Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
File: _XjxP_qS8HTr5VfSotKa0Noz5dg.mft (raw, json)
Hash identifier: KLkDiBgBOw1LQJqPIFyjmbgwIEBa+oiObbimE1APnbI=
Subject key identifier: AA:25:47:C8:07:1B:0D:AB:CB:2B:77:97:D3:D9:DC:41:96:79:0F:0A
Authority key identifier: FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
Certificate issuer: /CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Certificate serial: 01A1852CF9BC386E8834691D0D768BA02829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
Manifest number: 1022
Signing time: Thu 29 Oct 2026 01:01:19 +0000
Manifest this update: Thu 29 Oct 2026 01:01:19 +0000
Manifest next update: Fri 30 Oct 2026 01:01:19 +0000
Files and hashes: 1: H7yvjO1PteMvFud2cVf980xvhOM.roa (hash: RhQsj0SDsU/JKqzjG9Bf/mkgnMQmL8vD/s9sreGOu30=)
2: _XjxP_qS8HTr5VfSotKa0Noz5dg.crl (hash: zYr+bCAEDa4pXI8H5cJFRs/h/sN2l/P5kEqDgaaiKcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:2c:f9:bc:38:6e:88:34:69:1d:0d:76:8b:a0:28:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Validity
Not Before: Oct 29 01:01:19 2026 GMT
Not After : Oct 30 01:01:19 2026 GMT
Subject: CN=aa2547c8071b0dabcb2b7797d3d9dc4196790f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f8:21:b6:82:16:56:1a:32:3c:39:e5:cd:89:
a6:0d:fb:8a:ed:ba:af:f9:99:ec:7f:d1:64:76:e7:
d7:68:f2:59:cb:67:a4:35:fa:f9:be:76:56:a6:b5:
c8:4e:5b:6a:5d:39:92:f4:9e:e2:84:cd:97:90:93:
e3:c9:92:36:7b:03:82:a0:25:be:8c:1a:87:ce:f8:
0a:25:3b:cd:9c:9f:de:87:f8:6d:7a:d1:8a:1e:3d:
12:f0:5e:14:12:9d:5d:6d:12:88:cd:b2:df:9a:65:
5f:77:b2:4d:ff:89:37:9f:8e:c3:68:5e:e5:a9:3a:
b6:c1:70:ec:65:90:bd:f7:e0:21:b0:69:dc:8c:4d:
98:39:71:dd:49:e4:8f:14:36:fe:18:e9:f3:60:21:
90:ab:63:a8:a2:c6:b4:d1:e9:40:9d:04:9c:d1:23:
ec:40:a3:5c:9b:66:e5:ce:87:0a:e3:37:15:36:59:
3f:4b:fc:51:40:2c:6f:8f:06:88:ed:27:50:53:c4:
85:9e:fa:71:18:69:7a:c6:33:91:e5:c4:02:88:a8:
13:98:a3:e8:ad:4a:64:64:27:b8:85:2c:3a:f0:bf:
32:e4:33:59:7b:7c:dc:0d:64:7d:90:da:fe:86:3b:
30:cb:42:e0:28:08:df:b3:84:9f:44:52:b3:d2:be:
03:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:25:47:C8:07:1B:0D:AB:CB:2B:77:97:D3:D9:DC:41:96:79:0F:0A
X509v3 Authority Key Identifier:
keyid:FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ba:0e:34:d7:71:0f:7f:2a:8a:aa:23:19:79:83:91:04:2b:
2a:b7:50:46:09:da:62:b6:07:d1:5d:35:6b:ed:da:fc:16:aa:
af:3d:04:b7:c2:92:d7:ec:87:d4:cb:8b:b0:e2:bc:25:2d:f8:
84:4c:24:7a:30:09:1b:74:9a:ce:c2:1e:2e:43:ee:54:73:fd:
f8:51:13:e1:38:f5:41:ab:df:cc:df:ba:49:c5:9e:8d:05:c4:
e4:81:86:9f:b3:32:bc:32:85:31:42:d1:f8:93:08:86:30:7d:
de:ee:6b:ca:d8:c3:22:aa:13:60:8a:8f:35:c5:e5:b4:df:a2:
24:1a:8a:a0:0c:cf:db:ab:07:d4:48:68:b1:c5:8b:ff:39:1d:
c5:7d:52:68:2f:d8:7e:65:94:4a:06:8c:0d:f6:26:df:1e:68:
21:29:31:fc:25:e0:a9:e1:ad:73:38:48:e6:c8:2f:a0:4c:80:
4d:70:eb:b9:fd:a8:50:3e:68:d1:35:4f:b0:d6:b8:1b:9d:09:
2d:e0:d0:42:33:eb:70:79:14:ce:f9:a9:e2:1f:4a:c7:f3:18:
92:b2:a3:c7:4b:ce:a7:e3:45:c9:6d:44:3d:3f:ad:fe:70:b3:
63:92:06:36:77:e7:88:cb:2f:52:c8:04:56:e9:ba:9b:20:72:
4b:b3:15:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 10:59:07 2026 by rpki-client