c9:9a:36:fe:3a:1a:a6:69:c9:22:f9:db:81:
0c:62:34:f5:96:42:be:6a:94:74:3f:6c:dd:b0:6f:9a:07:1b:
6d:01:26:8b:1c:cf:0d:dc:e4:51:2b:05:6a:8c:da:70:08:0d:
9c:08:9f:27:6e:95:9d:e3:99:0e:ca:1d:0b:05:5b:7c:d3:1f:
ef:82:b0:d1:44:72:4a:0f:c7:ff:c3:4c:04:7b:cd:af:c8:8e:
1f:28:ba:65:48:00:3d:98:b6:39:cc:08:f7:0a:f6:3f:ca:3f:
4f:00:59:53:b2:b2:da:9a:dd:6b:80:23:64:c7:60:64:2a:fb:
c0:a8:b8:d7:cd:9c:91:7e:54:99:18:41:9f:32:ed:5a:e6:25:
68:7c:ca:c0:15:72:6f:53:ae:5d:f4:53:a4:11:85:6b:ac:74:
c2:b9:8e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:07:28 2026 by rpki-client