Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
File: xU9qEXeCbFq2S9OvATiptXpLkeU.mft (raw, json)
Hash identifier: wlLrpIRy3x/e5nA2f00kAyExHGY0QNUoThWkDPUS55k=
Subject key identifier: B5:06:D7:87:7A:B9:FC:83:C0:48:0D:CC:03:A0:2E:CE:03:74:78:CF
Authority key identifier: C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
Certificate issuer: /CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Certificate serial: 01A156D382EC03E39C621FEE6DBC24454777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
Manifest number: 0344
Signing time: Tue 20 Oct 2026 01:01:04 +0000
Manifest this update: Tue 20 Oct 2026 01:01:04 +0000
Manifest next update: Wed 21 Oct 2026 01:01:04 +0000
Files and hashes: 1: AAL-YY9GVuWqbLX5GG1k3ImctWA.roa (hash: dOcDqpARrTucPUNtlVinnlKcwBaTZo2MLnDCrG84YIw=)
2: xU9qEXeCbFq2S9OvATiptXpLkeU.crl (hash: oeHj/ZrQFCyG/VbCV9uI97ZI8NyAlxPCIRpC+0Dkn0I=)
3: x_VjdL15EqUB70pwRzrAehHyTNo.asa (hash: roR1zfTDox/ACVmuA2wDu2cHX32k232PLN3hkotoI04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:d3:82:ec:03:e3:9c:62:1f:ee:6d:bc:24:45:47:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Validity
Not Before: Oct 20 01:01:04 2026 GMT
Not After : Oct 21 01:01:04 2026 GMT
Subject: CN=b506d7877ab9fc83c0480dcc03a02ece037478cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:ab:6b:f0:1c:24:01:b7:fd:61:2e:62:67:
0c:af:20:0f:c9:45:c2:72:f1:45:a8:e1:20:91:d0:
0e:4f:c7:e8:c1:6d:79:9e:e8:e2:a1:e8:e0:b1:1f:
cb:bd:f7:b2:fe:4c:b6:64:91:2c:b3:34:00:47:58:
61:9e:0b:30:7f:e0:d5:98:6d:90:a6:2c:4d:29:78:
80:de:68:62:66:eb:3f:47:29:2c:3e:ea:e9:16:6a:
eb:f8:b1:91:e4:36:57:da:fc:df:00:f3:a2:ce:40:
e8:0d:87:d8:b9:70:49:59:90:f5:a6:1a:e0:0d:c6:
aa:07:11:aa:80:48:04:6f:ee:da:a6:e8:86:17:53:
b2:c8:23:23:99:f8:ad:8a:38:1e:8b:41:c0:27:df:
88:88:d6:1c:b0:37:5e:27:d4:5b:fa:8f:ef:51:ea:
e3:f5:c8:cd:43:ac:18:c3:3e:6f:ea:e4:10:7d:6c:
fa:dd:79:01:66:e9:66:77:d2:ce:6c:97:fc:ed:76:
3f:91:7a:a5:fe:81:51:08:fb:9e:18:cd:18:32:da:
d3:db:74:d5:0b:8c:b8:24:93:d1:b1:1d:6f:1c:d7:
b2:03:b0:7c:20:34:d6:28:f0:f3:d8:73:f0:cf:7a:
fb:9b:3a:c1:e4:d9:71:0a:b4:8e:db:41:99:72:71:
b5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:06:D7:87:7A:B9:FC:83:C0:48:0D:CC:03:A0:2E:CE:03:74:78:CF
X509v3 Authority Key Identifier:
keyid:C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:30:5e:34:e9:30:ff:40:18:93:1b:8f:bf:65:f6:00:cf:45:
09:c6:a0:07:e4:ac:f1:b4:14:2e:27:96:7a:48:88:41:51:82:
8b:61:dc:2c:2f:eb:4b:b3:a8:4a:e3:4f:7d:1f:d6:10:8f:42:
fb:4a:9b:20:d5:25:c9:99:85:a2:27:dd:d9:3f:3a:79:a9:68:
9e:17:fa:d3:bb:ee:bf:fc:9d:b4:d0:f0:c4:ad:eb:6b:74:88:
b4:7a:bf:5c:a6:98:19:0d:06:f2:75:cf:3e:36:c4:25:46:78:
a9:6a:9f:47:ed:65:49:52:1c:7a:ef:66:51:d2:c6:2a:f5:fd:
bb:97:95:f0:64:68:fb:bd:6a:46:d6:52:4c:20:c6:1e:32:2f:
87:fb:3b:49:e1:ba:51:d3:57:c5:3f:0e:96:1d:f7:5f:ce:64:
6c:b0:7b:2d:7a:8f:cb:86:c7:6b:b8:0f:6d:8b:7f:62:51:2c:
75:db:26:33:2c:f0:40:0e:69:04:6a:27:dd:53:de:59:6a:27:
4c:a1:0d:30:0a:98:9e:4e:1d:0d:58:7d:2c:0f:4e:97:13:5c:
00:17:9b:6a:6b:fe:77:36:92:ec:58:d2:8a:28:0c:da:0d:8e:
4f:06:bf:64:f1:00:0c:a9:c2:c4:0b:23:43:62:ab:2a:67:51:
a2:77:8d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:18:49 2026 by rpki-client