Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
File: xBK7PaZcqrUkhR74bOm6piB04e0.mft (raw, json)
Hash identifier: wVm3iaW7ypysEYiGCjfG3kLll+JPPEj+b2pF9nn8AS4=
Subject key identifier: A0:12:FE:83:84:22:15:AB:2F:06:B8:D1:27:B0:0B:8D:61:42:35:9A
Authority key identifier: C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
Certificate issuer: /CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Certificate serial: 01A0D2A65F45DC43FDC4DB4F0CBED66FEB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
Manifest number: 1A69
Signing time: Thu 24 Sep 2026 09:01:53 +0000
Manifest this update: Thu 24 Sep 2026 09:01:53 +0000
Manifest next update: Fri 25 Sep 2026 09:01:53 +0000
Files and hashes: 1: sesfpS4vflQUJ0zHNMlqdR_eVFI.roa (hash: EeKCakHwf9lALKZ5zNCtLbT5f2osgE69W3ufAPv/OQY=)
2: xBK7PaZcqrUkhR74bOm6piB04e0.crl (hash: k3sZvqAE9n3xtCr5GWcKAniu10pfNOHwXIqtQuTINtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:5f:45:dc:43:fd:c4:db:4f:0c:be:d6:6f:eb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Validity
Not Before: Sep 24 09:01:53 2026 GMT
Not After : Sep 25 09:01:53 2026 GMT
Subject: CN=a012fe83842215ab2f06b8d127b00b8d6142359a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:fe:cc:eb:d5:1d:18:d8:22:4f:cf:87:65:
17:c5:d6:6f:89:01:da:78:3c:db:cc:19:e7:a8:cd:
9b:0d:56:14:3a:c6:cd:e7:82:1b:98:61:5a:84:62:
d8:8f:76:7b:2b:55:a0:af:05:1a:66:b5:29:bf:c6:
7f:78:7c:8f:1f:6c:ea:4f:aa:25:a5:11:55:ec:43:
73:09:99:9f:ee:a8:95:e4:8c:16:0c:53:8b:12:7a:
2f:c7:9f:a0:48:b0:27:1f:f7:3f:43:d3:d5:c2:df:
e3:15:cf:d9:2b:98:9b:fa:82:94:43:fd:99:d1:56:
12:1d:1a:a8:00:03:cc:4b:58:85:bf:a0:50:d9:4c:
8d:04:3e:25:09:57:1a:5a:7b:4b:94:e4:23:ab:d5:
02:aa:72:12:5d:a3:c5:78:fa:3d:ac:2a:7c:8d:97:
03:22:bf:75:e4:2d:a8:f7:37:07:da:2d:96:a9:53:
d6:89:11:3e:43:5e:6e:58:03:32:ca:36:51:98:3b:
56:c0:af:14:44:2f:8a:dd:dd:06:7c:c4:ee:11:67:
5a:a6:d7:83:5e:d9:f6:43:8b:a7:5d:87:b5:6e:ae:
7d:de:43:6d:2c:ec:93:68:f6:f5:16:90:f7:e4:1d:
56:09:ca:01:64:e7:01:df:ce:da:67:ef:cb:d3:63:
0e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:12:FE:83:84:22:15:AB:2F:06:B8:D1:27:B0:0B:8D:61:42:35:9A
X509v3 Authority Key Identifier:
keyid:C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:63:fc:0f:7c:76:b8:09:bf:aa:a0:b6:26:e5:53:a4:fd:e3:
f4:c0:79:06:d7:6d:96:38:eb:69:6f:6b:36:35:c1:5d:7d:a8:
48:0b:27:d9:81:62:89:80:ae:ed:8e:8a:cb:5c:a4:1d:90:16:
44:c5:6a:ab:2a:39:f1:6e:cb:4b:ac:94:9f:8b:a1:29:53:d9:
a1:db:e8:8e:f3:92:a8:a1:00:53:86:3e:e9:25:1e:f7:13:52:
f7:94:5e:1b:19:dd:4f:ef:2d:0a:21:35:37:c0:80:90:30:19:
83:63:95:cc:80:83:d2:cd:6e:83:21:3d:ca:f7:c1:65:b3:9d:
09:b2:44:9c:c8:69:78:0f:9e:26:ed:7e:c1:22:47:80:57:cb:
38:06:fa:75:51:cc:7f:46:53:26:a0:aa:15:3e:e6:d7:c1:6d:
60:85:32:4c:62:8a:bd:ec:3b:93:29:d3:9d:5b:52:04:8e:79:
9f:0d:a0:d4:92:04:dc:ed:43:e3:d5:f0:b2:d7:75:d1:75:56:
4a:2c:9f:d4:37:b4:e1:78:ce:4a:6e:04:8b:22:5c:b4:de:92:
4f:ee:36:d3:24:97:a4:7d:00:99:18:f9:94:b2:56:86:83:c3:
74:09:c7:14:09:57:ef:6f:01:50:26:6f:3f:f2:4a:75:99:01:
c5:5a:46:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:41:53 2026 by rpki-client