Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json)
Hash identifier: NjzxpBeKyjVBRVxjd7PA5XNcHjnHjUhYYAvcOseftPM=
Subject key identifier: 66:19:E4:99:7E:E8:10:36:6E:8C:C2:38:F3:C5:F1:2D:CB:33:B1:C9
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial: 01A06D9480FA2B09A31CA18669B4F43C38FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
Manifest number: 1051
Signing time: Fri 04 Sep 2026 18:00:43 +0000
Manifest this update: Fri 04 Sep 2026 18:00:43 +0000
Manifest next update: Sat 05 Sep 2026 18:00:43 +0000
Files and hashes: 1: 4Kxd8dm-CWu1jCIsUqmZWt5sIc4.roa (hash: RVAhzYMBRgQ2W1wIbtL6Kztr89B+xTCwvr6xBM79OwQ=)
2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: RdA6JM+dpXpYsp3W/9ln/NvDGdnMIwZ7aQxvjnACdsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:94:80:fa:2b:09:a3:1c:a1:86:69:b4:f4:3c:38:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Validity
Not Before: Sep 4 18:00:43 2026 GMT
Not After : Sep 5 18:00:43 2026 GMT
Subject: CN=6619e4997ee810366e8cc238f3c5f12dcb33b1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:e4:ef:6c:f1:ae:64:e8:54:1e:67:3c:b2:
b2:8a:1b:87:ca:01:9d:7d:6b:04:b8:19:4a:d5:24:
ad:a2:8e:82:24:8c:d7:09:30:f8:bf:9d:bd:41:4f:
4b:1e:23:30:46:9a:a8:71:4c:a8:4a:30:51:0a:91:
fe:d9:69:3c:e1:ef:9e:d0:ad:c4:12:d8:8b:68:cb:
8d:5c:d8:42:25:9d:c6:73:7f:47:da:0b:35:a2:c5:
5b:34:70:56:af:74:c7:97:08:4d:29:58:e9:54:c3:
02:2a:60:c4:7b:06:cd:72:dd:96:60:24:4f:92:70:
23:32:35:8b:20:11:3f:ad:89:ac:83:91:58:68:3c:
c7:be:91:92:15:13:9e:d5:22:de:0f:f1:52:d4:b7:
e9:09:2a:a7:ae:9a:de:af:45:b9:35:92:08:e7:ee:
51:30:c2:75:3d:b6:ac:5d:78:dd:3c:38:28:e1:39:
36:81:01:bf:ac:d6:06:1d:d6:5e:c0:d7:91:b2:f6:
39:0c:2f:09:61:b2:94:d3:11:cb:9c:3a:77:1a:a6:
25:cb:97:7e:b4:9d:d5:79:ea:df:70:c2:90:bb:a1:
4f:2f:e3:52:10:70:c4:95:de:79:13:1b:bc:e8:89:
6a:fb:1c:30:ee:d6:02:5a:b9:2b:b8:73:67:1e:78:
89:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:19:E4:99:7E:E8:10:36:6E:8C:C2:38:F3:C5:F1:2D:CB:33:B1:C9
X509v3 Authority Key Identifier:
keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f0:1d:b4:d1:c0:4c:d6:bb:0e:f3:14:c0:d1:ea:11:01:70:
a6:de:63:48:fe:65:d0:df:19:9d:e4:6f:13:10:c8:8a:c2:6b:
f9:03:d6:46:54:77:4c:9f:81:ea:85:06:08:51:69:c9:87:4b:
31:b5:86:61:6b:d5:50:de:18:9e:c1:48:44:37:be:4b:b6:6c:
68:db:f3:03:12:e9:b8:36:81:45:eb:dd:6a:4b:a0:88:f0:03:
f5:92:4e:77:37:98:f3:ca:dd:1a:23:1e:57:af:df:1a:d7:c3:
0d:05:f7:38:17:8b:ca:97:47:81:74:d0:41:52:6e:38:db:6a:
cc:7f:f0:c0:b5:aa:b6:49:48:89:3b:ea:0a:9e:ba:fd:82:6c:
fb:c7:35:c5:78:37:18:47:83:b2:24:94:49:9e:09:d0:32:8c:
6b:f2:79:0d:0a:91:f2:6d:59:27:a1:69:e5:4a:a0:6d:31:c9:
48:f3:e8:52:9d:fa:f0:aa:c4:3c:63:b2:07:a7:9f:bf:57:f1:
bd:f9:3d:df:68:93:c1:d7:67:eb:8e:84:d5:2e:bd:1e:c6:3f:
58:13:f9:93:08:aa:be:15:b8:5b:60:6b:77:a7:fc:61:3f:37:
a4:74:67:ac:8f:91:81:2a:71:56:ba:4f:d3:50:7a:7e:87:72:
01:5d:c5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:50 2026 by rpki-client