Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier: hG4HDE8iFdjt/f4Ygt0e/evfN98fcAp83xqz7/aXOXI=
Subject key identifier: 6C:1E:49:93:AC:6D:53:F1:79:34:85:57:A7:EF:E5:7E:07:CF:37:BA
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial: 01A12955A468EBB8DCEDF06203461A5143B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number: 18EF
Signing time: Sun 11 Oct 2026 05:00:40 +0000
Manifest this update: Sun 11 Oct 2026 05:00:40 +0000
Manifest next update: Mon 12 Oct 2026 05:00:40 +0000
Files and hashes: 1: RA_P8M2CbE3vpnTaUf4TR1pQq4c.roa (hash: sqZi/SBA/dg8k8Qf9vK6EYY7YFO+mp6oMfC87nRDLEY=)
2: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: cdwCVCqOTk92gwseCOkV/5DhIP4tqFKZBrPYPOCM7xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:55:a4:68:eb:b8:dc:ed:f0:62:03:46:1a:51:43:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Validity
Not Before: Oct 11 05:00:40 2026 GMT
Not After : Oct 12 05:00:40 2026 GMT
Subject: CN=6c1e4993ac6d53f179348557a7efe57e07cf37ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e5:b5:77:be:e8:25:b2:51:3e:b7:b6:f4:e3:
39:83:56:58:e5:84:b7:7f:df:1e:e5:9b:33:c0:6d:
6b:d4:b9:a8:66:6d:b8:39:35:17:fb:da:55:49:bb:
65:5f:84:4b:29:57:2b:89:f6:4e:ad:f2:dd:2e:1a:
1b:75:2b:3d:c5:44:6f:50:df:87:32:41:8a:a5:24:
80:5e:bd:11:6a:27:cb:a6:6e:e7:48:9d:fc:9c:c2:
15:04:bb:8b:6f:43:a6:85:7d:ac:8e:cd:f7:d3:f4:
ec:aa:d9:6a:8b:21:53:79:51:d4:a6:87:a3:51:aa:
9f:60:ff:32:03:08:c0:8b:a4:d7:e7:09:c9:bc:3a:
ee:cd:37:c1:4e:41:42:bd:1e:6d:fe:9e:65:57:16:
6f:37:50:1e:d4:bb:d9:19:8d:bb:5f:48:7f:8c:79:
5b:1a:bb:d5:9c:90:e7:cb:8a:08:2d:cc:bd:6a:44:
6d:6b:bc:97:5f:58:28:be:5f:69:bc:26:4a:bf:d8:
18:39:f4:78:6f:b9:17:f2:c8:e8:38:ab:e4:d0:a5:
fe:e3:a4:9a:67:42:36:1b:ea:c9:b6:10:64:9b:e3:
66:5f:b4:5e:e5:f9:84:86:c6:4c:9a:92:12:a6:bc:
a0:fb:f2:5e:d0:8f:61:38:dd:b3:d0:53:e6:0d:3a:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1E:49:93:AC:6D:53:F1:79:34:85:57:A7:EF:E5:7E:07:CF:37:BA
X509v3 Authority Key Identifier:
keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:59:c4:8c:b3:b3:34:6b:66:86:b4:5f:a5:ed:17:7e:08:21:
7a:b0:97:69:3f:fc:f1:fe:d4:0b:e2:71:27:47:9b:5d:2e:8c:
cc:dd:28:10:2c:36:52:c3:5c:89:2c:ea:57:33:41:db:22:a0:
b6:61:97:21:d8:8f:60:48:0b:40:62:00:59:76:bb:98:5c:01:
bf:aa:f3:b5:09:ff:7f:59:41:f7:1e:55:54:79:08:75:88:57:
79:24:26:01:aa:db:12:00:fe:b9:19:f7:15:45:ea:0b:7d:43:
63:d0:06:9a:05:a6:fd:50:91:54:61:0c:21:ae:f5:ec:92:eb:
49:ec:70:f3:f7:4d:82:60:85:1d:a9:37:c1:5c:32:59:1c:72:
ab:c9:05:24:85:e4:b6:aa:df:ec:5e:80:80:78:09:a3:b9:08:
4e:dc:f3:dc:34:29:b1:54:9b:82:82:07:5e:fb:37:19:33:c5:
4b:81:c4:51:3d:ab:74:04:0f:60:63:c9:56:cd:f5:42:b0:8a:
5f:c8:f9:ec:ec:60:05:51:8c:df:85:14:7e:77:9a:e7:71:08:
06:9e:cc:c1:f2:c8:98:0b:80:33:69:c9:4e:45:a0:1f:d4:e0:
48:1c:5c:08:0a:ca:44:34:50:dd:47:a2:c3:a9:4c:d9:2f:dc:
66:0c:27:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:11:53 2026 by rpki-client