Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json)
Hash identifier: WYZ+d/mcxsQaXN3WlTfI6Zk8EvsUlSVZDoHpYFv3HXE=
Subject key identifier: 28:E1:1E:9D:73:93:69:54:4F:0C:E0:92:A4:8D:8E:83:60:9F:F2:A3
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 01A10B82581E3FC6CBF37E97D748CFCDE99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
Manifest number: 1A8B
Signing time: Mon 05 Oct 2026 10:00:53 +0000
Manifest this update: Mon 05 Oct 2026 10:00:53 +0000
Manifest next update: Tue 06 Oct 2026 10:00:53 +0000
Files and hashes: 1: 1-8oUTWUAuLAV-0eAuYQDr-5uUjg.roa (hash: j/xhG+Ho5blnFZVSciVE3ALUT+d6u+iQqAAWN+Se5oY=)
2: MHchnxV8uLs8pcvJTcOPLL-Bbbc.roa (hash: vPV8+4NZsXrCq8XvABi4c8I9ILlUiPMubO8YOy17XOc=)
3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: Wv7Kbcsyxi2e6pUKjMi4L5D0BHz9WHkFnFgFYHjCJyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:82:58:1e:3f:c6:cb:f3:7e:97:d7:48:cf:cd:e9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Oct 5 10:00:53 2026 GMT
Not After : Oct 6 10:00:53 2026 GMT
Subject: CN=28e11e9d739369544f0ce092a48d8e83609ff2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:81:e1:ca:fc:db:23:e7:93:0d:88:9f:25:
6d:23:ed:df:3d:9c:06:51:15:51:63:a8:e2:a8:4e:
69:39:c0:d2:0a:1b:18:8f:02:f8:b5:d6:db:54:23:
6c:eb:4c:b4:e9:1b:eb:c6:50:8e:b3:8e:13:e6:84:
e1:6a:63:fa:a4:6b:18:f4:59:4f:eb:5a:6a:eb:f2:
a4:d7:fa:43:23:51:48:ca:56:71:ac:e7:e9:13:69:
62:2e:f9:8a:fa:24:0a:9e:8a:c9:f5:b7:08:d0:00:
ee:d1:5b:5e:24:04:a3:3b:3f:ee:b4:b9:68:3a:bf:
30:2f:78:44:f6:7a:cc:b4:aa:2b:35:ab:b9:cb:58:
e0:7b:86:55:e5:1b:47:1d:d4:7a:94:ce:f4:dc:39:
cb:79:d3:33:58:90:61:c7:94:79:f6:cc:b9:f3:e4:
ec:ba:ed:0b:a0:12:ef:84:33:71:a5:ce:78:da:df:
32:64:54:78:a7:bb:52:68:df:fb:41:27:2d:bf:e1:
03:46:67:8e:46:3f:b1:9b:25:be:d5:44:72:ac:dd:
f3:3f:c5:6b:72:ab:f3:26:3a:54:fa:4f:42:27:a2:
e2:fd:d6:65:64:8f:e2:68:b4:ab:d3:d9:19:90:4b:
9b:cd:8c:f2:10:59:82:24:ce:22:2e:f7:46:c6:49:
55:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E1:1E:9D:73:93:69:54:4F:0C:E0:92:A4:8D:8E:83:60:9F:F2:A3
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:82:49:21:ce:ff:c1:2a:08:05:fc:aa:39:c0:fc:73:1f:ac:
1e:09:f9:f8:3c:42:50:4d:65:b9:ca:50:9a:95:d6:3a:21:3d:
c3:b6:82:ff:24:d0:ec:16:0a:cc:62:0c:be:f1:09:78:76:12:
17:fd:fc:3c:ce:a2:50:8b:dc:93:80:2a:80:84:7c:55:d0:fd:
8a:a2:5a:5f:64:b9:66:ff:d3:4b:dd:11:13:92:17:ca:34:bc:
98:3a:78:b9:a7:1e:64:ae:aa:19:4b:13:41:99:ec:3b:b0:e9:
09:26:e1:a6:9e:c3:bc:51:5b:c0:cd:93:f7:1a:01:e5:d0:69:
99:47:c4:08:88:41:da:09:3e:63:c8:0a:99:ec:4b:e7:64:6e:
9a:f9:87:47:c4:25:6b:5b:1c:0f:51:5c:c1:93:da:8e:b1:61:
54:59:25:5c:cf:3b:c7:ce:06:3a:af:83:89:c7:5f:db:eb:b5:
ee:56:1e:4f:25:76:14:e7:51:9f:09:23:78:9a:23:00:ed:f8:
41:21:05:7f:a9:a4:32:df:d6:51:20:83:22:74:7b:33:47:67:
cf:26:e5:29:7e:3e:9d:df:56:7e:72:79:35:d4:11:92:2e:71:
03:8d:25:81:f5:cb:fe:15:b2:4e:67:ab:4f:6a:65:bf:ec:12:
ed:a9:f9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:24:28 2026 by rpki-client