Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
File: xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json)
Hash identifier: R/DZzfhqOYLElo2CdyAQuBynQzvjFQt+V6eH0hn6gkU=
Subject key identifier: 6A:E7:0C:6D:29:33:BA:E0:56:5D:67:D5:DC:2C:68:E2:42:C8:EC:44
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 01A0DA288638AB652EF0B82F0372214AABAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
Manifest number: 13BB
Signing time: Fri 25 Sep 2026 20:01:23 +0000
Manifest this update: Fri 25 Sep 2026 20:01:23 +0000
Manifest next update: Sat 26 Sep 2026 20:01:23 +0000
Files and hashes: 1: AGGhluGFEICw55ju4TycffudhH8.roa (hash: tJcRE21n7ilMJT0RZ9e1adylptP6kCgkq842wuhhP6M=)
2: ATFqvKQfCzg1eIhHj9ilysnZYnE.roa (hash: 9xWvqqO+irmFSgWZgkDiVyOSk6AqF02qWQdfh9GrCc8=)
3: HRIhwEGo9k5MDZh2v0iMwSG0qac.roa (hash: cbBWsRzGijvkkbsuZLFU/wPbUMhwo+cAOpoz/z5OCD8=)
4: NIt5HAEHP3eGIkRaRfmU_TQEUio.roa (hash: kNqtp8gVzKVPwqTczsFvU1xgIi6B9Z0PZaQgvs2xN6o=)
5: _lfdoiLagSclQFLhRG9TZSert0s.roa (hash: BzO/SBnCrjXko5DW8YSZkFc4F4C9Udpc0JMuFJcr16U=)
6: gtTwRDBJR-BbMiRZiF0UkREdrNI.roa (hash: EYI6Dc616oG3PdcronQ8IrDd6TturvsbVQq4J3V4p+w=)
7: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: kPGXXHYrRnNnOCYaNwCIYW+bf6IdWPXodZUqmaA8Q3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:86:38:ab:65:2e:f0:b8:2f:03:72:21:4a:ab:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: Sep 25 20:01:23 2026 GMT
Not After : Sep 26 20:01:23 2026 GMT
Subject: CN=6ae70c6d2933bae0565d67d5dc2c68e242c8ec44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:a1:51:17:6d:3c:90:f9:ad:ad:5c:e6:ed:
f0:cf:9c:0a:6e:0d:05:bd:d0:a1:cb:12:3a:fe:03:
99:92:b8:73:f7:98:25:5d:99:4a:f0:65:0e:bc:bd:
13:fe:b3:79:28:96:3a:b5:36:13:0c:ff:7d:ac:3b:
d5:8e:a3:ed:46:f9:d6:9e:cb:3f:da:cc:bf:21:da:
a1:f3:03:97:90:6d:29:b6:cc:59:f7:de:4f:ab:5a:
90:f0:87:be:d1:bc:91:54:1d:93:dc:79:44:b2:55:
33:93:20:70:dd:ab:9a:74:bb:a1:c2:7d:33:c3:5a:
9e:b8:5b:16:93:1a:c0:84:43:9e:01:7f:b8:b8:bd:
18:c6:1a:5e:f3:ee:51:96:ee:18:56:64:c5:17:dd:
a6:e5:e3:d2:38:dc:f3:d0:75:f7:73:6d:b1:36:e7:
60:8a:6f:b7:d8:f0:62:58:da:da:79:11:d9:3b:d9:
b3:e1:80:6f:77:8b:1d:f2:18:7e:e5:10:24:f3:6a:
2f:c8:68:31:ba:a4:e2:d0:1d:cc:7e:58:5e:33:be:
4b:8b:28:6f:8c:35:35:f2:c5:af:82:d5:69:be:39:
d4:53:99:ca:0b:c2:e2:21:9d:47:1a:55:cc:41:fe:
73:31:42:c0:71:ff:85:70:48:b0:13:4f:e9:74:b0:
6a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E7:0C:6D:29:33:BA:E0:56:5D:67:D5:DC:2C:68:E2:42:C8:EC:44
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f7:09:bd:9b:df:d9:34:0b:50:f2:72:23:ad:c4:40:ff:dd:
4d:e0:a0:0a:58:de:d3:29:c8:82:bc:c8:98:19:f6:84:bd:dc:
87:f3:f4:44:47:d3:8b:93:fb:c9:23:29:44:7b:5b:f6:b1:0c:
ab:97:0a:fa:82:2c:e1:f1:32:de:75:9c:5c:4a:a1:3f:1c:55:
87:9e:32:09:f4:64:9d:79:8b:b0:d4:9e:ba:3d:5d:5a:b5:a9:
f3:2b:be:7b:a6:c8:3c:70:60:ed:ec:64:9e:4c:c0:75:cd:48:
3b:25:7d:d2:56:f7:a9:3e:ee:b3:29:71:cd:77:90:f0:a1:52:
be:95:13:5a:f9:e2:cb:c9:c7:a7:7f:53:56:07:51:82:8e:1c:
b2:29:84:98:fa:78:66:4e:58:c4:57:38:0d:75:29:1c:cf:bf:
cd:9e:91:ad:8c:be:ac:7b:63:53:36:18:81:2b:23:8b:4d:89:
12:1a:bb:48:03:bb:99:f9:ac:8f:72:3c:37:3f:26:00:3c:63:
a7:cd:da:eb:bd:69:0c:9b:ac:d9:a9:5d:8c:2a:ed:9e:52:1e:
59:61:64:f1:8b:67:29:6d:13:2c:33:ee:c0:07:f0:84:7d:0d:
99:a5:7e:8d:d7:c9:0c:cd:41:36:8c:91:60:5f:ac:72:10:d9:
52:33:3c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:58:38 2026 by rpki-client