Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
File: xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft (raw, json)
Hash identifier: rSnbSA2aqe4+C+RaZnHux2OjERN1l/lZLmf4z8tiDVE=
Subject key identifier: 40:E7:27:9F:37:A6:12:9D:53:0E:01:F8:90:61:A1:8A:C1:D6:F3:73
Authority key identifier: C7:3E:16:3A:37:87:05:48:D6:96:EF:03:30:64:6B:84:25:32:8F:28
Certificate issuer: /CN=c73e163a37870548d696ef0330646b8425328f28
Certificate serial: 01A17BF2E84FEA065FF9D26E61ABD2A8B511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xz4WOjeHBUjWlu8DMGRrhCUyjyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
Manifest number: 013E
Signing time: Tue 27 Oct 2026 06:01:19 +0000
Manifest this update: Tue 27 Oct 2026 06:01:19 +0000
Manifest next update: Wed 28 Oct 2026 06:01:19 +0000
Files and hashes: 1: WSJBCh2OsvZcrdAL-2hq6pN9tFg.roa (hash: PeDCYtSLNPlYm/YRPC7P1Ngc8lvfXH2IT/iFWw8s2T4=)
2: xz4WOjeHBUjWlu8DMGRrhCUyjyg.crl (hash: zrJ8vlL0KB3pxhbaTLyYjBl8BbOd/Aeo/4wG9R6jcB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xz4WOjeHBUjWlu8DMGRrhCUyjyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:e8:4f:ea:06:5f:f9:d2:6e:61:ab:d2:a8:b5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c73e163a37870548d696ef0330646b8425328f28
Validity
Not Before: Oct 27 06:01:19 2026 GMT
Not After : Oct 28 06:01:19 2026 GMT
Subject: CN=40e7279f37a6129d530e01f89061a18ac1d6f373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:86:ae:da:54:7c:00:55:22:b3:71:65:5a:
d8:b5:9c:c5:76:1b:b8:8e:30:0b:66:ee:8a:0b:fb:
19:b1:31:af:44:c1:81:00:d6:6f:90:b9:fa:ac:70:
eb:35:fd:72:41:67:ae:9b:9d:fb:1d:3d:3f:10:09:
dd:2b:07:d3:56:66:6e:4e:71:56:09:a3:af:51:03:
f2:85:be:f8:ec:36:2f:a6:a6:ab:09:6c:0c:3f:d8:
23:4f:d9:5b:a6:7d:57:8f:8d:78:cd:74:d6:57:f4:
f7:44:58:2b:5b:f7:a7:fa:8b:d2:71:23:7d:f5:2f:
09:66:60:b4:2a:c0:4f:0b:74:db:7f:ea:cc:4d:38:
35:99:86:05:79:00:95:b8:ac:26:ff:21:71:fe:d8:
3d:8d:1c:6a:c7:98:0f:72:5f:50:e6:24:e5:20:8b:
dd:31:63:cb:bf:fe:36:86:aa:9f:a0:cd:fc:85:26:
47:2c:ef:ee:f4:3b:f5:6a:f3:76:2b:06:f1:d6:86:
02:d9:1b:8e:be:43:3a:cf:ae:99:ca:f9:bb:71:91:
ef:aa:de:3b:e3:47:ae:40:fb:6f:3c:4e:b3:94:67:
47:d2:73:96:d3:0d:50:52:d2:3a:5e:b9:97:08:26:
85:42:c5:33:0e:11:9b:a5:1e:1a:a0:28:9a:5d:ce:
04:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E7:27:9F:37:A6:12:9D:53:0E:01:F8:90:61:A1:8A:C1:D6:F3:73
X509v3 Authority Key Identifier:
keyid:C7:3E:16:3A:37:87:05:48:D6:96:EF:03:30:64:6B:84:25:32:8F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xz4WOjeHBUjWlu8DMGRrhCUyjyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4b:fd:db:9f:d0:e1:0c:b4:e2:32:08:5d:08:e9:91:cf:3a:
07:df:20:96:1b:24:f7:bf:0e:c1:ba:7d:94:c8:81:b2:04:b5:
aa:35:6b:fc:c8:76:45:3a:65:1d:c8:8f:d5:67:bd:87:49:2f:
91:ba:fb:fb:39:84:d0:84:e0:30:ac:f7:b3:26:64:89:e5:9d:
74:da:38:22:1c:86:dc:e6:e3:b5:04:91:a9:7f:60:ab:33:e9:
2d:94:ab:39:ab:c9:b3:33:e8:8f:df:7c:86:0d:e9:2e:f3:00:
8c:e1:d6:01:ba:18:f0:85:c7:6b:95:5d:e9:b6:90:3c:68:0d:
f1:f2:5b:6f:38:1e:34:64:d7:bf:82:4d:d9:36:b2:8c:94:5b:
c5:2c:13:1c:0f:54:37:5b:18:ec:6f:2d:d7:ea:8c:08:2d:e2:
20:32:1e:87:68:db:4b:3a:47:7a:06:46:01:39:3d:94:d5:cf:
58:8e:b9:30:fa:71:fe:b7:ea:fa:3f:cf:96:8d:ec:9e:82:71:
bc:d3:9e:de:ba:0d:64:fa:9b:d5:dd:79:19:5b:74:51:c2:8c:
b1:99:05:92:70:4a:d4:74:b9:0c:b7:03:ad:07:a8:c4:84:a7:
2e:ff:bf:e1:1e:c9:73:a6:bd:1a:7e:be:1b:cc:24:5f:e4:2f:
87:4a:ed:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:25:08 2026 by rpki-client