Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier: Aa1PIma5lQhXEsR5LMENB6Hm2vemmkL3y942s35GkOI=
Subject key identifier: A1:9D:03:9E:BA:78:92:5B:79:72:B4:F5:8B:3D:05:47:F5:E5:D0:1E
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 01A1920C228019E02B2140F197BE06935D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number: 17DC
Signing time: Sat 31 Oct 2026 13:00:31 +0000
Manifest this update: Sat 31 Oct 2026 13:00:31 +0000
Manifest next update: Sun 01 Nov 2026 13:00:31 +0000
Files and hashes: 1: Cj9YGHvlLrMUi1SQsU7dObHSVlQ.roa (hash: ZPq9Z29tNM3JkEKWEncbVwe+zKH6BGs9kcyPYhZ/Frc=)
2: SpCNuk1u-hXCk_6chs0ukaT-xPc.roa (hash: KE7oMTHzlDHmctRL6sItqmo0AwEpnij4sNxyXYuwrUk=)
3: Vu85Nu-HoLeRv_52CEznI8bQbss.roa (hash: c6ty/wCdDrBOcI9jUvVNl5APK8YZjil4x8ZlNRshHvo=)
4: hwEYkWKezFU1S6DS8A0TF6JXUos.roa (hash: dJKRSf7F67Dm6ZGKlb7G6KP8NQfxdE863RZT2JIwE9k=)
5: kj0n6dD5Oy19P3eSGpW6sXPidMc.roa (hash: KnSRmZL/r55wQ34F0TOQmyUNo1O0fG3sUmtVLwDVu9s=)
6: lo3R5w_kTel81Z1irkIbzAD6F8Q.roa (hash: PuU1Xdn3kY1LjMwZS3Qaqe5MniakxiQ+Y+f6yTPGRCQ=)
7: nb0hXlBPQhPWTuMEqZzkSxkwpXI.roa (hash: 55gzjqx5n4gyySLdEurC8vvFbXFEosab3sYhqOZ+WA8=)
8: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: jjLW9A2GOgRKSkRcSuUlZaR0mNsCM3g7w7Xb2MlIM5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:0c:22:80:19:e0:2b:21:40:f1:97:be:06:93:5d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Oct 31 13:00:31 2026 GMT
Not After : Nov 1 13:00:31 2026 GMT
Subject: CN=a19d039eba78925b7972b4f58b3d0547f5e5d01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:22:62:46:9e:3f:a8:8e:24:00:8d:5f:55:
d0:09:73:07:9a:7c:6e:91:4f:62:5a:f7:d5:05:46:
6f:7f:74:77:74:03:e3:d0:18:a7:ca:8e:d7:9f:e8:
b5:4a:3d:aa:51:35:8d:8d:cd:78:7d:1d:6e:11:5a:
69:4e:6f:4c:f7:e6:c6:2d:15:97:cc:3e:7e:98:3a:
45:5e:b9:95:e1:14:f7:96:0e:fc:0e:64:42:ae:52:
45:d4:70:de:a4:30:cf:ba:b3:5a:eb:b1:08:e1:66:
e0:86:6e:3b:89:bc:11:fe:da:1f:ba:8c:09:53:5d:
e1:1e:cb:e0:fb:be:43:fc:07:0f:71:93:86:b4:74:
6d:0e:77:30:2b:ef:aa:51:d0:74:a1:11:ad:91:d2:
06:f3:09:b8:8b:74:bc:cb:3c:05:23:3c:8a:1b:22:
a9:43:0c:f5:7f:48:11:6b:93:7b:77:5a:53:a1:82:
45:ca:34:c6:66:f3:28:b9:aa:1f:e8:03:b9:fc:db:
33:2d:44:15:f4:3d:f3:fd:d8:e0:d1:5f:7a:31:b8:
1e:80:6b:e3:c0:0e:28:57:4b:a2:06:17:96:bd:ac:
bb:47:98:02:96:d2:ae:82:97:c6:8b:e7:e9:b7:0f:
23:2e:6e:15:63:bc:5b:f4:e5:75:1c:69:93:c9:9e:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9D:03:9E:BA:78:92:5B:79:72:B4:F5:8B:3D:05:47:F5:E5:D0:1E
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:da:4a:bb:1e:12:d8:5e:87:a8:3d:fd:0e:e7:e3:01:49:00:
45:77:51:4a:31:c5:0b:b9:b2:15:cb:ea:bb:23:e0:fe:10:5a:
13:ba:79:a4:08:8e:1f:0f:e2:2d:26:75:39:25:5e:07:98:29:
5b:dc:e5:ba:46:ff:78:cd:2d:98:c6:d8:a6:11:b9:7b:f6:12:
2c:cc:96:0c:13:42:13:32:d2:ba:99:ac:c5:8b:89:39:b2:0f:
ab:4a:d7:b8:8f:e1:60:0f:3b:22:15:e3:fb:e4:7e:a0:5b:b0:
90:3a:11:4c:6f:03:d0:6d:b5:af:33:6e:7f:fe:3b:62:45:18:
06:bd:34:60:17:f6:5b:28:7b:ec:b9:64:07:e8:62:30:b4:34:
fc:2f:ea:68:8f:dd:49:f6:0f:98:50:24:d0:6c:16:eb:b8:0c:
a2:c7:f5:1f:1c:b3:59:9a:ce:c3:a1:d1:91:30:85:85:3e:4d:
f9:b8:66:a3:3b:31:5e:3c:31:5b:1d:5d:35:c6:c0:45:4d:2c:
bf:74:42:c0:32:e9:3e:4c:15:51:82:66:9e:86:ba:6b:b9:16:
d9:4e:38:e2:76:42:c0:aa:87:0b:98:1d:35:7a:fc:ec:5a:f3:
11:5c:6f:a9:22:7e:76:1b:0c:e6:c1:d9:f7:4b:aa:d4:c8:83:
dc:b7:b7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:51:22 2026 by rpki-client