Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File: xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier: CtpQUIU7rsrUrD2IwK7xt4k0T3Cl0YvzgJMqiIL9W3A=
Subject key identifier: 4F:85:E3:29:13:8C:91:AC:AC:D7:A7:EF:A4:CA:70:3A:6F:5B:E0:48
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 01A1141837924EE3A0F24360DDB8BC0E8133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number: 1A94
Signing time: Wed 07 Oct 2026 02:01:33 +0000
Manifest this update: Wed 07 Oct 2026 02:01:33 +0000
Manifest next update: Thu 08 Oct 2026 02:01:33 +0000
Files and hashes: 1: GpZIgv126Cl3UoGhkY1Uvof1iPY.roa (hash: fP30v2kEF8neAtWHSrqD3PG/OVeu+YIU3qixidi5CQc=)
2: idf0hZZENN-4_aae9KN1w6rgM4Q.roa (hash: qK834woHIrutz8SD0paYhf0sMnrUCo/j6IC8hJut1/0=)
3: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: Kz8tqiuCZ2Xn9kmlOc9ON8fj1Clo6/u2WPpqkAcwu7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:18:37:92:4e:e3:a0:f2:43:60:dd:b8:bc:0e:81:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: Oct 7 02:01:33 2026 GMT
Not After : Oct 8 02:01:33 2026 GMT
Subject: CN=4f85e329138c91acacd7a7efa4ca703a6f5be048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:90:45:bc:60:22:6b:a3:05:12:d2:5f:7c:
d4:16:b8:fe:60:85:0e:c3:af:53:2e:ab:62:78:b6:
31:0c:c4:12:fd:8b:b1:bf:5f:49:ca:62:98:7d:ff:
56:e1:f2:47:46:c4:30:a4:a5:6e:59:44:4a:f2:0f:
ce:22:34:19:da:a6:84:f9:bd:73:37:72:3b:ae:82:
4d:b5:f1:08:74:55:42:1c:ea:91:e3:25:7a:19:ca:
a2:c7:f1:06:10:fd:f1:fc:45:6b:cb:36:1c:22:26:
19:cf:c8:26:0a:f8:0f:b5:a7:f3:08:b7:14:86:3c:
3b:ff:99:29:3d:2b:95:00:7b:56:54:45:57:3e:fb:
8f:23:a3:c5:e5:77:a3:a2:c6:59:8b:14:bc:bf:1e:
f8:03:28:c7:b7:9b:ed:f6:98:de:61:d5:3b:7d:93:
9c:fc:41:11:19:71:d7:19:39:1d:49:cd:83:00:41:
32:13:e8:ec:fb:ca:9a:59:be:b9:d2:22:3b:83:a8:
61:fc:fc:b2:d7:d4:11:e0:6f:ce:a1:95:a0:90:5c:
d9:0d:80:21:e5:76:98:16:73:44:3f:43:25:3b:25:
df:c5:60:a8:60:65:23:cd:1f:d2:35:b1:5a:2b:5a:
8b:80:12:67:ef:68:5f:7a:8b:d9:d5:e7:21:03:97:
93:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:85:E3:29:13:8C:91:AC:AC:D7:A7:EF:A4:CA:70:3A:6F:5B:E0:48
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:10:05:aa:ba:fe:b7:51:70:a0:b6:96:da:cd:ec:f0:66:ec:
9b:a9:5f:e7:73:6b:89:d0:2b:74:70:99:0f:55:14:20:f9:a7:
1f:0b:f9:a5:6e:54:df:9f:42:1e:01:0b:07:0d:3b:4d:ff:d7:
29:d8:ef:5c:0a:73:16:9a:52:44:51:b5:f3:8b:3f:a4:ea:77:
0d:59:cb:61:04:4a:a4:9f:5f:92:c1:5e:13:49:53:ee:85:d2:
30:e3:a9:49:b6:1f:4f:ca:a6:85:28:29:aa:7f:62:76:90:d5:
82:5a:81:6b:4a:cb:0f:4b:dd:b2:12:97:d7:18:83:1e:ae:ec:
82:62:bd:e5:8f:dd:9c:cf:11:fd:e0:f8:52:bf:58:0a:1b:9b:
6e:c9:c4:36:df:fc:1a:d0:55:c6:76:d0:7e:f4:22:f2:15:b0:
f4:0a:77:37:aa:89:3e:cb:1f:7a:cb:f0:13:b9:16:67:6a:1e:
39:f6:49:29:2d:07:a6:e3:81:5b:80:51:de:72:75:47:b5:07:
73:96:e5:56:1f:37:81:e2:24:64:f7:f0:45:a3:17:55:43:a0:
b1:d8:4e:ea:da:4d:ce:2f:ed:05:6a:2f:75:88:26:3a:08:7b:
50:a1:c6:f9:9d:4e:75:87:ef:3f:5f:cf:35:3b:87:78:f2:f7:
49:be:aa:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:08:08 2026 by rpki-client