Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: Z3rzFtHz8cRpBj4ROElNiQ5GgbDOBGwRdXbFO7i+wO8=
Subject key identifier: 88:4E:C1:DE:0F:8B:54:63:B9:40:74:BE:8B:7A:68:6C:5D:45:93:00
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 01A17213473853BECBA5872AEB4E293A2962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 0C6C
Signing time: Sun 25 Oct 2026 08:00:28 +0000
Manifest this update: Sun 25 Oct 2026 08:00:28 +0000
Manifest next update: Mon 26 Oct 2026 08:00:28 +0000
Files and hashes: 1: OBJUqWKdq6kiQbp0gg2le_lxwc8.roa (hash: Q6TNVRFJT35RFtqmG8IVN0WlQLvaNhPi6XH41fNOOas=)
2: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: RxEprMwJtd/ht+ljV8YWgEq2RiKUB5sGw6d/QMLL0E8=)
3: pDXgmFSEjeXu5kTO9JnxKOTny04.roa (hash: zBFnWy98uBKGBRB8AClKYux+jyTzJfSF7W9SKPlT+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:13:47:38:53:be:cb:a5:87:2a:eb:4e:29:3a:29:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Oct 25 08:00:28 2026 GMT
Not After : Oct 26 08:00:28 2026 GMT
Subject: CN=884ec1de0f8b5463b94074be8b7a686c5d459300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:2b:c2:39:8f:28:f5:64:d0:96:8e:d0:69:
2f:74:c7:61:35:86:96:d2:d6:73:af:4c:45:2c:1b:
99:6b:e7:c8:a5:27:f1:4a:88:ae:f0:74:d3:f4:91:
be:b7:20:7d:93:6a:29:33:f3:16:af:05:2f:a2:0b:
a5:34:66:cc:54:6a:65:c5:86:5e:0e:65:b2:ae:6d:
10:fc:c7:e1:a1:ff:9b:50:b4:e9:b5:20:fd:30:48:
c5:03:71:c8:9f:68:d4:04:30:3a:8a:b9:b2:c3:61:
dd:3c:b5:c5:f3:4c:f0:38:e8:b4:be:22:f3:10:2a:
10:87:06:54:db:93:21:84:34:8e:43:c2:bb:8d:8c:
46:ef:83:76:f9:e3:74:3f:44:93:bf:eb:5d:40:71:
76:f5:d4:d7:d0:e7:38:5e:7b:2c:f8:8a:e1:29:b9:
4d:c4:44:08:ad:04:80:c2:d2:32:02:1e:bb:2c:9a:
e4:e9:4b:48:bd:7e:1c:58:64:e9:ce:70:02:b8:38:
4c:5a:4f:68:9b:81:91:62:cb:45:85:76:c6:06:f5:
8c:0f:13:84:97:b9:6d:eb:54:83:49:3b:0f:5b:5d:
a4:6f:eb:94:46:5e:97:44:ba:c8:73:3e:fc:1e:7a:
26:f1:b7:47:c2:ff:dd:66:02:a0:b3:dc:30:d3:a2:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4E:C1:DE:0F:8B:54:63:B9:40:74:BE:8B:7A:68:6C:5D:45:93:00
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ca:4b:77:eb:bf:95:e5:d8:96:dc:6a:f7:d5:f2:ec:61:b1:
0e:e0:43:15:12:85:7d:af:98:6a:ae:ac:b2:bb:4d:fb:7b:60:
6a:64:7d:58:87:75:19:78:50:d9:32:c0:2e:14:72:8d:9b:a2:
c8:c6:39:b4:c4:15:67:ed:38:70:c1:18:df:c2:db:f2:5f:5f:
b8:4d:1f:44:55:86:3e:a0:9c:0b:d9:19:15:1e:28:bd:e5:7c:
58:d6:40:ff:8c:aa:40:cb:4f:1d:0e:52:1a:68:a5:5e:2d:10:
54:91:60:c6:c4:f2:82:93:b0:b0:6d:dc:54:b6:f7:4f:f3:6c:
93:5c:69:a8:fb:04:74:9e:0a:5a:ea:c4:b3:33:18:47:a8:14:
15:b2:16:d1:96:62:d6:88:6d:d9:2c:01:f0:31:8f:57:e7:eb:
7c:ba:72:8b:75:a7:2d:a0:54:d3:7a:8d:23:b3:85:b2:31:b8:
8f:2e:c2:51:39:c2:50:79:bb:fc:a3:90:4d:65:d0:26:5f:a0:
84:7c:70:c1:73:77:9e:9a:ad:62:1b:89:08:44:48:eb:53:1b:
c3:78:9e:ef:70:24:d8:0a:47:48:f5:66:fb:2a:ad:ec:14:bf:
c4:02:c7:74:be:0f:d2:49:fc:88:8b:ce:8b:fa:73:33:fa:a6:
66:fe:db:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:37:29 2026 by rpki-client