Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
File: xX4MBpirwZpWiv7OaxkM7QM6coU.mft (raw, json)
Hash identifier: /j98v++X7rjdNAs09uf0jNjAiONUbCaQWnJhcbeJE8c=
Subject key identifier: 2D:71:DB:4B:A1:A1:03:7F:70:3E:44:58:03:86:73:04:E6:A0:68:43
Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285
Certificate serial: 01A0D8DF7309D1B717BAED4DA08261F657CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
Manifest number: 196F
Signing time: Fri 25 Sep 2026 14:01:57 +0000
Manifest this update: Fri 25 Sep 2026 14:01:57 +0000
Manifest next update: Sat 26 Sep 2026 14:01:57 +0000
Files and hashes: 1: hvm-1sw6yKhG-M4wHJ1S06-4bQ8.roa (hash: tKs3IGxy6JfH17/EICz+WfGgz3jmWl7OeQzPl058cdo=)
2: rHb_iz-JiMdt3RDI2-qf4obfFyQ.asa (hash: PB1OmdbHMMh/Gs2lwxTkfdhg+R2oRe0ZvKNcBWEoM4Q=)
3: xX4MBpirwZpWiv7OaxkM7QM6coU.crl (hash: EaTE6GLth+DhW2VY9yhdj48DZbOhOkwENIWt4xZtUQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:73:09:d1:b7:17:ba:ed:4d:a0:82:61:f6:57:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285
Validity
Not Before: Sep 25 14:01:57 2026 GMT
Not After : Sep 26 14:01:57 2026 GMT
Subject: CN=2d71db4ba1a1037f703e445803867304e6a06843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:00:6a:e6:6d:bd:26:e4:e2:e3:34:ca:e7:b5:
e6:0a:d0:0e:2a:4a:02:41:38:99:59:94:d2:4a:2d:
1e:12:ef:fa:5c:be:7e:99:f6:0b:ac:0e:b6:34:6a:
68:2e:8d:ec:41:2a:a0:55:24:db:6c:76:68:ff:18:
a2:2f:39:54:83:e7:56:72:b7:a7:17:2e:e9:b1:af:
9e:70:54:1b:ae:40:f4:66:16:9f:a0:2c:bb:79:47:
c5:23:b9:f8:a0:6e:05:14:95:bd:a2:53:d4:3a:a4:
07:fd:d8:56:fe:05:0b:28:dd:37:b9:2f:e8:57:98:
23:cd:ac:48:ab:5b:e0:60:22:e7:92:34:f7:bb:1c:
69:c4:33:47:97:f0:5b:c4:13:2b:d6:2d:ee:99:6f:
2b:8b:51:48:d5:95:b3:c3:54:0b:9f:0f:da:86:cf:
2b:4f:78:1d:20:92:fb:5c:3b:62:5e:5f:2a:e3:80:
c6:96:db:17:a0:cd:68:f0:68:a8:d3:13:7a:49:aa:
76:73:04:62:a4:f2:48:c1:ad:12:53:ff:18:6c:da:
f9:ff:a7:4e:87:1c:4e:0b:29:7a:06:3f:88:8f:78:
e3:fd:80:13:cc:b9:c6:36:15:5b:13:fd:b0:bb:c2:
84:1b:49:9e:1f:ef:4a:73:e1:c5:9d:a9:e7:9d:34:
73:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:71:DB:4B:A1:A1:03:7F:70:3E:44:58:03:86:73:04:E6:A0:68:43
X509v3 Authority Key Identifier:
keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e3:11:60:21:86:65:aa:d2:29:a4:b6:32:ac:73:6b:29:aa:
bf:f6:f8:08:ca:db:1f:06:ea:8d:53:d8:b2:4a:56:22:e7:8c:
04:1d:d4:10:bd:e3:26:97:88:a4:79:1b:c2:27:37:50:61:a5:
ba:4e:07:e3:c5:80:00:85:f8:57:79:80:12:8c:eb:88:a8:c1:
39:fa:6a:91:92:e4:a5:8d:6b:50:b3:82:2a:24:22:7c:d5:30:
8e:da:cb:19:2e:23:5c:4a:03:d7:63:83:04:4c:e0:cd:3b:cb:
0b:50:3e:26:42:b7:d0:c4:6e:b1:6d:6b:f0:15:b9:16:3d:ba:
94:89:34:22:7f:44:ff:65:cb:a8:44:07:e3:7d:56:24:2a:b6:
bd:18:bf:78:2e:49:6e:47:8c:48:14:e8:f7:30:85:ef:88:2e:
e1:44:fb:23:64:07:4f:53:c9:16:83:d5:8c:04:44:06:29:21:
23:29:0c:92:00:e2:e1:27:1e:d3:2e:54:d3:0a:48:ee:af:5b:
7e:fb:f2:41:29:96:3d:fa:bd:ad:6c:fa:b7:3a:c3:88:fd:19:
fa:62:ed:3f:6f:2e:42:34:ee:0c:9e:79:3c:4c:68:cc:66:31:
1f:22:f1:0c:99:d9:c4:a8:a9:16:d1:bc:be:2f:74:98:44:2b:
dc:d7:4e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:37:48 2026 by rpki-client