Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: dSgQ8pk5suRnjWcoFcs3PDNBqgf8BF0Q/VkgxQ2aIII=
Subject key identifier: FA:B0:7A:F7:0F:65:97:44:78:F0:D7:1B:43:96:14:8E:88:0F:61:46
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 01A17DAA47AAD9DE51FE98174F4615754047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 1A57
Signing time: Tue 27 Oct 2026 14:01:13 +0000
Manifest this update: Tue 27 Oct 2026 14:01:13 +0000
Manifest next update: Wed 28 Oct 2026 14:01:13 +0000
Files and hashes: 1: Bufh8fLfGuFcJIRDH90wZyey3vQ.roa (hash: 97pbnQhhP+W/DGuiQ6yzPinj80mmymwV5CPqsqreqm0=)
2: aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa (hash: Xqrg7NBvSV9yvVpUUwp51n6WbUWMsfHL/0GgkjRTj1U=)
3: gjKej6nLmog1Pdhy2m7-nfTgjGw.roa (hash: q4iLVi9p7pL885pUO6lukqaAAVZW6+EWxQvMee6AK60=)
4: phc_rWomL_SloTsFG0Feb3oexB8.roa (hash: vPwplBARp1RlzeoBKfqMgLEmEz1s7NkUpEh7QDk9mPM=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: VqD7w5RyCX7l2/mMkXIzHnsjrgDPC0jSULJOIpc2VME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:47:aa:d9:de:51:fe:98:17:4f:46:15:75:40:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Oct 27 14:01:13 2026 GMT
Not After : Oct 28 14:01:13 2026 GMT
Subject: CN=fab07af70f65974478f0d71b4396148e880f6146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:40:f7:7a:ab:37:74:ab:43:7d:92:f8:f6:a5:
75:62:be:a9:40:40:71:24:4a:81:e5:df:4d:a0:87:
e9:9f:0c:2c:f0:18:fa:c0:dc:34:13:a8:1c:0b:50:
7f:f8:53:34:67:85:50:99:87:06:20:1d:db:28:a8:
f0:f1:b2:ba:bd:1b:5c:b4:1a:f2:9e:7f:c9:5a:90:
81:a6:5f:5f:32:19:8f:d4:88:73:8a:7b:1d:6d:5d:
02:46:3e:cf:61:d5:91:c9:c6:2f:56:c8:54:94:84:
df:44:47:2e:a8:1e:b9:6c:b2:da:60:0b:7a:72:9b:
3a:71:de:9f:c1:a4:6a:95:46:b9:16:cc:b9:4d:ee:
6c:78:87:0b:27:ff:e3:bc:57:d8:94:86:09:22:9d:
04:cf:7b:f7:a3:ff:fa:95:4d:47:38:71:5e:55:1a:
30:87:a2:34:ea:d3:c9:22:ad:cf:ec:76:5f:2d:e4:
ce:81:94:af:9f:ad:3c:67:8e:03:5b:8c:c8:d7:77:
b5:0d:a3:5e:33:77:94:68:c5:c7:4d:fa:04:6c:8b:
89:74:8d:62:16:ce:a0:f6:41:d0:2d:2b:f4:b5:bf:
a5:55:e8:fb:2b:af:c4:4c:17:8c:db:ad:37:3e:31:
70:0a:34:2f:13:de:7b:7e:b3:46:79:4f:58:89:cb:
c7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B0:7A:F7:0F:65:97:44:78:F0:D7:1B:43:96:14:8E:88:0F:61:46
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:49:7b:4f:47:32:5d:8e:89:5a:0e:0e:02:48:17:6b:3d:06:
51:23:b6:78:0c:8c:f1:fb:2d:f7:00:d6:09:46:b4:98:86:be:
25:69:95:9d:79:08:d8:0d:de:6b:b0:62:56:7c:e6:2a:f4:f8:
e7:fe:3d:3c:de:27:11:c1:19:d9:0e:5a:63:31:9a:8e:38:18:
a0:de:c8:66:d9:eb:be:0a:b6:6b:d9:11:1a:b3:f8:27:b6:0a:
5a:6b:ef:21:a4:a0:ee:00:ab:1d:98:df:73:cc:85:f7:0d:cb:
33:61:de:fc:e3:f9:16:1a:9e:c1:05:ad:75:e3:2e:27:3e:33:
78:5a:97:02:09:ab:de:ec:32:88:6c:df:98:f7:d9:27:b5:fe:
6a:c3:43:ec:02:f4:8f:59:42:9e:e6:b6:11:a4:a5:e3:91:fc:
8b:56:83:4e:f9:f9:6f:17:2e:c1:38:b9:26:a9:24:83:a0:61:
31:dd:0f:41:3b:9e:d0:b8:17:d3:ac:7e:f4:16:7f:17:08:94:
74:76:a2:25:d2:11:b6:8e:e8:61:df:76:4d:cf:76:39:94:a2:
f4:26:2c:ca:14:eb:74:51:ca:08:c4:43:bc:4d:e2:47:d6:df:
6b:49:9f:cb:5f:df:72:68:30:a6:aa:ac:55:6e:2a:28:fd:dc:
48:b1:0b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:21:34 2026 by rpki-client