Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
File: xDt0aX74sFcJ99OU0f4pUeidXFU.mft (raw, json)
Hash identifier: 9QeOI+0TixKlaDPStBp8v/jDIIUJHB1D5dGkAz6bZqY=
Subject key identifier: A1:7D:D8:2A:C6:09:BD:A9:06:4E:1D:3B:E0:E8:F4:D4:AD:33:2D:C3
Authority key identifier: C4:3B:74:69:7E:F8:B0:57:09:F7:D3:94:D1:FE:29:51:E8:9D:5C:55
Certificate issuer: /CN=c43b74697ef8b05709f7d394d1fe2951e89d5c55
Certificate serial: 01A1758231697A21A7918DAB47D580FE7C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
Manifest number: 01EB
Signing time: Mon 26 Oct 2026 00:00:28 +0000
Manifest this update: Mon 26 Oct 2026 00:00:28 +0000
Manifest next update: Tue 27 Oct 2026 00:00:28 +0000
Files and hashes: 1: cdK-ddxQ6uw5AVK3VADEiG5b7xU.roa (hash: kzD188j7ogf+ogrfaYMQ1BaJogJz8brxVXslH2Z+iS8=)
2: xDt0aX74sFcJ99OU0f4pUeidXFU.crl (hash: bdPOrmN9GIhGVQ9EvYEb0URglgH8YfQfdvi6nF+K4eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:82:31:69:7a:21:a7:91:8d:ab:47:d5:80:fe:7c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43b74697ef8b05709f7d394d1fe2951e89d5c55
Validity
Not Before: Oct 26 00:00:28 2026 GMT
Not After : Oct 27 00:00:28 2026 GMT
Subject: CN=a17dd82ac609bda9064e1d3be0e8f4d4ad332dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:04:3a:58:28:32:f3:43:47:06:20:06:d5:
eb:2f:4d:69:07:7a:34:d0:09:32:82:0a:db:8b:8f:
f6:97:05:5e:af:2c:bf:aa:ca:7f:66:3e:dc:b1:75:
e4:88:d5:03:7a:dd:8b:ab:f9:2a:96:cc:26:54:96:
fb:70:22:be:f8:86:f4:a7:68:7e:b7:7a:0d:95:0e:
1b:3f:45:6e:cd:7a:2a:70:c2:b0:e4:ed:19:3b:b1:
96:ad:03:07:9d:fd:d1:42:88:2f:47:7e:8b:db:de:
48:3e:6f:42:c6:af:d4:a3:ad:64:4e:3e:9e:8f:4b:
30:b6:e2:18:5a:3a:ba:d7:bd:55:6f:05:a6:f5:74:
57:5e:1d:bc:16:53:d6:38:11:08:85:2a:17:99:cb:
db:ac:e8:b2:33:43:c3:fb:c2:93:46:99:88:48:15:
0e:9a:fb:82:6f:9f:6e:75:a1:0f:3b:4d:c0:94:a6:
bb:6a:b8:b5:cd:5c:1e:d9:00:29:1c:47:91:6f:14:
2f:71:38:ab:14:da:90:32:06:18:94:6d:9b:23:ef:
41:24:93:b1:98:57:36:56:38:60:46:d7:8f:bd:3a:
74:17:d0:57:5c:92:05:1e:af:0a:73:97:95:e4:bc:
13:47:bb:99:74:ae:c3:9e:31:02:76:5c:7e:e2:32:
90:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7D:D8:2A:C6:09:BD:A9:06:4E:1D:3B:E0:E8:F4:D4:AD:33:2D:C3
X509v3 Authority Key Identifier:
keyid:C4:3B:74:69:7E:F8:B0:57:09:F7:D3:94:D1:FE:29:51:E8:9D:5C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:40:b5:83:ac:a6:f3:c8:76:34:5e:7d:2c:6f:be:a0:25:8f:
ed:86:33:f9:30:a4:63:0c:30:7f:31:0d:a4:ef:74:f9:37:e3:
9a:52:fe:32:7f:f8:79:dc:cd:e3:9b:37:4d:08:1e:47:39:83:
69:f1:f3:b7:b1:fc:07:27:10:9a:bd:a1:a7:dd:f8:6e:4c:80:
62:78:ca:ed:14:ba:8c:06:e9:f9:01:75:5c:fe:c0:f5:c5:a0:
fb:5a:99:2f:50:d9:4b:ac:23:b9:fe:0a:99:7c:de:b9:a5:9b:
d4:05:e0:e8:fc:25:07:59:30:74:f0:5b:25:4d:ae:00:e6:0b:
91:f6:c0:ce:1b:a4:64:54:ba:13:fc:69:7a:3c:1f:1a:44:4b:
51:75:ca:4e:cd:21:9c:ef:11:5e:80:d7:ec:d5:e6:ae:23:66:
0d:0f:9d:5a:c0:df:0e:4d:0a:89:f0:82:a6:c1:38:c5:46:2f:
c6:4c:c8:b9:e6:7c:3d:e0:1b:78:69:1a:f9:a4:18:ed:37:54:
b1:88:7c:8e:50:65:b3:42:d7:07:aa:f2:14:a7:d2:2f:fe:fb:
e6:47:2a:18:48:9e:2f:e5:d6:1a:d1:7d:38:a2:3f:0c:31:bd:
55:b9:40:e7:94:c1:06:6a:37:1a:41:75:29:96:c4:7f:60:dc:
87:2a:1c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:04 2026 by rpki-client