Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
File: xX4MBpirwZpWiv7OaxkM7QM6coU.mft (raw, json)
Hash identifier: DJLF6JD47CA2Ra4ecTPKoZgPY7z111M9HEbomHc+BOA=
Subject key identifier: AF:F6:5B:E6:82:4E:9F:FC:2D:C0:1D:F0:80:8B:3E:F5:D9:6D:91:D3
Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285
Certificate serial: 01A0D6F135AE6CDE921E78C1D33ADD822195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
Manifest number: 196E
Signing time: Fri 25 Sep 2026 05:02:07 +0000
Manifest this update: Fri 25 Sep 2026 05:02:07 +0000
Manifest next update: Sat 26 Sep 2026 05:02:07 +0000
Files and hashes: 1: hvm-1sw6yKhG-M4wHJ1S06-4bQ8.roa (hash: tKs3IGxy6JfH17/EICz+WfGgz3jmWl7OeQzPl058cdo=)
2: rHb_iz-JiMdt3RDI2-qf4obfFyQ.asa (hash: PB1OmdbHMMh/Gs2lwxTkfdhg+R2oRe0ZvKNcBWEoM4Q=)
3: xX4MBpirwZpWiv7OaxkM7QM6coU.crl (hash: g8r9clXvehi9C+7p+7b234+WV4JLjQ/gPekF0pDPNwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f1:35:ae:6c:de:92:1e:78:c1:d3:3a:dd:82:21:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285
Validity
Not Before: Sep 25 05:02:07 2026 GMT
Not After : Sep 26 05:02:07 2026 GMT
Subject: CN=aff65be6824e9ffc2dc01df0808b3ef5d96d91d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:c7:50:fd:30:d7:32:eb:39:64:9f:e1:9f:
e3:99:ca:2c:dd:ca:8c:1f:1f:52:89:da:c5:80:b8:
21:29:e4:ca:ef:96:a5:46:20:9a:f3:b6:4c:63:08:
1d:6f:66:46:3d:c1:1c:40:9c:8f:96:64:46:e2:b1:
6f:88:75:e0:73:27:5a:7e:45:a0:e3:5f:43:6b:bc:
e6:6c:da:7a:c3:5e:7e:6b:48:52:5d:eb:46:1c:3e:
ce:54:af:35:bd:e3:dd:56:3a:c3:fd:e1:67:71:56:
49:31:13:e3:a7:f8:d1:cd:f6:c0:40:e5:0f:bb:c4:
29:e6:a0:b7:42:86:47:4a:0a:f5:47:46:2a:82:e9:
b9:00:31:76:63:55:41:ec:5a:2b:0a:b1:20:48:35:
36:94:63:fd:3f:d3:df:ff:b2:15:a5:cb:43:00:4a:
3b:88:91:dd:d5:7c:b2:10:f1:dd:9e:a7:86:01:23:
d1:6a:f5:9d:9f:f2:29:dc:9c:a8:a8:fa:40:a7:f7:
9f:86:1a:0f:fc:73:22:da:8a:2c:26:16:23:0d:64:
29:91:cf:2f:39:44:7f:49:8f:e1:35:a5:57:02:9a:
56:c8:30:fa:5e:34:3d:44:47:dd:d1:eb:11:2a:62:
04:31:c5:bb:ba:df:fa:ef:ea:5e:09:9a:80:c7:5a:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F6:5B:E6:82:4E:9F:FC:2D:C0:1D:F0:80:8B:3E:F5:D9:6D:91:D3
X509v3 Authority Key Identifier:
keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:29:ab:1d:d3:35:8d:ca:e5:1b:d8:c0:3c:a8:64:f7:b5:af:
df:71:28:da:35:45:66:28:3c:87:5a:e3:08:97:26:13:16:1d:
78:d1:0f:6f:57:51:44:a0:32:6b:e6:4f:02:88:3c:ed:26:61:
cf:0e:81:f5:47:34:a1:78:60:25:65:60:dd:79:a3:62:6c:30:
2e:74:d4:01:13:67:d5:5f:45:70:ef:b1:19:ea:0e:f7:24:00:
52:1d:ee:ae:ed:7a:0d:60:20:64:d7:06:cb:5b:b5:40:ba:87:
80:89:69:46:4b:a2:d4:90:0c:91:d4:86:81:45:b2:10:33:b8:
fd:50:83:9a:e2:db:0e:f5:2b:9c:a2:55:57:4f:c2:62:b0:f9:
b8:dd:2b:5d:3d:11:cb:cf:71:f3:ae:d6:ea:38:96:5a:31:42:
5b:2e:28:d4:03:c8:a5:ce:97:87:2c:d2:97:34:b9:fd:fc:fe:
ad:5c:e1:75:a4:d3:04:d7:98:b0:ee:a8:48:fc:20:e0:5f:84:
aa:56:0f:70:6d:48:c5:8c:e8:bc:99:a9:66:03:1c:36:65:be:
87:d6:92:60:62:cd:5d:2c:75:b6:35:45:f8:44:0b:17:cf:ec:
5c:be:09:d7:7e:88:e6:dc:8a:0e:4a:22:67:41:9f:1a:01:33:
23:eb:82:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:59:31 2026 by rpki-client