Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
File: xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json)
Hash identifier: yYhkXBjjW0Uwum4BacbWOaVY/d581dmsIl0lViLqCZs=
Subject key identifier: D9:04:7A:FA:41:ED:39:02:42:79:8D:2A:AF:A1:AB:2A:A6:BE:87:FD
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Certificate issuer: /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial: 01A17BBB106EAAF8FDB456D0CCA7B7A806C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
Manifest number: 18C7
Signing time: Tue 27 Oct 2026 05:00:19 +0000
Manifest this update: Tue 27 Oct 2026 05:00:19 +0000
Manifest next update: Wed 28 Oct 2026 05:00:19 +0000
Files and hashes: 1: 5VgBPMnvg-Y4r70mw9zcqUHf-ms.roa (hash: P3U3l0akrscgsoVcKLjR90FDWEx4VR/+ukAn/96yuzo=)
2: HJwZlYqEjcC0kZy6mydcGkGnl2Y.roa (hash: UPYyl+3V1/TwBPn6nhuPF5CRvh3gv8SQW9YgSKrnSbs=)
3: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: IBQQH9kZAyQXlVlyOw4mGy06Q9VzelXJlYv0hJGWsbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:10:6e:aa:f8:fd:b4:56:d0:cc:a7:b7:a8:06:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
Validity
Not Before: Oct 27 05:00:19 2026 GMT
Not After : Oct 28 05:00:19 2026 GMT
Subject: CN=d9047afa41ed390242798d2aafa1ab2aa6be87fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:de:d1:99:22:72:ef:64:6f:48:2f:fa:69:
21:ae:73:94:a4:cc:d5:03:4d:be:f1:af:b4:8f:ad:
c9:85:b7:e6:08:5a:8b:19:26:34:da:dd:b1:ab:20:
eb:a0:4e:23:bb:47:d3:2e:c6:11:c5:07:f0:4e:b0:
6d:c3:b7:17:a9:0d:a4:a2:fc:50:cb:db:f5:d4:4d:
9d:34:29:39:0e:a3:c9:46:75:72:4e:5d:0e:29:66:
44:16:6d:55:ac:3c:83:29:4f:c0:1a:3a:1c:63:2e:
17:70:03:92:19:a3:91:53:5a:33:7c:f9:24:7f:14:
4b:e9:2a:20:37:0a:3f:bb:e2:c0:09:f3:dc:b9:63:
fa:2a:9d:33:1c:ec:0d:73:80:d9:45:01:82:02:dc:
bc:70:6e:13:be:4a:74:2c:df:08:f6:cc:f6:aa:6c:
88:f1:00:31:f3:e8:af:0f:0a:8d:f2:5c:56:eb:8c:
95:bc:59:48:96:8f:11:e9:d4:d1:71:8d:1b:97:45:
ae:e1:14:ee:f5:d4:f6:7b:2e:c0:cc:ef:ba:37:bc:
90:78:0f:95:13:14:94:c8:3a:1e:75:6a:c9:56:1c:
50:dd:da:10:d0:f1:7f:e4:63:58:81:9e:0b:42:8e:
d3:65:7e:e8:18:28:96:ed:a9:01:78:82:35:d2:24:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:04:7A:FA:41:ED:39:02:42:79:8D:2A:AF:A1:AB:2A:A6:BE:87:FD
X509v3 Authority Key Identifier:
keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:77:77:19:44:0d:55:01:fc:7a:d6:66:76:85:bc:b1:bb:e6:
bf:a0:42:e6:65:65:1e:44:26:39:cb:8b:6a:f4:ab:34:2d:6e:
e0:be:1f:1a:cd:a7:ab:ce:45:61:cb:ca:c1:07:fa:8e:4b:9a:
5c:b3:f4:81:a5:4b:6c:23:92:23:db:16:4f:ac:6a:e4:8f:13:
a9:2e:2b:25:79:47:9b:50:36:a4:d8:09:30:c9:9b:d7:25:77:
ad:78:a2:ea:00:0e:30:a4:3b:5e:f4:ad:91:23:8b:71:96:25:
ac:7e:a3:f1:6d:a7:40:2c:81:48:ac:37:68:a6:11:b2:47:c7:
51:4f:1e:cc:f0:07:79:6b:fa:c6:c5:eb:9f:af:94:f1:f5:4b:
6f:16:72:e7:80:50:94:d7:5a:47:9d:d4:ab:e4:3b:31:9c:34:
cd:85:3b:7a:60:5a:f4:a5:b8:16:7f:35:c1:11:08:cd:52:ee:
cf:cf:14:86:1a:01:58:f3:d1:5e:2a:36:49:3d:24:ec:72:1a:
f4:a6:63:81:eb:6a:68:d9:65:30:f7:0d:f9:ce:12:4c:87:83:
10:93:de:64:2d:4a:8d:57:c0:f9:86:56:ed:c3:8d:95:71:be:
9a:99:db:42:cc:66:4a:c2:0d:9a:8e:13:9a:41:65:e8:3d:0e:
e2:ca:b9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:05:43 2026 by rpki-client