Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier: PsM/SCF2pBymYeHbQ3+vfUZwwG6ssniamIzLsMi0nOc=
Subject key identifier: 2E:C5:15:2A:56:FB:74:0A:71:90:E4:F6:49:74:1B:36:FE:70:01:03
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer: /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial: 01A0E7AE20F8744A0BB43BB0BCD11FDF7BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number: 1A0B
Signing time: Mon 28 Sep 2026 11:02:23 +0000
Manifest this update: Mon 28 Sep 2026 11:02:23 +0000
Manifest next update: Tue 29 Sep 2026 11:02:23 +0000
Files and hashes: 1: a3vqBzTeMihaLI7nX3YXTwT9QXM.roa (hash: YtcSgTlR3L7xs2ulbON7vgzLF5ftnMrGCR+z8FjX7OE=)
2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: Xx2NRsQfh9uujtQyI3qUG/kJZ9Rbif95AQBaIBtXysI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:20:f8:74:4a:0b:b4:3b:b0:bc:d1:1f:df:7b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Validity
Not Before: Sep 28 11:02:23 2026 GMT
Not After : Sep 29 11:02:23 2026 GMT
Subject: CN=2ec5152a56fb740a7190e4f649741b36fe700103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:53:58:b0:f2:d9:1e:8f:77:10:9c:d1:57:5e:
cf:f7:ff:f2:6a:fd:f6:be:67:03:eb:1b:fd:17:04:
31:ee:ba:43:bb:d0:c7:4b:0f:34:2c:89:1c:57:68:
7d:ea:fe:69:2b:05:7c:10:99:ac:7a:21:b0:92:07:
9f:af:0d:78:54:24:60:6b:75:98:43:7c:c1:e7:b0:
09:e0:ec:30:38:57:96:15:36:e2:b8:1d:aa:c4:38:
c9:38:71:92:8d:f6:46:e7:0c:18:7c:27:8d:83:c8:
ed:75:ed:01:04:2d:28:9d:3a:31:bf:02:8c:a8:c6:
31:f1:a0:2a:3a:6c:48:85:a2:95:43:fa:c1:ad:fc:
ea:27:6e:e5:79:a2:f7:34:d5:e1:0b:cc:7a:5e:46:
a8:de:d2:64:fc:93:5e:d4:f6:84:7d:e5:49:14:69:
c2:25:0a:5e:d9:1e:dd:7c:93:97:8e:15:6e:84:33:
0b:ff:f6:dd:69:a7:8b:4f:56:0c:8f:06:78:06:07:
4a:5b:c3:f0:d1:14:0b:78:41:ab:c3:81:91:62:4d:
9f:dd:f8:c1:05:d5:1e:c8:d7:3a:a6:3e:a6:51:5a:
d5:4b:45:cf:46:cb:17:1e:c7:c7:50:b1:fa:d3:d7:
5c:e9:fc:d0:87:74:8a:39:47:9d:5f:9c:79:97:71:
ac:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C5:15:2A:56:FB:74:0A:71:90:E4:F6:49:74:1B:36:FE:70:01:03
X509v3 Authority Key Identifier:
keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1c:3f:e8:6f:c5:12:0f:85:e8:40:af:8d:a4:b1:5b:36:a6:
62:5e:a7:b1:16:6a:d0:da:2e:53:0e:db:33:e1:c1:b3:3e:f3:
0e:73:c0:34:5d:d4:06:fd:ee:b3:37:c6:9d:8b:60:1f:67:88:
23:db:30:15:b7:d6:4a:ae:00:ba:00:de:57:cc:69:c6:2d:59:
cc:04:a4:f8:e9:17:60:a5:ba:13:53:8b:00:12:36:70:84:19:
2d:df:b3:b8:0a:9c:39:2d:66:95:dc:61:17:b1:68:40:75:0a:
aa:06:7b:3c:96:2a:30:98:cb:83:10:e8:58:44:73:2c:9c:9c:
05:7b:c5:e6:c1:f7:f5:d3:85:47:6a:8f:6e:ac:65:a9:fc:f0:
c5:b6:71:8f:7f:a3:7c:91:b8:40:d8:e5:70:c4:16:62:cd:d6:
a9:bd:d0:14:9f:49:70:20:2e:02:f6:70:90:28:ce:46:01:bb:
0e:a7:c8:00:05:c3:d6:2c:66:d4:d6:f6:ab:6b:81:ed:aa:d0:
f9:12:5e:76:72:a1:ae:07:5c:21:e2:03:58:31:07:8f:de:a4:
0b:62:da:90:da:87:35:3f:99:81:47:bd:28:39:ab:a2:f0:45:
87:07:be:0e:cc:65:4f:6f:3c:dc:12:2a:f9:49:f1:7b:3e:55:
68:10:d4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:39:25 2026 by rpki-client