Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
File: xDt0aX74sFcJ99OU0f4pUeidXFU.mft (raw, json)
Hash identifier: /wHBLhMMaPFn90RoxvNePMad3TakixccZV+sD+0GZL4=
Subject key identifier: 1C:D8:C0:3B:35:B4:B0:6F:FB:61:93:2B:DB:D6:9E:B4:59:95:A0:06
Authority key identifier: C4:3B:74:69:7E:F8:B0:57:09:F7:D3:94:D1:FE:29:51:E8:9D:5C:55
Certificate issuer: /CN=c43b74697ef8b05709f7d394d1fe2951e89d5c55
Certificate serial: 01A06EDE788FED5DF01E9DCF358DCABFB033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
Manifest number: 0163
Signing time: Sat 05 Sep 2026 00:01:08 +0000
Manifest this update: Sat 05 Sep 2026 00:01:08 +0000
Manifest next update: Sun 06 Sep 2026 00:01:08 +0000
Files and hashes: 1: cdK-ddxQ6uw5AVK3VADEiG5b7xU.roa (hash: kzD188j7ogf+ogrfaYMQ1BaJogJz8brxVXslH2Z+iS8=)
2: xDt0aX74sFcJ99OU0f4pUeidXFU.crl (hash: +fBYKP+jQG6AZ+tFm2q8Xsy/8A3ZtP5wPO5+jK/CE+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:78:8f:ed:5d:f0:1e:9d:cf:35:8d:ca:bf:b0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43b74697ef8b05709f7d394d1fe2951e89d5c55
Validity
Not Before: Sep 5 00:01:08 2026 GMT
Not After : Sep 6 00:01:08 2026 GMT
Subject: CN=1cd8c03b35b4b06ffb61932bdbd69eb45995a006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:c0:70:8a:dd:0e:84:b2:2b:a4:34:ce:e6:
74:dd:b8:f4:0d:4f:8e:ca:a4:72:c6:8c:a5:b3:3a:
6e:94:99:84:50:d0:19:b8:de:77:82:57:dd:aa:3e:
45:ec:34:10:ec:34:95:3a:fa:9b:eb:bf:b7:2d:ad:
87:85:5e:95:9a:7b:42:d7:56:d5:aa:c8:62:18:4f:
b4:55:c5:ee:88:22:c4:19:ea:71:28:d4:ba:10:c8:
95:bb:02:19:2d:b4:5d:90:13:59:a4:20:5a:ac:37:
04:43:ad:2f:e8:86:fb:a6:85:17:a3:b5:f5:04:98:
74:db:36:7f:c7:78:ab:5f:dd:0b:ed:8f:41:c0:19:
c0:0d:f4:8a:cf:f1:67:fa:54:30:ab:6c:f3:f3:d9:
18:f0:b5:11:f8:80:4f:b7:a4:93:56:c3:fe:97:57:
f9:35:a7:df:bf:6b:f5:91:48:00:8d:bf:cc:a1:ec:
a1:b0:46:38:d0:95:c9:08:27:54:f4:9a:0a:29:7a:
42:ff:9e:0a:e8:4f:9c:01:48:8a:0a:10:00:bc:8d:
f6:a4:88:c6:c4:30:d0:39:2c:9d:61:a2:dd:d5:86:
b0:d8:77:44:55:19:4c:20:74:1b:22:25:50:19:96:
03:ad:02:88:a1:be:bb:73:86:3a:8f:0f:f9:0b:5e:
c6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D8:C0:3B:35:B4:B0:6F:FB:61:93:2B:DB:D6:9E:B4:59:95:A0:06
X509v3 Authority Key Identifier:
keyid:C4:3B:74:69:7E:F8:B0:57:09:F7:D3:94:D1:FE:29:51:E8:9D:5C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:59:7f:72:76:a3:7d:94:6f:85:14:48:97:c5:bf:63:c0:d2:
2d:90:ce:8a:4b:4e:f9:2c:9f:5f:2e:e9:fa:a1:b0:98:dd:5f:
73:59:da:fa:1b:bc:ea:03:c3:40:1a:db:75:a0:ea:57:11:6f:
bc:f0:69:bc:36:f4:3b:c5:08:0c:44:ad:a5:5f:e5:28:bb:7c:
50:9d:e5:ff:dd:c8:3f:97:47:e0:12:3c:c2:ef:97:a5:8c:1a:
97:db:f9:6d:70:fe:08:4f:26:55:5a:91:62:90:9c:0f:84:97:
f5:89:d4:57:10:17:80:40:e1:be:a5:6e:c9:cf:30:6a:71:6f:
13:26:3d:2a:ca:ff:ee:73:09:88:0b:a7:55:de:cc:89:3f:69:
1b:7d:b1:c8:ed:ed:38:7f:88:22:4d:1c:e1:80:6e:c3:d1:ae:
58:42:38:40:e2:8a:d8:59:01:95:23:13:b7:54:fc:0e:cb:7b:
ee:1f:23:8c:73:ea:be:90:1a:a0:77:57:4f:11:da:8f:24:ba:
0c:f4:2d:6c:95:6e:66:42:5e:ad:35:40:07:e7:86:3d:f3:17:
1e:a8:94:7c:9a:5a:84:ba:bf:08:ad:b1:08:4b:6b:31:92:3a:
30:a9:19:9d:d6:81:6b:28:6a:9c:89:b0:57:bc:6e:ac:91:b2:
fd:68:b0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:40:56 2026 by rpki-client