Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
File: xWYvmAINpON9UO07swICd08pLXo.mft (raw, json)
Hash identifier: K+S8C3XgpKIvS5/d5gWuJqJgwACrJ1vVkl8ISXK8idM=
Subject key identifier: 68:10:F1:52:26:56:AD:6F:EC:77:99:2E:5C:7A:EA:F6:F1:B6:32:B5
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 01A129C4078549D43B3036C87B193F55A24D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
Manifest number: 06F6
Signing time: Sun 11 Oct 2026 07:01:15 +0000
Manifest this update: Sun 11 Oct 2026 07:01:15 +0000
Manifest next update: Mon 12 Oct 2026 07:01:15 +0000
Files and hashes: 1: GS7fmdx-1g8pNEM-nhOk5nbSr44.roa (hash: sLHMX5pMnGnYMcV+wRUTNCFpFauzuLy29Qg1lFRshDs=)
2: Siehy75MP7vOcnXoZBK4YhzQRqE.roa (hash: kCQ7xcOauGt4TPo8jXT/okVbQR+al1IIKRImkP3hRYY=)
3: xWYvmAINpON9UO07swICd08pLXo.crl (hash: n3vaeU0DA4TVL5ia/L+reI9BB+YkYL2roSo8ziM5pYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:c4:07:85:49:d4:3b:30:36:c8:7b:19:3f:55:a2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Oct 11 07:01:15 2026 GMT
Not After : Oct 12 07:01:15 2026 GMT
Subject: CN=6810f1522656ad6fec77992e5c7aeaf6f1b632b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:bf:d4:8c:bd:52:f6:42:d0:86:89:0d:62:
10:0f:f3:d4:60:89:5b:1e:0e:ac:5e:27:35:a1:6c:
76:92:81:38:d6:23:c4:36:72:71:54:60:a8:85:73:
73:e6:d5:55:63:7f:d5:ff:73:6d:92:01:4a:ab:a4:
91:a5:0e:c0:e4:1a:61:e6:a4:ba:81:bd:1d:b1:7d:
84:41:f6:6c:2f:6f:54:ca:c0:9a:e5:a9:81:3b:6a:
1d:7f:a0:02:88:73:73:96:9f:84:c0:cd:cc:b9:9f:
0e:09:bc:2e:a8:a7:b7:6c:20:8d:8d:9f:1e:d7:f2:
bf:42:79:6a:90:b7:e2:a2:64:c5:f8:3a:39:9e:b2:
a9:29:02:03:47:86:9f:3f:c1:c9:1a:f3:3e:6d:00:
b2:6e:40:d4:9f:40:5b:a2:20:96:03:1e:52:18:82:
e2:80:08:da:19:25:36:2d:0a:e6:df:33:39:2a:bd:
fc:93:d8:61:d2:94:bc:f6:20:92:8c:71:e6:3e:ab:
57:a0:7c:d6:71:fa:31:6b:56:36:bd:7e:86:f4:d0:
62:a0:fb:03:48:6e:33:ce:df:32:4c:54:03:9c:b8:
3f:cd:51:85:6b:91:52:1f:83:09:bf:db:8b:b1:e8:
6e:d3:e9:dc:c2:9c:a7:29:13:58:b8:11:1e:4e:ab:
08:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:10:F1:52:26:56:AD:6F:EC:77:99:2E:5C:7A:EA:F6:F1:B6:32:B5
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d8:3e:fa:15:2a:b0:d7:42:cd:f9:32:d4:7b:32:f1:92:62:
dc:87:d1:65:c3:91:ed:cf:31:dd:f3:02:8b:e4:3d:22:ec:50:
6e:36:12:d4:e9:19:b6:f3:65:d0:a5:76:28:4f:98:9d:0f:dd:
fc:7f:18:2a:15:b5:09:af:f1:f7:4e:25:80:cb:0b:22:3e:92:
81:29:45:a8:45:d7:de:01:07:a0:d4:77:86:06:d0:ab:cd:d5:
28:35:2e:b8:5d:07:d8:59:62:6f:b1:4d:eb:fa:45:4a:45:4d:
27:25:45:5a:cf:5f:86:90:6a:35:54:a4:41:25:ae:0b:2c:44:
72:7f:83:d3:ba:9e:00:96:64:be:3c:8b:f2:a2:bb:bc:8f:eb:
b9:92:8c:a2:58:ed:a5:ae:c5:3a:e7:a6:59:3a:18:48:83:56:
a5:84:9d:33:80:94:bb:e9:d7:e5:ad:4c:c1:0a:3f:74:98:62:
d2:1c:17:63:e6:e4:94:82:9e:ed:55:e9:6f:4f:11:b3:ce:0d:
32:b8:08:16:d5:f8:80:27:7e:0d:e1:53:39:26:8a:49:18:83:
ac:26:b3:29:41:94:d5:67:cb:11:59:75:a7:04:e3:64:0f:aa:
c3:f4:1d:06:ac:71:5f:c4:b8:33:5b:95:c9:ec:af:f0:98:57:
4f:d2:a0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:41:27 2026 by rpki-client