Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier: oSxwdyLUooHXiXmsy1FgOY2/8RfyKLWguyzw7PtDl9w=
Subject key identifier: 20:9E:A4:CC:31:0D:41:7E:20:4A:EB:29:6F:BE:6B:51:E2:23:E7:16
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 01A0F30C85D3E52FDB6EDF77483EC802AA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number: 1A7E
Signing time: Wed 30 Sep 2026 16:01:19 +0000
Manifest this update: Wed 30 Sep 2026 16:01:19 +0000
Manifest next update: Thu 01 Oct 2026 16:01:19 +0000
Files and hashes: 1: EEs8_2SQ9wdEKnETnYAXwnbvPvI.roa (hash: CFxGxtKRpFSwMaRFJt3q5WoVWboKnoyoeoco0rArRao=)
2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: Y+F4rgdlpsgYHJ4xpqj95t54A1MdfmmQdlJu4fhvVcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:0c:85:d3:e5:2f:db:6e:df:77:48:3e:c8:02:aa:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: Sep 30 16:01:19 2026 GMT
Not After : Oct 1 16:01:19 2026 GMT
Subject: CN=209ea4cc310d417e204aeb296fbe6b51e223e716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:8a:64:a4:c5:55:b1:82:10:e0:c4:5a:64:
80:c1:c9:fc:0b:1e:91:a0:d2:c7:16:92:c6:37:a1:
12:9c:e7:fa:8b:0b:51:a0:92:f7:aa:26:17:a7:51:
19:b7:8d:cf:ea:9a:55:61:52:cd:b3:e5:c3:d8:a0:
be:25:de:68:2e:6c:03:46:10:2a:86:50:e4:de:0c:
61:f2:f4:44:d7:7d:0b:f3:56:bd:df:e3:e0:ba:1a:
db:e3:ab:fc:3c:ec:19:a6:56:db:f1:55:08:50:46:
f0:84:1c:a9:6c:54:8b:3d:09:08:3d:d7:c7:68:a0:
a4:37:d8:c0:dc:e3:e6:a2:29:79:f9:5e:65:73:76:
13:3f:92:3c:cd:58:70:7e:e9:1c:1d:95:4e:ed:50:
2a:05:df:74:84:ab:68:21:53:e4:62:d4:8b:ed:c9:
46:62:8f:40:08:97:13:b5:86:20:df:b7:38:b9:74:
2f:e0:3e:46:1a:1e:55:6d:ea:f3:be:35:bf:58:ef:
97:9e:e2:b8:5a:29:01:c6:2a:a8:49:18:d6:7b:f8:
17:ce:70:7f:1f:d6:c5:75:19:67:b2:b3:51:1b:89:
5a:44:f8:c4:2a:2b:d9:81:64:82:88:66:a3:0e:f2:
80:1b:ed:33:37:27:2a:38:8f:a2:bc:a1:08:4d:c0:
a2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9E:A4:CC:31:0D:41:7E:20:4A:EB:29:6F:BE:6B:51:E2:23:E7:16
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2c:3c:12:64:15:21:0f:85:ff:34:f7:0e:32:22:61:91:e3:
4a:ed:19:56:bf:e5:7f:04:5e:0d:19:b6:ed:07:35:4e:70:74:
26:e0:bd:0b:88:04:be:53:cc:f8:ef:3e:ed:05:01:25:54:80:
8f:ff:a9:17:cf:40:31:51:54:7e:ab:3f:2d:9c:c1:c8:64:94:
63:a4:40:f7:2c:c7:39:05:49:e1:aa:9b:fa:94:8e:e6:1d:9f:
a0:d2:ad:1f:c4:81:72:3b:8a:bd:70:5c:9a:79:99:29:d3:2a:
ca:37:d9:d1:34:de:7b:33:17:67:d8:16:bc:39:0d:ff:68:b8:
85:9a:6e:9e:3e:fb:83:c1:37:7c:9a:ee:d5:e5:7f:67:78:02:
92:f2:a5:f4:bd:eb:54:bd:aa:04:22:fb:1d:0a:22:93:43:e6:
f0:b8:4b:d4:61:ad:b0:f8:10:c8:ba:e6:c0:00:ca:d2:ba:52:
e7:8e:3c:87:a7:15:ec:b6:d6:90:04:a4:67:9f:61:9b:61:d4:
64:ee:7c:9b:a8:15:42:fe:96:76:29:5a:2e:ee:f8:f6:a3:c7:
e9:7d:22:b4:7c:6b:d7:d6:7f:f7:00:11:09:9b:db:0a:75:1c:
74:41:8a:3b:82:9e:1d:ef:8e:66:c0:0b:d0:b5:90:1b:0e:15:
8d:72:d3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:56:45 2026 by rpki-client