Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
File: xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft (raw, json)
Hash identifier: 8dIUV7HF/HPUb4DvUKCPF+BS0UKGUgV25LXRavfgGnQ=
Subject key identifier: D5:05:EE:1B:72:A0:56:78:28:2B:20:54:9E:EF:AF:4B:EE:F4:29:2B
Authority key identifier: C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
Certificate issuer: /CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Certificate serial: 01A15BFA46C61E188F2E8DE02420631288C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
Manifest number: 0C52
Signing time: Wed 21 Oct 2026 01:01:31 +0000
Manifest this update: Wed 21 Oct 2026 01:01:31 +0000
Manifest next update: Thu 22 Oct 2026 01:01:31 +0000
Files and hashes: 1: bkpFrc_6laoYbGdkqTlHlW-Qe80.roa (hash: p/3gwRkkBDXycKoUYkEzWpJbWT3T+RMybdZ5AMyzIgo=)
2: xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl (hash: dHTryWYkukAUhce8wpMF9DFLT6xFUr7z9l/nSFO9gRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:fa:46:c6:1e:18:8f:2e:8d:e0:24:20:63:12:88:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Validity
Not Before: Oct 21 01:01:31 2026 GMT
Not After : Oct 22 01:01:31 2026 GMT
Subject: CN=d505ee1b72a05678282b20549eefaf4beef4292b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:80:e2:68:a0:64:e3:b9:30:10:c9:22:19:
5e:35:f8:21:c5:de:4d:88:8d:7a:e3:0e:2b:23:a5:
5c:11:bd:42:44:ef:c7:04:33:78:cf:71:9c:b3:c6:
56:10:39:e7:a1:6e:fa:76:69:dc:98:66:c4:14:0d:
d5:5a:25:ad:c9:89:51:fb:04:bb:1f:c0:36:7e:21:
f2:68:ae:7c:61:97:48:bc:46:82:2d:20:23:8a:7d:
8c:72:5a:e3:7c:25:19:a1:7d:c8:d8:e5:83:6c:62:
29:33:71:3d:50:7a:2a:61:55:5c:99:0f:a1:5d:a2:
b5:b1:9c:0f:60:53:6c:a6:4d:45:0c:81:b9:4a:b3:
50:36:64:ce:91:a5:58:38:be:91:30:55:c4:65:72:
64:41:e3:f4:e5:87:cb:3e:21:06:65:71:ec:69:e5:
82:84:a2:4f:45:3c:2b:d8:7e:63:e7:33:9f:84:34:
7c:87:d7:97:86:fe:84:ed:f4:cd:00:83:02:eb:d9:
37:38:cb:38:0e:72:3b:2f:a7:86:74:26:e3:f6:5f:
a3:06:8a:9f:3e:e7:d4:30:e3:f0:b5:c6:99:df:1f:
cd:57:22:8b:bb:5a:ed:c3:07:d8:97:09:bb:c7:e4:
12:00:63:65:30:fc:b0:b4:06:d2:ab:52:cb:80:61:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:05:EE:1B:72:A0:56:78:28:2B:20:54:9E:EF:AF:4B:EE:F4:29:2B
X509v3 Authority Key Identifier:
keyid:C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:55:3d:6e:fb:ed:fe:10:06:ef:6c:c3:e6:50:cf:11:25:e9:
67:d0:15:12:20:07:68:74:79:59:3b:af:0e:22:04:7f:17:aa:
ae:38:eb:a8:60:72:70:f6:2e:63:65:a2:ad:bf:f9:14:fe:2a:
0e:9f:8e:e1:ac:80:09:bd:5b:a1:10:db:b7:3a:02:34:36:d4:
e4:c3:b3:7e:ad:17:c4:46:42:0e:86:15:3e:a0:d8:89:9e:79:
0c:50:d7:a8:99:bd:af:4c:84:92:d7:fc:1a:cd:69:d8:e7:61:
98:2c:b4:4a:d9:6c:ad:a8:d2:87:71:a8:6a:a6:85:0b:9b:18:
b8:7f:b5:a6:f5:73:1f:5a:1b:44:1b:23:46:ca:d7:cd:25:9b:
3f:2e:48:85:d4:63:f1:7a:40:ed:dc:84:f6:22:b0:88:93:ed:
d0:ed:31:81:af:f5:fe:77:14:52:e0:5d:4b:c4:94:5a:24:66:
cd:df:d0:8b:35:99:d4:97:b7:62:14:a5:c4:2a:a0:8b:e6:29:
9e:1f:9d:71:db:46:d1:40:21:99:fb:4e:e1:f5:7b:8f:63:e4:
a8:ad:c7:89:31:df:ec:7a:fa:bf:93:d9:b4:da:91:e0:8a:d4:
9b:9b:9b:cf:3f:9c:d8:54:1d:1a:ff:5d:ab:17:75:08:50:78:
5c:97:44:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 09:19:48 2026 by rpki-client