Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: eVoUrdV1x9VWtibj0UXs9hBZnZs7FuAKsxAda0+5jHw=
Subject key identifier: 58:87:68:26:86:DE:04:36:58:82:E1:A8:81:71:76:35:06:74:01:2D
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 01A1A9A7694DE33776BB35D5D8D56C452159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 1A79
Signing time: Thu 05 Nov 2026 03:01:23 +0000
Manifest this update: Thu 05 Nov 2026 03:01:23 +0000
Manifest next update: Fri 06 Nov 2026 03:01:23 +0000
Files and hashes: 1: mTuVuiw3HM2pBIheqITWSq5I3n0.roa (hash: Ipl/v3cZkycb4zTv5tbg7JdjHKPt6S5to0wny64/QVQ=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: yE5751TbewXA2F3hbYgtBOTIsEwiY0ESYbN0f/YgNA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:a7:69:4d:e3:37:76:bb:35:d5:d8:d5:6c:45:21:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Nov 5 03:01:23 2026 GMT
Not After : Nov 6 03:01:23 2026 GMT
Subject: CN=5887682686de04365882e1a8817176350674012d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:4d:3e:34:c0:62:ef:21:23:02:21:3a:c1:
ce:bd:02:b8:c3:63:e8:61:5c:08:42:48:04:7e:2c:
d3:a6:16:9a:46:aa:cf:75:ff:99:a9:94:64:d2:9c:
f4:95:d1:ca:c6:30:41:82:a6:1b:a7:3b:09:e6:09:
96:4f:21:bc:2e:1a:86:3b:11:6a:ef:63:5d:fd:09:
29:8a:4f:58:66:6e:e9:89:93:04:66:c2:cf:c1:68:
63:fe:69:7c:7c:7a:51:74:5b:3b:65:9e:9c:4a:09:
18:c9:f9:72:d3:8a:30:8e:c3:f9:ac:a1:c6:c3:bc:
69:9b:b4:65:2a:2b:fd:cc:f1:15:08:f8:8b:4d:8a:
09:08:1a:76:00:36:76:26:13:c8:90:0e:82:79:28:
52:a3:1c:79:9d:a7:ab:df:e9:ae:bd:f1:77:69:7f:
a4:27:bf:66:ac:da:04:7d:28:2f:4e:44:41:48:8f:
cb:dc:ac:11:0e:93:9d:63:50:34:3a:95:59:11:8c:
3b:1b:47:81:1c:ef:2c:ba:91:bc:d6:f0:76:cf:7c:
19:27:e2:8d:ed:84:d1:74:df:11:3b:b5:c2:ad:d7:
e8:23:6e:24:d6:8b:4a:d2:18:ae:30:30:f0:2d:0a:
13:c6:b3:7c:76:d3:44:aa:2a:52:27:32:79:69:ad:
83:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:87:68:26:86:DE:04:36:58:82:E1:A8:81:71:76:35:06:74:01:2D
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:df:75:de:0a:cd:29:6b:98:7f:6a:8e:ff:07:8b:77:d2:24:
44:52:8b:02:fe:d8:82:2b:09:93:57:cf:2d:a2:d7:b8:40:a2:
a6:e7:26:65:e1:da:c6:98:02:ec:1a:41:b6:51:b4:2b:03:01:
2d:49:5d:b5:3a:e9:4d:7f:cd:27:f1:0e:9f:c4:b0:ca:d7:91:
28:9c:f1:51:17:9a:4f:07:7c:0c:41:73:33:de:7c:f7:15:88:
b8:27:83:53:a9:d5:e9:cb:bc:48:33:35:c3:67:13:0c:fa:fb:
4f:10:72:10:89:68:60:c6:17:2d:2e:cd:e2:7c:ce:5d:60:c1:
9c:4c:ea:f7:72:c6:98:4e:f7:af:4d:b2:c1:48:41:bb:9f:e0:
2e:f9:4e:2f:34:12:f8:c9:f3:95:cc:10:04:c0:0f:b5:16:2a:
ae:df:02:cc:ce:de:8b:b6:7e:77:40:4e:95:7b:89:cf:b3:94:
df:a5:1e:21:9d:6f:ae:25:e4:9b:5d:b4:6d:ef:f8:5d:af:4d:
51:07:84:99:05:ce:f3:62:8a:93:0a:c9:90:ce:f2:cb:39:d4:
1a:34:7b:04:bc:c0:a0:0b:6d:bd:86:e1:61:b2:96:00:70:f8:
61:ff:f4:bf:6b:be:95:1a:93:64:df:c0:ea:ab:6b:58:b1:f4:
5c:96:bb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:34:37 2026 by rpki-client