Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
File: xNoGacxfwdqe7YsKEzphv-PfWFY.mft (raw, json)
Hash identifier: A0EqTSF5bCv2IouWDL90j4hJABYMesn9QNcIM3UI9PY=
Subject key identifier: 15:1C:64:DF:33:36:A7:82:C8:99:6E:CB:B2:45:FB:48:A5:46:1D:8D
Authority key identifier: C4:DA:06:69:CC:5F:C1:DA:9E:ED:8B:0A:13:3A:61:BF:E3:DF:58:56
Certificate issuer: /CN=c4da0669cc5fc1da9eed8b0a133a61bfe3df5856
Certificate serial: 01A103249165A8B5B9E15EC0E9C2D5758191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
Manifest number: FA
Signing time: Sat 03 Oct 2026 19:01:30 +0000
Manifest this update: Sat 03 Oct 2026 19:01:30 +0000
Manifest next update: Sun 04 Oct 2026 19:01:30 +0000
Files and hashes: 1: pYUYQEf2s7Z-P_vS-0K2KryHc60.roa (hash: HUauXiB8EmNlBFz7vLwqL2QKaYGDn/MlUmtQHsbrszw=)
2: xNoGacxfwdqe7YsKEzphv-PfWFY.crl (hash: bAFoGsMHzYtHQOKwgWRY8oYyd/lkSAq4fetLr+BTxak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:24:91:65:a8:b5:b9:e1:5e:c0:e9:c2:d5:75:81:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4da0669cc5fc1da9eed8b0a133a61bfe3df5856
Validity
Not Before: Oct 3 19:01:30 2026 GMT
Not After : Oct 4 19:01:30 2026 GMT
Subject: CN=151c64df3336a782c8996ecbb245fb48a5461d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:af:00:5d:a6:03:b8:42:dd:23:51:6f:0f:63:
3f:f5:d7:9e:fc:a0:41:c4:d4:34:92:e5:0f:06:a2:
39:ef:de:55:af:01:20:54:eb:4e:58:c4:b3:47:af:
6b:13:0e:91:47:ef:58:13:62:e8:08:a8:30:bc:6e:
bc:c8:7e:3d:9b:22:f7:8a:e7:2e:81:f7:29:3c:b7:
9f:47:94:53:4c:f0:f7:8c:5c:a3:b2:16:e6:ee:a2:
67:87:b4:23:fb:52:5b:5c:ba:31:29:7a:1c:67:5a:
86:05:a4:75:41:8e:5c:0f:42:fc:06:46:01:64:e4:
66:90:ae:b8:6b:02:79:60:76:45:f5:a3:e3:24:9f:
d5:b6:8d:0a:22:a5:56:f6:a2:c8:19:63:56:9e:e7:
ca:b5:79:78:49:24:d0:7a:ea:99:ac:b7:4f:a1:c1:
e4:70:ac:fb:1c:5b:26:27:f3:98:87:dd:16:5f:6b:
7f:80:75:3e:62:98:b2:4c:ce:83:2f:df:dd:e7:7c:
ce:13:ff:b6:94:4f:f5:8f:db:b6:3d:dc:72:d3:8c:
84:5a:54:ad:4a:47:90:aa:c7:ad:b7:8d:21:83:cd:
32:90:87:80:cf:ad:43:08:d3:b2:4c:49:5f:7b:46:
53:f8:8f:2b:cb:ae:10:5b:f2:0d:ef:9c:1f:b6:e5:
cf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1C:64:DF:33:36:A7:82:C8:99:6E:CB:B2:45:FB:48:A5:46:1D:8D
X509v3 Authority Key Identifier:
keyid:C4:DA:06:69:CC:5F:C1:DA:9E:ED:8B:0A:13:3A:61:BF:E3:DF:58:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a8:48:da:ed:00:f0:26:ee:74:bf:8d:9b:cb:54:a0:cd:57:
b6:5d:c0:be:fc:15:1c:d3:5d:e2:1d:ad:2d:f4:9e:23:33:a9:
7c:2b:7e:9e:99:70:19:b1:f6:8f:7e:c7:4b:f3:34:2a:ee:9a:
39:49:f4:01:51:80:16:21:47:82:bf:16:b7:c8:c5:15:20:fb:
23:b0:00:54:0f:d5:58:63:12:b5:e5:d9:0c:19:15:a5:83:b8:
7a:cd:53:d5:12:11:d6:3b:e3:95:20:83:d2:2b:a4:8f:7f:da:
2c:47:e5:78:fe:8e:eb:46:79:c4:e5:bf:5e:70:0d:a4:0a:49:
11:c5:f3:47:2e:e0:be:2e:77:39:ac:3f:12:dc:1d:e1:fa:93:
fe:d5:e9:f2:c9:56:26:30:74:b2:b4:88:7d:04:ff:7e:37:cb:
96:8b:5a:fb:18:6e:bc:dc:0e:59:d0:80:8e:a7:4f:dc:d3:40:
50:9c:38:94:4a:38:91:89:68:11:5c:db:07:ec:03:25:89:4c:
f3:5e:c4:df:b9:06:22:11:e1:3e:c0:aa:32:bc:d6:ec:3f:31:
e4:62:a8:a5:f5:c5:e6:46:45:66:ce:74:d8:2a:16:0a:14:4f:
6d:f8:5d:24:01:b7:23:05:f6:22:13:30:0c:e9:01:16:ea:61:
24:b6:e3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:45:00 2026 by rpki-client