Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier: hWZ8/wtO4Bjj0p6fFKQOnWpGfy1gh2Y/e/UiAYgw5EY=
Subject key identifier: E0:91:D0:36:AC:A7:A5:B6:80:64:34:F2:83:9B:F5:36:EC:4F:1D:E9
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 01A1901E348108BB0ECF1C6171411EDA2CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number: 17DB
Signing time: Sat 31 Oct 2026 04:01:00 +0000
Manifest this update: Sat 31 Oct 2026 04:01:00 +0000
Manifest next update: Sun 01 Nov 2026 04:01:00 +0000
Files and hashes: 1: Cj9YGHvlLrMUi1SQsU7dObHSVlQ.roa (hash: ZPq9Z29tNM3JkEKWEncbVwe+zKH6BGs9kcyPYhZ/Frc=)
2: SpCNuk1u-hXCk_6chs0ukaT-xPc.roa (hash: KE7oMTHzlDHmctRL6sItqmo0AwEpnij4sNxyXYuwrUk=)
3: Vu85Nu-HoLeRv_52CEznI8bQbss.roa (hash: c6ty/wCdDrBOcI9jUvVNl5APK8YZjil4x8ZlNRshHvo=)
4: hwEYkWKezFU1S6DS8A0TF6JXUos.roa (hash: dJKRSf7F67Dm6ZGKlb7G6KP8NQfxdE863RZT2JIwE9k=)
5: kj0n6dD5Oy19P3eSGpW6sXPidMc.roa (hash: KnSRmZL/r55wQ34F0TOQmyUNo1O0fG3sUmtVLwDVu9s=)
6: lo3R5w_kTel81Z1irkIbzAD6F8Q.roa (hash: PuU1Xdn3kY1LjMwZS3Qaqe5MniakxiQ+Y+f6yTPGRCQ=)
7: nb0hXlBPQhPWTuMEqZzkSxkwpXI.roa (hash: 55gzjqx5n4gyySLdEurC8vvFbXFEosab3sYhqOZ+WA8=)
8: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: 0geOXIjHkkaaufqWnnZELRAgzz043O/I3dPLsa4OMBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:1e:34:81:08:bb:0e:cf:1c:61:71:41:1e:da:2c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Oct 31 04:01:00 2026 GMT
Not After : Nov 1 04:01:00 2026 GMT
Subject: CN=e091d036aca7a5b6806434f2839bf536ec4f1de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:fc:42:66:61:bd:95:16:22:fb:3a:e2:67:
f0:a3:15:3f:14:55:45:8b:12:47:66:9d:ec:bb:cb:
60:1e:41:d6:4a:90:31:32:ee:dc:64:72:79:80:77:
b8:5f:09:6e:79:ed:62:bc:88:45:cb:c4:15:84:38:
e3:f6:e6:72:5a:d4:6a:a4:52:f2:78:fc:f1:5a:5c:
a2:df:ea:a2:d0:0a:34:5c:85:e6:cc:4e:e4:9a:4a:
8c:66:80:eb:15:a4:1f:6a:83:80:7d:83:fe:f5:d1:
a9:65:16:fa:25:30:59:11:22:6b:51:3d:50:76:55:
65:92:67:db:9e:ae:92:8b:2f:67:b3:ec:31:e8:17:
61:f0:83:d4:64:78:5c:74:0f:83:8c:99:da:92:57:
4a:93:ab:1d:3b:aa:38:1d:95:6f:18:fd:a7:c8:aa:
da:a2:30:5a:5f:7c:57:63:67:26:fb:58:c0:ad:7c:
c8:4a:63:52:1f:e1:f3:57:bc:3b:5a:b7:fd:ac:d9:
21:b0:2e:a3:47:a1:95:6b:46:6b:16:93:cd:d0:b5:
3b:6f:72:a9:fa:66:ba:fb:51:4a:bb:50:a5:fe:0b:
ee:be:08:68:3d:2f:48:12:7a:98:df:5b:3e:de:22:
4a:2b:f0:93:b7:aa:3e:35:5d:b8:fb:e7:ad:f8:d7:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:91:D0:36:AC:A7:A5:B6:80:64:34:F2:83:9B:F5:36:EC:4F:1D:E9
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b7:52:50:8c:16:34:74:7e:a5:f3:86:cb:86:4b:7e:f7:35:
73:b1:31:89:c9:57:b2:ce:3c:3c:f0:e9:1d:b9:28:8e:1a:b5:
3c:50:61:ca:2c:a7:bf:c8:f5:6f:3a:d3:1c:cd:e0:d9:fc:e2:
a2:03:fa:9d:fb:19:39:3a:ef:95:12:57:2c:56:8e:1a:2a:ba:
5e:60:ff:93:f5:a3:92:08:63:15:65:21:80:37:36:72:ad:de:
23:fc:49:04:e3:2c:b3:8b:82:45:20:c9:11:45:0d:4d:b9:f2:
cd:80:0d:f9:46:c0:7f:d2:d3:0d:8d:cd:74:70:0e:40:95:60:
5f:5b:b7:a2:66:66:2e:a5:8f:2c:29:6e:b8:b7:2d:d1:81:0a:
8b:a5:64:a9:d6:c6:3d:34:e3:db:de:f0:83:98:4d:14:b6:76:
ba:7c:ed:61:a1:ec:06:ff:d3:c7:b3:b4:23:a1:26:6a:c7:f5:
d4:7f:9d:ed:6e:8c:f1:e1:1c:27:a4:bd:d6:25:a5:a2:6b:f9:
48:79:da:58:6a:0f:68:aa:3d:d8:89:f9:2a:33:d1:58:b1:a2:
fe:b6:3f:f4:f7:47:1b:2e:44:1a:26:2d:45:36:58:2a:9a:da:
4f:d3:ad:27:01:33:3f:ed:58:a1:4b:17:d2:9b:6a:16:ed:92:
64:43:9b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 10:05:00 2026 by rpki-client