Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
File: xnSbIhBmFd8RMq2lGekgcJLy26o.mft (raw, json)
Hash identifier: zoOwK6GsPH5p2/Z2F2H9v5Lgcm5ps/8Ej0Buc32JtmA=
Subject key identifier: CE:13:DF:F7:AB:18:90:78:71:C9:59:DF:EF:32:CD:98:AD:67:48:0C
Authority key identifier: C6:74:9B:22:10:66:15:DF:11:32:AD:A5:19:E9:20:70:92:F2:DB:AA
Certificate issuer: /CN=c6749b22106615df1132ada519e9207092f2dbaa
Certificate serial: 01A18B6596330052D20B25A8692E238731D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
Manifest number: 0146
Signing time: Fri 30 Oct 2026 06:00:52 +0000
Manifest this update: Fri 30 Oct 2026 06:00:52 +0000
Manifest next update: Sat 31 Oct 2026 06:00:52 +0000
Files and hashes: 1: eIdFh6Y2hgdzeMtjgTPa_J9JiIQ.roa (hash: gOJ1QVyv1enp2QMYeZEi64KYRWZktKrcxHdJcaTNmH4=)
2: xnSbIhBmFd8RMq2lGekgcJLy26o.crl (hash: OtsH7OifFwuYGT9S+YHyXE1mmPw7CedKQQfGmfM265E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:65:96:33:00:52:d2:0b:25:a8:69:2e:23:87:31:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6749b22106615df1132ada519e9207092f2dbaa
Validity
Not Before: Oct 30 06:00:52 2026 GMT
Not After : Oct 31 06:00:52 2026 GMT
Subject: CN=ce13dff7ab18907871c959dfef32cd98ad67480c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:6a:ca:d3:9c:a4:e6:60:66:3f:14:74:65:
e3:cd:b4:63:c8:fe:69:ad:5b:f4:a2:58:ca:21:28:
90:aa:e0:13:e2:85:26:f5:bd:e7:fb:ed:5e:80:1f:
32:90:38:56:a1:7c:25:36:e0:74:07:bd:b3:10:ff:
b8:26:89:76:e3:ff:94:a0:49:21:5f:f4:54:7e:0f:
98:06:03:ff:d4:c4:cf:3e:8c:eb:c0:cc:a6:d4:66:
76:c8:0a:8c:da:c7:db:52:ef:53:86:57:ea:dd:fd:
72:6d:d6:fb:9f:cb:6b:a4:86:05:13:9e:98:fd:90:
ba:1a:31:2b:3c:2a:84:d9:e0:cb:85:8b:7f:33:74:
46:8d:6d:86:ff:38:ff:85:fd:27:10:d1:f8:f4:0b:
03:39:c3:e8:95:8f:ab:f9:3b:32:e0:af:01:4d:35:
08:b5:80:7d:0b:2d:a0:66:8d:21:f9:e6:ca:ad:71:
01:af:e6:81:bb:4f:0b:3d:83:15:12:11:c8:2c:52:
b1:c6:80:21:18:16:db:a5:dc:80:ad:7f:9f:90:ba:
1c:1c:f2:fe:1b:34:dd:64:5c:c3:80:ba:b9:76:8e:
67:ca:d6:fb:02:79:d5:b8:92:c9:72:bb:ac:df:4c:
68:72:d6:8a:37:56:ad:06:ac:80:29:7d:0f:5c:ff:
eb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:13:DF:F7:AB:18:90:78:71:C9:59:DF:EF:32:CD:98:AD:67:48:0C
X509v3 Authority Key Identifier:
keyid:C6:74:9B:22:10:66:15:DF:11:32:AD:A5:19:E9:20:70:92:F2:DB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9d:fe:68:d9:c7:95:36:ef:16:cf:6c:0c:2e:39:ce:3b:ca:
47:1f:76:ff:74:df:37:61:f7:4a:76:01:e3:56:9c:b1:5a:bc:
60:d1:fe:c0:20:84:cf:1c:f4:f9:b5:48:6f:5a:f7:71:a5:34:
c2:90:2d:0c:de:95:7b:d4:d4:7f:94:ba:1c:36:89:f4:d9:cc:
15:9e:55:e1:e6:8a:7b:c6:a3:1e:cb:aa:89:78:94:68:17:89:
57:c7:53:9d:ac:ed:21:b5:d9:7c:76:95:7e:73:94:83:ab:07:
18:73:23:03:22:1d:e7:53:09:b8:52:c7:37:22:10:7b:48:dd:
1c:b1:21:43:df:be:96:81:31:0f:67:9e:23:b4:28:4d:eb:f8:
8b:5b:3b:d4:d4:f9:1d:80:e9:f2:53:45:77:61:e7:48:c1:35:
76:a4:3b:8c:c6:19:6f:89:ae:82:f5:9b:1e:9f:9e:d6:d8:16:
a6:8e:70:f6:79:30:4c:3e:12:8a:d0:44:40:07:fc:3c:b4:85:
a1:a5:fc:05:fb:17:25:d8:38:81:0c:69:2b:b6:7e:b0:d7:77:
16:10:ff:b9:40:75:0a:ff:ae:b4:0f:89:c7:09:21:11:50:44:
01:28:70:80:21:40:44:68:c0:7c:76:74:bf:9f:56:3b:16:da:
a2:3a:92:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:26:14 2026 by rpki-client