Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: UJhadQAPuetRjuaRESsM64XxKZq6oLmb7sQk36onLfY=
Subject key identifier: 6D:6D:BB:2E:D6:E4:A9:1B:3A:56:7B:EB:63:14:7C:34:25:21:72:CD
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 01A18A89925B89587E43D9A79FFC10F81CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 1ACE
Signing time: Fri 30 Oct 2026 02:00:33 +0000
Manifest this update: Fri 30 Oct 2026 02:00:33 +0000
Manifest next update: Sat 31 Oct 2026 02:00:33 +0000
Files and hashes: 1: C9UaUe1csiivFvHUda9mBHTGYdw.asa (hash: HYUAC+2DJRDeCMX5s14wMYwfyiesxFYobYd6lNilDto=)
2: pl4G0drpVsiUnTNv0aNJRxAq40Y.roa (hash: TIrmY5F1mz/rcq5o0AaF7KuNyHFmI5rxVVBApqp6+Ig=)
3: uCT5qS0TatwLKR2syBgBgC34NYE.roa (hash: 6Pav0LB8Y/JGRbLI7vMShFMSStiFyP+H+ECIrWK519s=)
4: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: VPxBsxp6yKK6uTd7Bvo+KwMTxadyAhzw9Gl3+JYeCRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:89:92:5b:89:58:7e:43:d9:a7:9f:fc:10:f8:1c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Oct 30 02:00:33 2026 GMT
Not After : Oct 31 02:00:33 2026 GMT
Subject: CN=6d6dbb2ed6e4a91b3a567beb63147c34252172cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:ee:ea:87:b3:3d:56:07:9c:62:51:c0:f9:
cf:59:14:51:4a:1b:24:d9:44:76:49:75:c9:1d:77:
74:33:95:84:1a:19:e8:74:c3:a5:4e:31:15:cc:f5:
32:04:21:69:fc:1e:c5:de:2f:71:15:1e:6d:4b:c6:
23:3b:a1:8f:66:a7:01:1b:67:dd:0d:72:08:0e:c3:
69:34:ad:c0:2e:01:47:af:f1:69:95:e3:93:93:36:
6a:05:d1:bb:da:46:a3:d8:7b:f1:7d:73:d6:44:cc:
01:70:13:d9:72:8c:95:63:61:d1:5f:12:d2:36:6c:
69:93:20:7a:9e:77:6f:6c:28:68:9c:b4:1d:e1:34:
e5:20:60:9f:a0:a7:2e:91:99:8b:1c:9a:99:3c:c6:
aa:14:34:d0:41:49:8a:15:16:97:db:de:1f:27:81:
5a:c4:44:50:dc:3e:9b:aa:6a:26:73:6a:ab:c3:ce:
53:4d:c3:7b:4a:b7:70:1c:50:61:55:29:b2:30:b0:
0f:e7:30:2c:9e:47:65:86:1c:ef:4d:d9:db:53:04:
51:d4:6a:19:58:f4:82:60:6c:2e:60:da:be:7e:a4:
70:e0:27:e7:e8:4c:61:33:38:26:31:c3:27:1a:d4:
23:bb:34:b3:d4:d5:b2:d2:82:af:f3:77:5f:a9:97:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6D:BB:2E:D6:E4:A9:1B:3A:56:7B:EB:63:14:7C:34:25:21:72:CD
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7a:58:68:48:37:a3:8d:a2:50:6f:c3:69:3c:67:43:f0:46:
33:c9:08:1c:8b:ed:59:e5:16:c2:1f:61:40:a3:f1:15:8c:e8:
db:d9:0b:1c:8c:a3:68:df:12:88:e4:31:44:56:70:2b:c7:50:
6a:d0:42:97:e7:0a:89:85:29:cb:3f:3b:dc:54:a9:30:95:32:
90:c1:b8:9b:e9:03:a4:3b:48:c8:fa:d2:12:5a:db:33:93:11:
d5:1a:99:7e:cb:16:0b:6d:75:f3:72:05:6e:58:d9:fa:7b:fe:
64:94:1d:95:a5:6d:4c:82:a7:f0:35:90:3e:86:31:b1:84:fb:
de:c7:6a:4a:9b:c3:38:37:2e:84:0c:a4:cb:cf:b4:09:c7:c6:
49:7d:d8:de:a7:5f:4c:c1:c4:d4:09:bb:41:12:b6:5e:5e:9d:
e5:e1:2a:39:ff:65:52:ac:3b:be:29:a2:19:d9:d7:23:d4:1b:
b6:9a:ef:d6:10:ee:cf:62:d3:73:d9:d8:d7:70:2c:c2:d9:73:
33:02:7b:ee:1a:6c:02:48:86:48:3d:6e:73:77:b9:9c:1d:7b:
39:02:fe:fe:a9:62:b0:6a:0b:7f:4f:c9:59:74:38:9c:2b:62:
c5:da:62:0f:98:64:f9:eb:88:f7:f4:71:7a:d6:3d:78:05:dc:
ff:e5:20:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:07:31 2026 by rpki-client