Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json)
Hash identifier: eZEVde/S+OcLxViqsCYbnzJHzIp3BFM2CLoeg/tjhR8=
Subject key identifier: 1F:E6:7F:EE:E1:1D:F7:4F:8A:E2:A1:66:65:48:AF:51:62:BC:CB:99
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial: 01A17438B8BDC0D9D02700FFC02D9306526E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
Manifest number: 10D9
Signing time: Sun 25 Oct 2026 18:00:36 +0000
Manifest this update: Sun 25 Oct 2026 18:00:36 +0000
Manifest next update: Mon 26 Oct 2026 18:00:36 +0000
Files and hashes: 1: 4Kxd8dm-CWu1jCIsUqmZWt5sIc4.roa (hash: RVAhzYMBRgQ2W1wIbtL6Kztr89B+xTCwvr6xBM79OwQ=)
2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: i0oBCnU9DHGqz1Mltithxwahrhzs0tthB9nDLfVfNF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:38:b8:bd:c0:d9:d0:27:00:ff:c0:2d:93:06:52:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Validity
Not Before: Oct 25 18:00:36 2026 GMT
Not After : Oct 26 18:00:36 2026 GMT
Subject: CN=1fe67feee11df74f8ae2a1666548af5162bccb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:54:7f:d8:ed:5d:d2:e4:ab:2d:65:a5:bd:
06:1e:67:9e:63:7b:a6:d3:b8:17:1a:e9:db:4e:fa:
08:13:ac:ed:cc:15:97:e0:29:67:81:3d:d3:52:60:
4d:d5:37:3a:3e:44:16:d8:6c:03:11:8b:5e:f8:be:
5c:e0:19:54:68:a4:c5:b7:22:d8:53:23:58:46:46:
2e:f6:f7:64:c5:87:aa:31:66:0f:50:d7:69:14:7e:
e4:76:5d:ed:39:e3:ff:7a:c9:f5:47:24:c7:59:67:
ae:e0:8e:77:49:e9:3b:81:75:e3:fc:d5:a9:aa:6c:
56:e3:a8:66:e5:d8:59:88:1e:89:8f:fb:e9:44:ac:
8f:6b:c0:f2:69:e3:5d:69:4f:0c:61:99:95:03:02:
d0:78:70:1a:e5:0c:ed:21:e6:11:03:04:c0:21:ba:
28:b9:91:f3:08:ae:d7:c6:b6:9f:a9:ec:85:b6:70:
09:80:3c:28:13:ea:18:b1:70:50:66:9b:b6:da:ae:
87:e3:94:d1:dc:3a:08:42:ea:bd:1c:31:d5:02:51:
3f:4e:65:c0:7c:3c:33:b5:01:3e:00:fb:07:dc:46:
59:86:bb:40:ae:d2:31:7b:45:41:af:be:98:52:c6:
32:76:1f:86:0a:c8:f3:d0:4d:58:c5:97:e0:dd:e2:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E6:7F:EE:E1:1D:F7:4F:8A:E2:A1:66:65:48:AF:51:62:BC:CB:99
X509v3 Authority Key Identifier:
keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:02:84:7f:65:0b:e4:27:93:f9:75:64:2f:08:2e:54:9b:97:
28:49:5f:54:b0:47:f0:83:5b:5a:3b:fe:84:c1:42:48:00:13:
84:42:e5:8f:6c:98:78:d6:51:a6:c6:ff:05:ce:5f:61:95:30:
06:2b:22:8d:86:58:45:13:5e:01:b1:51:bb:95:2a:1e:89:bb:
d3:9e:e2:62:f4:3a:eb:ea:6d:e6:31:fe:f8:22:8b:b1:02:00:
9c:6e:9b:62:48:a5:5b:57:1f:78:63:bc:7a:ce:a9:69:1c:f2:
11:47:df:26:8c:57:5b:f9:76:fd:e8:51:6e:fd:07:d6:40:84:
90:d7:25:af:30:fd:62:4f:9f:02:3d:ca:15:b9:53:a0:35:86:
ac:8e:76:89:d4:e6:44:47:b8:ad:17:2a:be:d1:68:f7:f8:74:
23:35:37:32:cb:50:29:4f:44:84:ec:45:6f:e0:a1:4b:0d:fd:
78:82:24:58:b6:f4:5e:bd:44:fa:df:65:ea:f6:6a:86:5d:ec:
51:d3:5c:d7:58:0b:17:32:7a:a6:32:2b:ef:85:9d:62:eb:50:
bd:3b:0d:f3:99:97:9f:8e:75:7e:58:94:83:d5:24:21:30:61:
14:7c:d9:54:7a:3f:c9:6d:ea:59:bc:5a:24:86:fa:07:f8:50:
9a:ff:81:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:47:52 2026 by rpki-client