Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: NPtErdeHm9htdcEkHDeZicRcQTkqPluA5PZpxLWQhYg=
Subject key identifier: 51:D5:68:12:F9:84:02:CF:92:FC:8D:57:07:EC:6E:11:4A:BE:1A:89
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 01A10B4B1C161ADC77BDCA396FBE5DB7A81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 1A89
Signing time: Mon 05 Oct 2026 09:00:34 +0000
Manifest this update: Mon 05 Oct 2026 09:00:34 +0000
Manifest next update: Tue 06 Oct 2026 09:00:34 +0000
Files and hashes: 1: Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa (hash: rjml5J5gqgFMe9KzjlWTkxUk0orx3tU+r2zl+R9xROo=)
2: wcLWWQG314JWSm8pfpN9yL_5EII.roa (hash: D4VS38hxLq9k1urmiJ5Azd8OYDvuYJ5hUnqD5WiA9F0=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: hb/D0WDR6+/k28dPv3dCr1OlN5eaJgsouikoW3g0Jf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:4b:1c:16:1a:dc:77:bd:ca:39:6f:be:5d:b7:a8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Oct 5 09:00:34 2026 GMT
Not After : Oct 6 09:00:34 2026 GMT
Subject: CN=51d56812f98402cf92fc8d5707ec6e114abe1a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:91:06:ed:fd:8e:34:07:2a:fd:0a:8c:19:
c3:6b:82:a6:81:52:aa:44:ae:7e:9f:b5:09:79:69:
b8:d2:57:92:aa:d9:f9:79:fa:6c:6f:fb:9d:44:b9:
d5:11:aa:69:b9:bb:49:90:01:00:cd:b4:9e:71:40:
e6:0b:76:80:a6:1d:cf:c0:24:ac:25:ed:e5:f8:24:
27:73:a7:9f:60:3d:9d:46:c2:0e:c9:96:d1:40:89:
58:20:0d:56:c4:55:f0:50:eb:b6:c3:e8:2f:32:f6:
fd:61:df:75:93:d4:d1:e2:06:1e:7a:80:0b:87:7f:
61:e2:7c:bb:3f:43:04:bf:3c:5c:c3:88:8a:fc:21:
16:9f:1b:36:03:af:fd:44:6d:d9:10:45:9c:3a:d9:
74:cc:f5:e8:a2:d0:78:12:c3:28:bb:8d:3d:ff:54:
eb:7e:49:0d:51:5c:c3:28:ec:79:15:93:71:a6:61:
c6:ad:0e:f0:04:86:16:f3:ce:4d:dc:33:ae:af:72:
7e:30:c3:87:7d:07:0f:36:c8:4f:b5:8d:4c:0e:54:
68:4d:3f:86:69:7e:05:cd:d3:c4:62:c3:27:2e:38:
4a:44:9d:23:15:42:75:91:67:84:1b:9d:dd:67:61:
51:98:66:49:dd:28:25:28:f7:31:51:15:d2:8b:81:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D5:68:12:F9:84:02:CF:92:FC:8D:57:07:EC:6E:11:4A:BE:1A:89
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:3e:24:7f:02:d6:ff:4f:25:c2:fc:3e:46:be:5e:a6:b8:11:
20:6a:e0:23:88:ba:a5:06:21:38:ae:50:e7:e4:52:69:8e:68:
74:81:02:ee:76:f9:b0:a7:bc:a6:bd:46:0b:ac:70:0c:5d:b1:
97:79:83:9a:72:7a:6c:37:da:81:91:3a:dc:f7:b6:39:78:5c:
b2:34:d1:30:81:4f:52:11:5f:e4:0e:10:df:b9:05:7b:18:0b:
02:99:1e:f7:4f:19:fb:11:fa:14:10:6b:f3:8a:80:2d:a9:d1:
31:00:be:eb:40:b1:06:af:b6:b6:9f:4a:40:69:3d:29:fd:6c:
88:41:3a:2c:07:ec:4c:e1:87:74:6e:94:ce:b8:31:7c:63:09:
84:fc:fe:61:26:a0:8f:f4:c7:e6:db:9b:ee:9d:a3:39:1d:5b:
bc:78:9d:ea:d1:19:05:14:ba:93:8b:5b:ec:49:53:1f:11:a7:
a1:e2:50:e8:b1:c4:04:bc:2d:ff:e6:b6:7f:46:dd:76:99:e6:
07:5a:83:b6:03:f1:e7:40:8b:bf:fe:6f:04:5b:dd:48:9c:e7:
18:7f:97:54:df:d6:07:5f:dc:7e:36:29:31:47:d0:8f:5e:c5:
97:83:a3:6f:51:34:67:fc:50:e0:95:7e:ed:f4:c9:00:c8:33:
73:07:b1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:42:57 2026 by rpki-client