Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: KZBzLCh/AyEnX3PHQxHu5L/6x2k6wSxazNRvOmmNpTA=
Subject key identifier: 2B:A7:57:DC:69:F0:FF:A4:10:BD:A7:E2:45:7A:3F:98:6C:38:14:07
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 01A1875157280FC0E54E9629AAA441B9437B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 1ADD
Signing time: Thu 29 Oct 2026 11:00:17 +0000
Manifest this update: Thu 29 Oct 2026 11:00:17 +0000
Manifest next update: Fri 30 Oct 2026 11:00:17 +0000
Files and hashes: 1: 5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa (hash: qdwMngtFVt4ZyT/UodrlBdn1CZ1QUvtY6m9NXbdSStU=)
2: DYkV04gki79D3asculnZRcHU37Q.roa (hash: qlIkHsV6HBqGkc4tTxIBB1jTZcTStbiHUpGcVOphuGk=)
3: X-ehgfatBtOAnRXcz6-5Jx0F8B4.asa (hash: /YVTHqMQAjpDaMD8b9BYDBTtlnwA4KQTEd5uL4RrvtQ=)
4: wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa (hash: xzHJiZgBxtEtCYr9MbTY6G8tT0OCniElkcH6xF7+Cv8=)
5: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: Uj5F2e5NoFr/y/JygjgNYUAzm+cojZqx2Or2HjSvg9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:51:57:28:0f:c0:e5:4e:96:29:aa:a4:41:b9:43:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Oct 29 11:00:17 2026 GMT
Not After : Oct 30 11:00:17 2026 GMT
Subject: CN=2ba757dc69f0ffa410bda7e2457a3f986c381407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:e0:1c:9b:54:27:cf:5a:c4:7b:f9:b3:6e:
7f:61:7a:be:ce:e0:8a:16:59:44:4b:81:da:d7:27:
e2:61:a8:77:2b:72:2a:e1:76:eb:d6:49:67:48:aa:
13:2a:c0:b6:12:da:8d:90:0d:d7:90:6a:ca:52:9b:
c6:0d:69:f4:ed:31:d4:18:42:7d:d7:05:14:af:2e:
ec:72:d3:1f:9e:7f:3b:1b:81:00:61:05:a1:d6:f0:
e5:f8:78:5d:8e:f5:e0:72:db:43:4f:c0:bb:cb:1d:
80:b3:1e:18:6c:4d:12:23:f5:3a:3f:2c:12:1b:2f:
74:63:75:da:5a:95:e4:5d:74:21:5f:d8:6b:6c:9b:
4d:51:00:ed:91:57:8d:cf:e6:f0:c5:47:b6:01:36:
fe:52:2a:fc:8e:98:af:4b:7a:10:f4:cb:10:27:b7:
0e:93:83:cb:3c:d4:84:4b:f7:00:e6:a1:38:f6:61:
eb:b6:87:08:00:53:13:c6:3c:98:50:38:8a:bf:a7:
12:52:c0:b9:cf:66:4d:f1:e5:99:fa:07:a3:1e:f8:
96:ca:be:7f:42:73:66:a4:da:17:32:95:a3:4c:bd:
8a:70:71:6d:40:00:8e:89:c5:9d:f2:9d:a4:51:f9:
ec:24:5d:34:97:7a:7a:56:bf:68:76:c3:67:cf:07:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A7:57:DC:69:F0:FF:A4:10:BD:A7:E2:45:7A:3F:98:6C:38:14:07
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:50:cb:5f:21:95:23:f7:59:b3:58:90:61:0e:75:0c:87:92:
0d:08:c1:38:ab:82:53:f3:ab:44:19:9e:a9:a3:a9:b7:c3:c0:
32:6c:c3:bf:20:90:f9:3a:df:64:da:6f:d1:22:a2:c7:9c:43:
5c:0b:a2:7a:5d:73:9b:38:e0:bf:42:bb:44:da:b7:a5:80:ed:
32:ea:4e:0d:a8:b8:eb:a0:7f:3c:6e:39:8c:f2:0c:66:e0:9e:
9e:ed:81:a8:b5:20:b4:09:1e:8d:08:83:6c:6f:b7:6e:42:c8:
9b:03:0c:de:07:23:ee:cb:9e:4d:bf:19:16:a0:d1:38:dd:c1:
0c:4a:d8:42:1e:31:d4:16:07:af:e7:d0:79:81:16:df:7e:0f:
22:ff:45:73:12:7f:1a:24:50:e3:17:8e:b2:18:d8:c6:ca:d9:
95:7d:c2:87:77:bc:09:f1:c7:74:26:bb:f4:8b:69:79:b8:f4:
f0:50:48:b7:a9:c1:a0:4e:92:9c:3b:25:cf:0c:40:d4:54:10:
9a:b2:38:76:09:9b:82:56:e6:77:6c:0c:c5:cd:af:66:28:ae:
67:4d:33:4a:d2:b2:a4:76:41:e5:c4:a4:9f:89:c3:22:9d:0b:
70:34:02:95:0e:13:2b:f2:56:a1:9c:49:66:ec:59:c0:e2:8c:
26:bc:70:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:48:01 2026 by rpki-client