Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
File: xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft (raw, json)
Hash identifier: x6bF9azAECU2VdO7u4XVfEEoVnjSQGw186zyP0ZTEaQ=
Subject key identifier: B0:F0:AC:32:16:C2:B0:A4:E7:76:8C:C6:D8:FE:AE:C8:7D:1F:85:20
Authority key identifier: C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
Certificate issuer: /CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Certificate serial: 01A06E708FE69B24E3B120E74702152B31AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
Manifest number: 0BD7
Signing time: Fri 04 Sep 2026 22:01:05 +0000
Manifest this update: Fri 04 Sep 2026 22:01:05 +0000
Manifest next update: Sat 05 Sep 2026 22:01:05 +0000
Files and hashes: 1: bkpFrc_6laoYbGdkqTlHlW-Qe80.roa (hash: p/3gwRkkBDXycKoUYkEzWpJbWT3T+RMybdZ5AMyzIgo=)
2: xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl (hash: L3TKWrWclpUUgFgxAPlbnET8rWsl4mTFL09L/eYlp1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:8f:e6:9b:24:e3:b1:20:e7:47:02:15:2b:31:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Validity
Not Before: Sep 4 22:01:05 2026 GMT
Not After : Sep 5 22:01:05 2026 GMT
Subject: CN=b0f0ac3216c2b0a4e7768cc6d8feaec87d1f8520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:54:cf:e9:49:ac:27:f1:92:9e:8e:b4:f3:
48:0c:f2:0e:d0:ba:e7:b7:44:c2:fd:ff:a5:f5:82:
0f:93:a5:06:48:c2:33:a2:80:7e:45:a1:a9:c5:a2:
69:36:23:0c:e7:15:f6:e0:ea:c2:83:e0:f6:8d:5f:
4d:cb:87:cc:7b:12:eb:de:fa:ab:38:36:92:35:98:
62:a8:8c:30:eb:07:d6:44:03:c7:41:70:02:3f:1f:
c4:d3:a6:8b:5a:23:15:dc:8f:76:dc:3c:d0:53:aa:
c0:53:a8:d2:e2:0b:09:d2:14:c8:14:38:ef:91:f4:
c0:32:af:06:6f:c2:68:f8:86:b8:04:a7:cd:63:d2:
34:8f:e2:84:82:5e:9c:e3:d2:a7:46:0a:97:a1:13:
39:e2:e7:45:a3:17:07:9a:3b:5d:18:11:ea:da:84:
f0:a8:a2:ee:fb:d2:5e:35:36:43:ed:7f:d8:f1:cd:
e1:70:a6:a2:42:88:f9:5a:a9:9e:49:f6:61:38:db:
7a:ff:98:20:59:cd:ae:ea:d6:cc:2c:bb:17:0f:f6:
a7:95:fb:78:22:bc:4c:ac:54:1d:f7:3e:a3:cb:d0:
8d:24:7d:69:de:e4:23:f8:17:ad:f5:25:b0:37:60:
95:94:d3:30:d9:0e:ca:45:4a:58:e9:d5:7f:b6:50:
a1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F0:AC:32:16:C2:B0:A4:E7:76:8C:C6:D8:FE:AE:C8:7D:1F:85:20
X509v3 Authority Key Identifier:
keyid:C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:db:b8:9d:35:a0:1e:f8:26:06:52:cb:83:3d:53:0b:a0:5a:
e8:63:38:78:45:99:16:fe:e7:e7:a7:a1:31:9a:ed:e5:e7:d6:
69:47:fe:b7:a1:4b:fb:64:2e:c3:ce:84:dd:92:5c:21:76:cf:
64:4c:27:91:ce:bc:df:28:cb:49:46:f5:84:c7:dc:1d:26:91:
dd:a1:8d:36:e5:96:27:d9:50:12:67:23:fa:8d:6c:59:df:78:
3f:cd:79:79:76:7a:a8:b2:1e:17:02:c1:9b:8f:6e:95:5b:b7:
f6:15:3c:6e:8c:51:62:a5:24:d0:c7:a7:4a:77:91:92:af:b5:
28:9d:59:5f:d9:4a:6c:ae:84:f5:b0:ac:f3:c7:53:e2:3a:d7:
08:80:82:7a:66:40:db:1a:44:93:eb:53:6f:ae:48:17:5c:73:
32:05:12:4f:d1:e2:e3:5a:89:dc:73:5c:00:fc:36:cf:5e:7f:
4e:95:64:dd:c0:fd:e2:b4:c0:31:54:18:8b:41:fa:fa:76:0e:
30:ba:1e:5f:e2:b8:2e:3e:96:fc:d6:e8:f1:b9:6a:21:6b:97:
5a:8a:a9:e7:9f:e0:90:2a:28:d0:a6:c9:e2:f8:6d:85:58:d0:
e5:15:93:83:49:7c:b8:f0:81:17:2e:b4:47:20:0e:b4:e6:ac:
08:ee:e5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:40 2026 by rpki-client