Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
File: xHKa8T09FW9BGXaxduVU-mcddvc.mft (raw, json)
Hash identifier: a3MDy9QHytCJBJ+nUHnrTRQI7DZOaxdwqjrqRMd05uI=
Subject key identifier: FA:21:D5:E9:76:F6:63:6D:50:A5:4D:6E:58:89:83:11:00:9C:9B:EA
Authority key identifier: C4:72:9A:F1:3D:3D:15:6F:41:19:76:B1:76:E5:54:FA:67:1D:76:F7
Certificate issuer: /CN=c4729af13d3d156f411976b176e554fa671d76f7
Certificate serial: 01A1144ED287963EE16D08F11EEFC129B537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
Manifest number: 17D3
Signing time: Wed 07 Oct 2026 03:01:12 +0000
Manifest this update: Wed 07 Oct 2026 03:01:12 +0000
Manifest next update: Thu 08 Oct 2026 03:01:12 +0000
Files and hashes: 1: 5bGOVGgpUSjx1uwMkRS9oqXlCJM.roa (hash: gEd4SfTflxW3Gsgz2afT2mctC6KsEwsMe5axMz0injA=)
2: xHKa8T09FW9BGXaxduVU-mcddvc.crl (hash: im80ylQ4nQe4X0DvoEuEh/ODYZgXVeNko9jjj4zPvtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:4e:d2:87:96:3e:e1:6d:08:f1:1e:ef:c1:29:b5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4729af13d3d156f411976b176e554fa671d76f7
Validity
Not Before: Oct 7 03:01:12 2026 GMT
Not After : Oct 8 03:01:12 2026 GMT
Subject: CN=fa21d5e976f6636d50a54d6e58898311009c9bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:a1:f9:6c:c6:b4:00:aa:ba:0d:cd:ae:99:
f6:ac:f4:ef:42:82:1a:10:94:12:8a:67:55:74:35:
9c:4b:f0:6c:31:bb:3a:b4:12:fc:1a:13:88:b9:01:
90:74:8c:61:fe:11:ef:cc:81:1f:64:66:eb:77:4e:
c2:d6:ac:ca:c8:06:fa:74:ba:0c:f7:a8:1a:b5:b9:
f1:46:9a:17:32:ae:2e:9b:0b:eb:a4:11:f7:b3:6e:
48:96:ac:f9:b3:9e:34:8d:ca:d1:d3:9a:58:1a:a2:
37:0b:31:03:f6:e2:66:98:40:1c:95:30:9e:3f:72:
8c:21:53:8a:0e:ce:10:09:60:7d:7a:17:ed:0f:40:
74:59:73:2d:b6:ff:07:f0:fe:2b:5b:d0:df:3f:6e:
f9:1a:8d:19:65:c0:48:cd:65:e7:3b:14:94:14:8e:
f3:ea:20:a2:88:15:3b:57:c0:e0:ec:2f:3e:2b:39:
ea:5d:b0:da:dd:7f:49:be:96:58:fb:d4:bd:bc:12:
ff:4b:b8:d6:ab:f8:26:a5:45:3c:75:72:6a:65:c2:
f3:6d:96:cc:a3:54:96:25:97:a5:23:94:42:7d:63:
0a:6e:2f:5c:f5:44:d6:c5:5f:37:c9:1c:39:15:a5:
c4:99:67:79:be:8e:8e:45:ba:91:4b:2a:e1:f9:30:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:21:D5:E9:76:F6:63:6D:50:A5:4D:6E:58:89:83:11:00:9C:9B:EA
X509v3 Authority Key Identifier:
keyid:C4:72:9A:F1:3D:3D:15:6F:41:19:76:B1:76:E5:54:FA:67:1D:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ca:47:d8:34:ec:1d:0e:47:32:cc:7e:7c:e3:26:de:7c:8d:
ba:24:3b:00:6d:e1:2e:9f:84:7e:6f:14:35:d1:1e:ae:d3:05:
ec:b0:6c:90:4c:01:31:be:b6:f9:ad:12:8e:20:20:13:09:11:
4c:82:43:1b:16:fb:23:4b:50:5e:5a:9e:e0:4d:1b:1c:ea:86:
74:e0:60:1e:6a:61:ba:d0:27:fa:b6:2b:39:9a:21:6e:5f:bc:
1e:04:75:5e:a4:e2:c1:f4:b4:02:9c:de:04:21:9c:7d:cf:cf:
33:6c:ea:ec:ad:a8:88:74:4e:fa:1d:b8:ec:86:04:c2:e0:03:
d2:53:b7:86:1b:d2:5e:b5:a6:e0:e0:eb:84:7e:66:0b:5e:1f:
ff:23:bb:5f:9d:b7:f6:6c:05:7f:56:b3:8d:37:fd:78:66:32:
b3:2e:19:be:0d:64:18:41:cc:ab:3f:49:eb:c8:36:5e:7b:34:
80:1c:5d:85:27:cc:d1:24:77:7f:f3:0b:73:eb:9b:fb:a2:0c:
81:9b:2f:05:ea:cd:35:f8:9d:a0:ca:12:49:6a:e8:f2:fb:62:
cd:ee:42:d4:eb:e4:37:e9:df:e5:f5:39:fa:43:7c:72:16:1c:
45:69:73:fa:3d:7d:c9:c2:51:9d:c7:a1:69:e8:73:1c:ec:98:
6c:34:93:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:12:48 2026 by rpki-client