Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
File: xLejOGcjuooupILHtoAxpUEirE8.mft (raw, json)
Hash identifier: i85b+0wATVEwLKb2q1jENcMmCussDhtCWix5KNFTiSA=
Subject key identifier: 4B:4F:5F:75:49:B3:E7:8C:12:B6:74:B2:80:8D:BE:6B:28:05:8A:AA
Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Certificate serial: 01A100C89761EFD740992F23E57572B5B9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
Manifest number: 08EC
Signing time: Sat 03 Oct 2026 08:01:48 +0000
Manifest this update: Sat 03 Oct 2026 08:01:48 +0000
Manifest next update: Sun 04 Oct 2026 08:01:48 +0000
Files and hashes: 1: Zk7CyKdXSESzaNUGpp0RHxT1B8g.roa (hash: jS+bnhYvgZZWXRhPBaO9DtSmsb6YqqmNYBdoxXcELc4=)
2: xLejOGcjuooupILHtoAxpUEirE8.crl (hash: HQEpchw/p9HAoEWlgF9ZQ3MbUSDqVZ0yOpJCQeNEg2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 08:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:c8:97:61:ef:d7:40:99:2f:23:e5:75:72:b5:b9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Validity
Not Before: Oct 3 08:01:48 2026 GMT
Not After : Oct 4 08:01:48 2026 GMT
Subject: CN=4b4f5f7549b3e78c12b674b2808dbe6b28058aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:97:9e:5e:cb:7f:d1:1d:32:94:78:5a:a7:0a:
d0:e8:4f:ed:fa:57:41:12:71:de:0f:b2:54:13:35:
b3:c9:11:15:4d:2a:b0:3b:84:08:b2:6d:f5:f1:a0:
ff:68:a2:51:3f:03:f6:71:2b:db:e0:21:63:88:bb:
e9:ed:ae:2e:90:14:a2:b7:a6:c4:8e:d0:7b:1a:dc:
14:fd:af:f8:31:85:b8:55:c3:15:93:15:7a:a9:ae:
42:f8:56:26:76:88:6a:63:3e:72:7a:b7:ca:84:cd:
b1:c3:c3:19:9d:58:3a:2e:ee:96:7e:27:1f:73:b1:
ae:d9:03:d1:08:2a:47:87:cd:6e:54:ef:28:91:20:
a8:45:d9:6c:13:a5:41:35:6c:41:70:2d:66:9a:44:
60:10:65:99:f2:99:1c:09:91:7d:1e:9a:47:60:14:
a4:83:5d:c0:5a:64:6f:81:05:de:40:e5:99:64:c1:
c4:35:d6:e4:28:46:9c:e7:a4:03:6d:2e:d3:7b:fe:
a9:7f:f7:c9:d1:1c:fb:2c:7b:1e:fa:4f:29:51:34:
fd:11:1f:a3:64:b3:36:f7:aa:1a:79:32:75:1f:23:
76:18:f6:36:d2:31:07:f5:d0:e5:36:c2:0e:20:4f:
5f:24:86:07:d5:96:7d:69:ae:fe:e2:51:7e:9d:10:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4F:5F:75:49:B3:E7:8C:12:B6:74:B2:80:8D:BE:6B:28:05:8A:AA
X509v3 Authority Key Identifier:
keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ff:f3:f8:86:fe:20:33:56:73:f9:15:14:5e:8c:b9:15:8d:
3e:fb:6b:9d:62:2a:f9:3a:3f:f3:48:60:99:7c:0e:9c:0b:f4:
16:a7:cc:02:71:a5:30:27:ce:3d:09:e4:af:02:ad:53:06:33:
75:a0:fd:39:aa:3b:b4:b8:2e:6f:a7:b7:ad:11:33:d1:b2:89:
46:ce:80:fa:be:fd:cc:41:80:f3:3a:a2:ce:6a:ed:88:7d:56:
3f:40:ed:f7:dc:21:31:6b:cc:fc:3d:74:58:44:4b:e1:2d:92:
ba:f5:d5:05:1e:93:2e:18:00:8e:c7:59:0f:c3:92:fe:5d:fc:
48:c0:61:d8:76:26:5c:32:4b:a5:60:c3:5d:a8:13:46:1a:71:
84:e2:d1:ec:d7:58:2a:aa:3b:c9:c5:c1:bd:ef:fd:02:f7:af:
76:e9:df:c3:82:00:25:ca:26:c7:41:d0:1f:3a:f1:14:2a:ea:
d1:ba:15:7a:4f:5d:46:d8:35:02:73:42:fe:b3:45:d5:f8:cc:
ac:1e:d9:08:0a:20:66:81:fc:00:9a:ed:39:df:0f:b4:78:9c:
e8:96:89:5e:34:a6:9d:d3:90:1f:b4:f4:8f:d5:e3:57:f7:5d:
e2:58:a5:f1:c0:6b:6e:3f:5a:08:77:7a:18:db:1b:b8:64:68:
04:0d:16:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:51:21 2026 by rpki-client