Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
File: xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json)
Hash identifier: 7B7k4pdNCiBDu8UYonyn22ZQInF6ZlAkDqPT40NoDuo=
Subject key identifier: E9:F4:38:DB:CB:C8:5F:64:6B:5B:F7:D0:BF:ED:CF:BB:D7:32:6A:D5
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial: 01A1DD27340C7BFEABC80C2FE2BA45B21E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
Manifest number: 0B9A
Signing time: Sun 15 Nov 2026 03:01:36 +0000
Manifest this update: Sun 15 Nov 2026 03:01:36 +0000
Manifest next update: Mon 16 Nov 2026 03:01:36 +0000
Files and hashes: 1: 4kyWrT9Xy1B7TLtNDP6HuPz-7hw.roa (hash: sWHWI8IzaliyTyKxy/NPSWlKi/bMUwx2CvIPkFk/56s=)
2: A_J1Iis85mInuYBjqNWnaY64Er4.roa (hash: KG2bwrYCBOkD3k9N+nA/ujMikD/ZloBG8hBsS2kc7cc=)
3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: L46I9Wisru0fkvAljrfheJFw3FBLYlV1eZ6IYLpsICw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:27:34:0c:7b:fe:ab:c8:0c:2f:e2:ba:45:b2:1e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
Validity
Not Before: Nov 15 03:01:36 2026 GMT
Not After : Nov 16 03:01:36 2026 GMT
Subject: CN=e9f438dbcbc85f646b5bf7d0bfedcfbbd7326ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:54:3b:e5:2c:d2:28:c5:78:97:39:6d:fe:
fc:1d:68:7c:22:90:47:42:07:91:89:30:3a:73:46:
08:26:0d:73:6e:5a:cb:3a:93:19:9e:08:b2:e4:43:
67:2c:f9:92:82:52:c6:81:d8:50:d6:6b:14:e5:c9:
14:72:c0:cf:93:e1:8f:d2:9a:7a:95:b0:b3:5a:0b:
85:78:27:05:a4:7e:9a:4f:fe:34:6e:00:fe:bc:82:
e4:ff:c0:35:11:eb:11:24:e3:7c:5b:f4:7e:87:ab:
01:4e:de:61:d7:5b:f2:65:e7:b6:3b:ed:72:c8:b0:
06:18:90:be:78:1c:33:27:57:4b:13:55:d1:7f:ef:
83:7c:12:42:d3:d3:85:9c:88:f9:5f:8d:c3:ac:4f:
24:b3:9e:cb:41:a1:8e:c4:7c:ef:3d:67:6d:01:f5:
6d:3d:a6:e2:f2:de:2a:19:35:70:87:84:52:15:a7:
3a:7a:32:db:12:10:1b:f2:16:5a:39:2d:c4:dc:46:
50:a1:bf:a1:ce:e3:b7:e2:23:2b:67:cd:62:dd:06:
9c:70:ae:6f:b0:24:9f:03:a4:e8:2d:53:09:91:94:
3e:8f:1a:85:ef:f3:39:70:ad:49:ec:a2:e2:b4:9a:
1b:e0:ae:7e:cf:cd:81:bf:b6:ef:8b:a8:2c:ae:c7:
2b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F4:38:DB:CB:C8:5F:64:6B:5B:F7:D0:BF:ED:CF:BB:D7:32:6A:D5
X509v3 Authority Key Identifier:
keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:07:45:34:6e:16:54:0d:30:ad:f9:b8:2b:6d:24:96:b3:2c:
3f:21:80:14:dd:6d:cb:89:44:70:14:2d:50:31:3f:8b:91:7c:
33:50:1c:09:9d:89:54:ad:4f:fc:19:9a:19:23:12:c1:78:7c:
28:19:78:c8:ce:17:c5:c4:29:20:bd:c5:5c:d7:a3:d3:97:fc:
bb:9e:78:15:b7:46:01:ee:a8:bc:f9:1d:d1:2d:1c:d0:10:03:
80:0f:2f:b2:b3:b1:7a:91:7c:34:82:e3:45:83:fb:33:d0:af:
97:2e:53:d4:9e:c7:e8:ad:a7:b5:18:a4:70:d7:79:8d:fd:f2:
4a:56:4e:0d:88:34:1f:1d:b5:47:74:16:12:c8:22:da:ad:5c:
ea:6d:0e:18:32:a8:4b:c6:1d:0b:69:12:57:ca:00:fb:29:c2:
17:a8:4f:4e:32:8f:81:72:04:30:c7:7b:e0:20:a3:82:06:86:
7d:43:45:7e:e8:bb:6c:9c:c6:95:34:9b:ef:52:e2:c5:fd:b5:
c6:99:90:fc:4b:18:65:62:61:67:70:d7:c2:1d:15:ae:9a:31:
e0:f2:9c:44:5c:14:4e:20:4f:77:bd:ad:84:95:a8:c1:69:cf:
3c:8e:8d:be:a4:da:f8:cd:04:44:57:3a:23:02:c8:e7:8c:0b:
74:00:90:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:02:18 2026 by rpki-client