Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
File: x1es7dSIRbnr0Muqfb2ri8z9jWE.mft (raw, json)
Hash identifier: TFWfkz85u7akEIHXSdYr3zvW+XeoM+SEx2hwsavRDTc=
Subject key identifier: E7:8A:DD:38:E1:68:8A:79:84:C4:6A:94:20:8D:8E:2F:C9:A7:1B:7E
Authority key identifier: C7:57:AC:ED:D4:88:45:B9:EB:D0:CB:AA:7D:BD:AB:8B:CC:FD:8D:61
Certificate issuer: /CN=c757acedd48845b9ebd0cbaa7dbdab8bccfd8d61
Certificate serial: 01A1931FA55E4B95DAF4B9FF18318E109328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
Manifest number: 014A
Signing time: Sat 31 Oct 2026 18:01:26 +0000
Manifest this update: Sat 31 Oct 2026 18:01:26 +0000
Manifest next update: Sun 01 Nov 2026 18:01:26 +0000
Files and hashes: 1: 1-Urp8rAL1ZSmlkxaPOzl5pj6sR8.roa (hash: eq+9SCGsso6J0nmlRfLYKk2u+tOTbol21TaNCHcqDic=)
2: YBBatb3zVPdSOcJ9MpSHMK867-k.roa (hash: IlKGC7X7khejWn4GInerZOXh0TDt6Gd+xhqLmW0TfU4=)
3: x1es7dSIRbnr0Muqfb2ri8z9jWE.crl (hash: imWo024Y588xZwoI+KMTOTE0QYsKxFLjhnOCgPj6UYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:1f:a5:5e:4b:95:da:f4:b9:ff:18:31:8e:10:93:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c757acedd48845b9ebd0cbaa7dbdab8bccfd8d61
Validity
Not Before: Oct 31 18:01:26 2026 GMT
Not After : Nov 1 18:01:26 2026 GMT
Subject: CN=e78add38e1688a7984c46a94208d8e2fc9a71b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:00:94:fc:f6:10:76:7f:c9:d6:89:83:85:
0d:15:86:18:7a:84:70:da:a9:2f:21:6f:63:dd:a6:
75:d9:a4:a4:18:13:00:2e:72:44:22:4d:cd:86:1f:
80:51:6c:60:0f:a1:13:48:b1:2b:85:e1:84:51:11:
72:d7:36:04:06:75:af:32:9b:a6:43:cb:40:7c:61:
65:3d:4e:43:2d:c6:49:dc:ae:07:e8:66:8a:de:1b:
c8:de:65:49:80:0d:f8:57:94:e3:84:26:44:aa:2c:
f1:0d:7f:3c:12:ce:ad:91:44:ae:56:f4:1e:6a:e5:
72:35:de:71:68:3a:6a:4c:bf:be:9d:6f:cb:8b:df:
00:1d:8b:99:59:dc:97:10:cd:f4:83:a3:21:9e:78:
4f:ff:b0:63:43:15:55:84:96:1a:a7:e3:ac:c4:3f:
52:dd:a0:e3:e6:51:9d:14:89:55:52:93:95:ca:97:
c2:c0:da:06:e1:d7:15:5d:25:c3:7f:fe:ce:2d:c2:
f9:93:38:d6:95:fc:c9:ee:ca:05:bd:3f:c7:e2:13:
58:6a:3d:c4:5c:0f:33:b0:38:da:60:4b:05:41:06:
72:b4:f3:87:db:5b:0f:ad:a6:f5:19:ff:0c:cb:e7:
ff:fe:ed:2e:8a:81:cc:dd:ae:32:1f:07:1f:0c:ab:
05:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8A:DD:38:E1:68:8A:79:84:C4:6A:94:20:8D:8E:2F:C9:A7:1B:7E
X509v3 Authority Key Identifier:
keyid:C7:57:AC:ED:D4:88:45:B9:EB:D0:CB:AA:7D:BD:AB:8B:CC:FD:8D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1d:dd:4f:bf:70:83:9b:7a:94:67:fb:fc:a7:f3:e7:40:96:
34:1e:fe:b3:94:38:26:a6:f4:8a:13:46:98:21:ae:9c:ab:8c:
fb:a4:ef:e9:80:0b:40:77:ef:0d:08:b2:90:85:1e:d4:06:47:
12:41:ff:d3:d3:c5:ca:c8:c3:c7:57:cd:67:c2:b4:15:b8:ba:
89:af:7e:59:3d:19:94:7f:09:4f:e1:ad:6e:4e:cf:ca:d3:fe:
c7:03:10:f9:07:77:fc:38:ff:fc:89:99:8e:c7:d8:08:ca:6f:
7b:7e:1d:55:21:5c:fd:3d:e1:69:5b:2f:c2:ef:09:58:49:52:
d5:e1:8a:85:4f:0c:df:7d:45:84:05:49:0c:07:40:f6:3a:67:
1d:07:65:3c:12:f2:24:b4:8e:65:c0:d9:eb:7c:85:96:0c:cf:
2c:7e:f4:7e:e0:bd:4e:3b:81:58:5a:65:10:b7:3d:b8:b5:52:
31:1d:d6:b0:49:ed:d6:8a:66:4f:31:37:12:01:25:f2:cd:28:
6d:8e:aa:fc:6f:66:26:2f:49:09:bb:da:ab:90:bd:82:b1:67:
d8:38:87:68:a7:c9:dd:18:81:69:59:a7:58:08:3f:ff:4b:68:
e1:e6:e8:91:1d:a2:58:06:5d:df:69:b8:dd:12:eb:e4:e4:de:
dd:e7:97:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:51:06 2026 by rpki-client