Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier: db9Z6UtfWFUdjnu685rAgoF/vEH9czONU+/9FqyRGO0=
Subject key identifier: FB:76:71:C8:59:6D:2F:7C:98:32:64:9B:14:C7:91:F0:2D:49:27:CE
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial: 01A1927A2FD6A750A429496BB35F01A22A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number: 1299
Signing time: Sat 31 Oct 2026 15:00:43 +0000
Manifest this update: Sat 31 Oct 2026 15:00:43 +0000
Manifest next update: Sun 01 Nov 2026 15:00:43 +0000
Files and hashes: 1: XfPxNqw04f4ysUNycil0EQofl1M.roa (hash: JClRzQorRQbXDP0L/PC7A7JxisEaLLPV1aRUiLTnBv8=)
2: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: 8vV3XHv9R1vN5C8zPiXrQjv1p5f5r48C8cjqM8V8q2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:7a:2f:d6:a7:50:a4:29:49:6b:b3:5f:01:a2:2a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Validity
Not Before: Oct 31 15:00:43 2026 GMT
Not After : Nov 1 15:00:43 2026 GMT
Subject: CN=fb7671c8596d2f7c9832649b14c791f02d4927ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:8a:54:90:b2:56:b7:d0:f5:0f:9f:a6:f7:
e3:48:ad:b9:7e:71:d8:e2:d6:aa:20:c5:07:13:85:
cd:c2:dc:4f:3b:da:d7:de:51:52:ec:e6:1e:c5:47:
86:82:04:98:20:ec:b6:14:a9:d0:12:2c:b0:5c:07:
56:20:df:0d:79:61:bf:c6:a4:56:64:50:5c:73:0f:
55:53:25:34:f9:4b:3f:0c:8a:77:4c:4c:c5:b3:16:
04:28:b4:d3:d4:5b:9c:a6:3c:11:cc:0a:14:6f:74:
80:f7:7b:f5:d5:be:df:80:d9:ea:78:56:25:3e:dd:
26:fb:f5:9b:c5:65:ea:2b:f5:d8:f4:c3:ed:9a:73:
96:80:ba:77:57:67:0a:d4:35:c1:f9:4b:7a:a6:c6:
10:ad:87:af:7e:2c:d2:36:8b:eb:5d:2b:84:8e:f8:
81:9e:7f:a9:16:c2:8b:ac:7f:c7:8c:db:a5:ac:cd:
07:23:f2:d6:63:8f:3d:8f:8c:76:7f:3f:64:5e:64:
ea:ac:41:df:9e:c4:0e:7f:41:e8:e2:a7:0e:ae:1c:
7c:42:d5:31:fa:04:53:39:9f:52:47:cc:49:69:49:
66:3d:7e:e8:38:a5:b7:9f:43:78:88:7a:27:be:58:
a6:91:c6:f1:e5:8e:fa:5d:32:f2:38:46:47:d8:0c:
c4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:76:71:C8:59:6D:2F:7C:98:32:64:9B:14:C7:91:F0:2D:49:27:CE
X509v3 Authority Key Identifier:
keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:01:10:04:c3:31:07:e1:7a:64:23:52:d1:0b:b1:dc:ad:4c:
e6:5a:4d:fa:d1:35:e2:eb:62:96:80:2d:99:75:0c:c2:74:34:
e1:f6:fb:f0:f3:84:89:42:c1:36:05:89:df:6f:95:5b:fd:7e:
c9:0c:1a:ad:a1:e0:63:f4:04:22:44:ca:93:86:89:20:ab:19:
7f:28:5a:89:e8:f8:72:f9:f7:e6:ee:37:21:1e:0a:c5:9a:bd:
da:5f:fb:fa:3f:57:82:bf:60:10:55:30:c9:69:c7:74:cc:02:
c3:47:4d:19:74:d6:a3:53:20:27:1d:83:6c:d2:a9:c6:3b:82:
b7:59:50:73:30:2f:57:0e:6d:35:32:c6:a2:b7:3d:8f:ff:a4:
90:15:d4:ed:11:85:91:80:8e:1f:74:5c:9b:71:70:ff:c8:4b:
19:a6:86:1a:7e:dd:4c:fe:f9:b3:c9:83:f4:63:d2:32:c9:5c:
69:ac:03:e8:4b:3e:60:4d:dd:4e:1a:d8:49:45:20:de:8e:d4:
9d:13:ac:71:6e:dd:ff:c2:47:54:b2:1d:f4:79:b4:fc:cb:39:
f8:68:a5:42:96:f3:b3:98:20:db:53:67:72:e3:4e:61:a5:ea:
96:a1:3e:2e:dc:bd:01:19:5c:e5:93:d8:81:3e:97:95:6a:ea:
f5:b5:cb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:50:04 2026 by rpki-client