Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
File: xWwoao20vSFr9kx1szhRsARaF18.mft (raw, json)
Hash identifier: nkuFn35VVqMii3KVgw/SNCHYiDHRSJwIciRlWZeKaYY=
Subject key identifier: 38:BF:97:9A:61:57:37:9E:9E:F6:E9:6C:C7:B6:CE:90:BF:3A:37:9D
Authority key identifier: C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
Certificate issuer: /CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Certificate serial: 01A1536583111ECC3E96335DCA4D49CD0312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
Manifest number: 0F13
Signing time: Mon 19 Oct 2026 09:02:03 +0000
Manifest this update: Mon 19 Oct 2026 09:02:03 +0000
Manifest next update: Tue 20 Oct 2026 09:02:03 +0000
Files and hashes: 1: fzBvwE7sX01y4kB6SSgdE7n9ysI.roa (hash: qCcHE+EY0A9msSwDHW5P3s9hKxDDBKeiCJ6eljce7Pg=)
2: xWwoao20vSFr9kx1szhRsARaF18.crl (hash: MqfOAdjxazDUT1uhmg9MpXc+LI1YvcBztLOtMdKruf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:65:83:11:1e:cc:3e:96:33:5d:ca:4d:49:cd:03:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56c286a8db4bd216bf64c75b33851b0045a175f
Validity
Not Before: Oct 19 09:02:03 2026 GMT
Not After : Oct 20 09:02:03 2026 GMT
Subject: CN=38bf979a6157379e9ef6e96cc7b6ce90bf3a379d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:dc:f9:fc:87:b2:ef:61:45:4d:a4:4c:1d:c9:
43:25:1e:fc:67:2d:15:ae:55:3e:21:1f:a6:4b:b0:
6d:4b:0c:f8:c4:59:37:45:60:fe:75:60:71:c1:50:
22:dd:6a:67:e0:a5:ce:ab:7b:91:f8:c2:2e:08:02:
38:44:7a:f0:98:5d:3a:36:59:52:72:11:6b:f6:58:
86:cd:75:dc:ba:3a:77:95:77:1f:d5:35:2e:14:0c:
f6:f1:a2:66:cd:64:d9:92:3a:be:b6:bd:f1:f7:69:
d8:19:87:f7:8d:8c:70:17:6d:73:3e:3c:18:2b:5f:
27:21:83:54:5f:48:a3:fa:fa:a0:55:28:fe:c8:6f:
5c:07:2e:39:ef:a7:23:34:d7:a2:6c:a9:0f:7f:37:
a1:1f:12:69:a8:91:eb:31:2f:fa:77:21:78:05:0a:
1b:f0:af:87:9b:02:b4:96:e4:85:78:80:ae:3a:a0:
40:43:fa:f2:eb:fd:41:ee:e7:29:27:df:4d:a4:a9:
45:01:8f:94:a2:14:32:5f:5a:d1:71:f0:3c:f1:f4:
f7:3c:6c:ef:2b:f3:f7:f1:5c:59:d5:98:32:11:da:
71:f5:62:92:eb:61:94:f1:47:c6:f3:10:96:34:91:
ba:1c:2e:c6:46:35:36:c6:7d:22:f7:52:d7:0a:ea:
ae:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BF:97:9A:61:57:37:9E:9E:F6:E9:6C:C7:B6:CE:90:BF:3A:37:9D
X509v3 Authority Key Identifier:
keyid:C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:16:41:34:47:31:40:55:6f:e6:37:2c:b0:c5:82:67:b3:84:
6c:95:b7:e8:6c:62:fb:73:8b:ab:6b:13:c7:d1:65:21:6e:4e:
8d:82:bd:3d:e9:a9:79:48:c9:05:de:d8:e9:8e:df:54:ed:3c:
8d:7e:30:98:68:30:8b:99:b5:6c:ff:9e:94:1c:c8:15:08:28:
df:ec:de:05:0b:d1:b1:59:6b:90:5c:bb:b9:c1:46:b6:87:4d:
6a:4b:89:a0:4f:ce:1a:a8:1e:fa:49:05:5f:fc:cc:a1:18:88:
03:0d:a3:ca:46:d1:5e:fe:3c:cf:51:d6:b0:a3:3e:45:d0:23:
1f:3b:96:8b:41:d5:d3:70:11:69:a0:11:5e:7a:d6:46:b0:54:
8f:01:a3:5c:ea:ab:24:d5:6c:85:29:69:23:13:34:96:6f:ba:
7f:28:2c:4f:64:fe:e7:41:fd:a6:f6:9e:93:51:23:5a:bb:7e:
ea:d2:0a:f8:c5:05:3b:9b:96:b4:52:24:9e:e5:9b:d4:cd:1c:
a3:4a:53:8a:42:da:dd:0d:72:5f:ef:b5:3c:0e:d5:b8:d5:a2:
60:46:5c:d3:05:79:f4:d3:76:91:15:85:54:44:11:12:d8:9d:
a5:3d:05:60:b4:cb:9e:fa:3d:19:bd:f7:62:24:18:b5:34:a4:
22:a5:94:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:43:54 2026 by rpki-client