Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
File: xBK7PaZcqrUkhR74bOm6piB04e0.mft (raw, json)
Hash identifier: nltwTMLD69F9VtLo8SJ5A5T2mSR+5Ut+7ZTejeHnj2o=
Subject key identifier: 16:B2:B0:18:88:2C:90:79:A1:30:15:3B:3B:BC:A5:2E:B8:E7:19:F2
Authority key identifier: C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
Certificate issuer: /CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Certificate serial: 01A1DD26B049EE8F3F6272C7A0C61538526E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
Manifest number: 1AF3
Signing time: Sun 15 Nov 2026 03:01:02 +0000
Manifest this update: Sun 15 Nov 2026 03:01:02 +0000
Manifest next update: Mon 16 Nov 2026 03:01:02 +0000
Files and hashes: 1: sesfpS4vflQUJ0zHNMlqdR_eVFI.roa (hash: EeKCakHwf9lALKZ5zNCtLbT5f2osgE69W3ufAPv/OQY=)
2: xBK7PaZcqrUkhR74bOm6piB04e0.crl (hash: nfk5KpK+FBqrIP4QJWLr7CiYtjhIXGewDLIS1SsvlIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:b0:49:ee:8f:3f:62:72:c7:a0:c6:15:38:52:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Validity
Not Before: Nov 15 03:01:02 2026 GMT
Not After : Nov 16 03:01:02 2026 GMT
Subject: CN=16b2b018882c9079a130153b3bbca52eb8e719f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:88:9b:4a:e0:50:77:65:85:7d:9e:6b:32:
0e:4d:c2:dc:f9:13:dd:9e:89:70:b5:66:f0:87:87:
be:79:f9:52:69:3e:1c:d6:9e:b7:e8:43:6b:12:04:
d9:79:23:28:ea:00:08:04:75:cb:06:43:4e:05:88:
03:7b:80:df:64:04:f3:4e:3f:1b:8f:e1:dd:e6:75:
df:5b:35:5e:36:e1:dc:6f:b8:e6:2b:73:61:0c:42:
35:60:da:c3:f5:30:27:08:08:97:65:66:11:5e:53:
80:ef:1d:f9:67:b3:62:da:28:2b:ec:4c:1e:e7:e2:
fd:69:47:24:1f:0c:96:ed:35:62:24:1b:20:0d:c8:
c6:fa:8b:0d:9b:e4:e7:20:f6:0c:7f:66:02:af:04:
1e:f4:dd:77:ad:a7:7b:6b:4e:14:3e:ff:27:57:48:
be:a6:29:e4:a0:ca:33:eb:b0:44:55:e4:7c:93:00:
47:95:a0:d7:52:dc:e9:2f:e4:0c:32:99:13:2e:17:
d9:24:75:d5:23:24:01:b3:2c:d6:8b:d3:2e:6f:09:
5d:4d:4a:1c:26:9d:48:27:70:bd:d0:a7:11:aa:ba:
c1:e9:1d:53:b6:76:88:af:6e:e3:89:a3:78:83:d3:
bb:4c:6d:66:87:e1:61:be:68:1a:1e:8e:82:2d:97:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B2:B0:18:88:2C:90:79:A1:30:15:3B:3B:BC:A5:2E:B8:E7:19:F2
X509v3 Authority Key Identifier:
keyid:C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c2:1c:bb:fa:ee:6d:91:25:e6:62:50:b2:8a:7d:f8:96:45:
7f:62:40:e5:21:ac:15:64:2b:cc:04:9e:05:93:ed:7f:92:39:
45:cf:a0:94:82:59:77:a8:37:23:ab:92:4d:72:83:9e:4a:80:
01:d8:e0:cf:92:fd:70:8f:df:1f:5b:34:15:2f:6e:1c:c2:68:
b3:98:b7:a7:5a:00:1b:f8:eb:99:9e:24:5c:39:43:7e:3e:34:
15:4f:69:8d:8c:ae:7b:51:36:4b:3f:ef:9e:cb:5d:5f:b0:2c:
45:ee:10:53:7c:41:15:ee:4c:57:1e:df:39:d0:88:88:45:d5:
69:91:04:6e:70:eb:5f:d9:8b:6c:f4:b0:0a:27:51:78:49:98:
49:f4:dc:57:a2:43:8a:13:d8:b4:44:a9:37:1a:b7:7b:c4:73:
8f:95:9f:25:a3:bd:e2:73:df:e7:54:03:1f:a5:65:a7:30:04:
f8:ed:ed:c4:64:a1:72:59:23:be:3e:65:ab:c0:c5:49:ee:8c:
a7:68:02:9d:d1:ac:c4:fa:09:e6:96:03:26:73:5d:5f:4d:87:
5a:01:dc:6b:00:e8:f9:84:d0:35:4f:71:d1:07:a3:ee:34:cc:
3c:25:99:05:31:c3:82:ab:9a:5f:47:67:a8:1c:37:8b:76:3d:
fa:1f:20:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:19:40 2026 by rpki-client