Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier: O6INh8yDVNHqrjSlrxiSwBOjlmZIHEa0TxhMQWRB9XM=
Subject key identifier: 88:0F:54:F4:27:0E:B9:D9:82:DC:B5:09:9F:F5:73:EA:44:35:9E:43
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 01A134B54AED74612E28B3896DE079DB7B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number: 08B9
Signing time: Tue 13 Oct 2026 10:00:58 +0000
Manifest this update: Tue 13 Oct 2026 10:00:58 +0000
Manifest next update: Wed 14 Oct 2026 10:00:58 +0000
Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: /xtRZVZeJcKIAZHsp845vRRklei/xn8FOx+4UAarRL0=)
2: zIooxkz42P8_5ReZHQIQQDyh_E0.roa (hash: vHG8nX4oJh4/M/Rbe7SvWBLoOWc7PYioObPqt6DtUuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:b5:4a:ed:74:61:2e:28:b3:89:6d:e0:79:db:7b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: Oct 13 10:00:58 2026 GMT
Not After : Oct 14 10:00:58 2026 GMT
Subject: CN=880f54f4270eb9d982dcb5099ff573ea44359e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:19:f9:0f:7b:a7:5e:84:cc:ef:9d:9a:2c:
cf:dd:86:3f:92:f7:8b:4d:fb:ee:4b:09:0e:22:37:
60:c0:cf:34:16:86:fe:d8:90:96:e2:f9:3a:e0:d5:
55:f6:93:d7:dd:87:0c:96:40:ee:92:ee:66:4f:ee:
ed:0d:06:cc:86:71:53:1a:ef:52:9c:d8:df:6c:b0:
a0:12:15:cc:39:49:3e:09:ab:b6:c2:d2:bb:69:de:
4d:8c:16:97:a4:24:68:90:07:23:09:3f:7b:5e:42:
3d:84:16:18:56:48:dc:b6:17:35:be:7b:2b:b8:d9:
ef:ae:2e:9c:d5:b0:20:8d:a3:af:9d:a3:dc:73:84:
56:db:cc:30:6f:a8:f6:c9:20:f3:ac:a3:6a:14:f5:
ca:0a:3b:db:1a:11:f7:93:11:79:36:16:17:2d:b6:
fd:a4:32:99:00:17:a4:41:8d:5e:ad:88:a3:c2:22:
ee:98:7d:27:75:55:a3:b6:db:71:98:3c:7c:9e:53:
7f:b5:0f:a9:b4:99:10:c9:36:33:87:af:7f:8c:aa:
36:da:dc:61:fe:c6:60:d1:9b:43:24:e0:f6:2d:d8:
5e:76:7c:bc:31:2f:e2:e6:0b:56:9f:1a:c8:40:ca:
4d:85:05:90:5e:d7:d2:39:91:87:44:39:6e:b8:56:
b3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0F:54:F4:27:0E:B9:D9:82:DC:B5:09:9F:F5:73:EA:44:35:9E:43
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fd:28:83:7b:14:a2:45:86:f0:2c:04:3f:60:55:f8:77:67:
f7:23:f9:b8:b3:f7:8f:3f:aa:44:93:dc:d7:94:73:a1:b5:b4:
06:96:53:4c:e2:2a:df:7b:3b:e0:16:95:ce:52:ce:25:3a:7a:
d7:d4:73:3b:bf:03:16:94:10:a3:50:5e:23:60:db:a5:0a:db:
b7:61:c4:a7:4e:c6:00:83:f8:2d:10:41:21:3f:74:75:7d:0e:
56:70:15:33:7a:25:96:e9:7e:c4:24:68:7b:97:96:49:65:99:
cc:cc:f7:fa:22:3f:35:a8:88:83:2d:d5:64:0a:cd:81:87:cb:
ad:ba:f9:96:1c:a7:a8:74:97:31:01:f7:10:86:f5:72:2c:ed:
11:cd:fe:e9:7f:ef:e7:bd:35:04:f7:28:30:e0:f3:a9:cb:3b:
b6:75:85:92:eb:29:ad:62:bf:ae:cf:d2:35:46:aa:ac:f3:02:
2e:3d:a6:ec:c3:eb:58:62:aa:fe:0d:fa:d5:1e:c1:48:bf:d6:
36:76:85:11:3f:5d:93:12:b9:04:dd:26:d3:d4:ad:00:08:09:
4b:2e:03:a0:67:df:af:7e:5e:5a:a0:a6:ad:25:b6:79:cc:8b:
e4:65:c0:c4:de:2f:86:d5:cb:79:59:30:28:78:71:76:91:30:
a2:74:fa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:45:55 2026 by rpki-client