Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
File: xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json)
Hash identifier: d+iE18vhuoDP+6kp4+csWAoCF0DY3LlYKTWIdejhcSo=
Subject key identifier: CF:EA:5E:7A:D4:8A:37:21:EE:14:25:BE:27:7B:D9:53:40:7A:A9:F7
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial: 01A0E02AD6D6E727A131CF83B69E6906695C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
Manifest number: 0B17
Signing time: Sun 27 Sep 2026 00:01:38 +0000
Manifest this update: Sun 27 Sep 2026 00:01:38 +0000
Manifest next update: Mon 28 Sep 2026 00:01:38 +0000
Files and hashes: 1: 4kyWrT9Xy1B7TLtNDP6HuPz-7hw.roa (hash: sWHWI8IzaliyTyKxy/NPSWlKi/bMUwx2CvIPkFk/56s=)
2: A_J1Iis85mInuYBjqNWnaY64Er4.roa (hash: KG2bwrYCBOkD3k9N+nA/ujMikD/ZloBG8hBsS2kc7cc=)
3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: fQZPN75kx6ID744BSVqyWuWODW2ZnTA4+3cPLkUbq6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:d6:d6:e7:27:a1:31:cf:83:b6:9e:69:06:69:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
Validity
Not Before: Sep 27 00:01:38 2026 GMT
Not After : Sep 28 00:01:38 2026 GMT
Subject: CN=cfea5e7ad48a3721ee1425be277bd953407aa9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:78:8d:77:7a:c9:9d:ce:99:18:05:9b:3b:aa:
76:f4:0b:61:b1:93:68:97:a6:8a:e5:5b:8a:75:67:
9b:00:97:19:10:fc:73:87:73:39:9c:76:97:1c:4c:
96:6b:c5:17:d8:7f:af:49:56:df:66:43:f0:bf:bd:
82:8a:e8:16:8b:19:69:46:4c:54:f5:dd:b2:25:05:
8f:58:1c:31:af:ac:50:35:b9:29:5e:b6:f7:dd:ca:
4c:72:06:36:d1:82:47:15:02:dd:96:56:31:d3:cb:
64:df:ab:9b:56:0d:d3:b3:ce:c2:a6:aa:9f:9b:4a:
e0:e8:44:a4:8e:66:b0:be:55:ac:2c:fe:1f:78:b3:
e6:71:3f:8a:d0:1a:96:5c:6b:03:4d:9e:bf:0a:d4:
6d:67:47:e8:b2:9f:50:0d:bf:e7:85:90:e2:eb:05:
2e:75:58:79:81:0c:79:01:f5:f5:05:10:87:a0:96:
32:02:2e:6b:52:c8:e6:0f:5e:90:5e:f3:1d:36:e2:
be:35:c0:32:64:18:42:fe:ea:50:95:22:78:cf:65:
1f:bf:03:cc:c6:df:ac:ae:15:24:41:fe:81:96:95:
b7:f4:30:02:36:9e:70:76:c4:57:95:cb:70:a9:2a:
1a:49:b0:2a:50:61:9f:1d:8a:18:16:91:4f:d8:10:
45:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EA:5E:7A:D4:8A:37:21:EE:14:25:BE:27:7B:D9:53:40:7A:A9:F7
X509v3 Authority Key Identifier:
keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:13:c6:d4:dc:21:93:c6:15:af:05:d6:a7:13:f8:c9:e9:c1:
5f:06:14:97:d0:3b:f4:b6:c9:6a:70:49:6c:db:23:c6:c2:0c:
d5:6f:e3:f5:75:7f:75:0d:8e:f0:29:e6:2e:e4:43:29:66:71:
0d:97:01:dc:1d:ea:6d:e0:4a:8f:a0:b4:13:4d:20:b4:31:2c:
3f:a8:1d:f1:ca:8b:0b:ad:59:43:34:c5:e6:f0:14:21:fd:40:
9b:3b:a9:76:8b:29:98:37:4f:34:59:d3:3c:b6:48:8b:7b:a3:
99:c3:48:12:6d:f7:40:2a:8d:c2:f3:39:04:f8:6f:fb:65:59:
bd:13:d6:24:9d:b3:21:b6:50:e6:61:4e:10:c7:56:e6:ac:16:
31:af:58:7d:ea:d0:a2:77:23:32:aa:14:d5:d5:1a:6c:8c:ff:
25:e6:54:72:f5:8b:56:fe:61:62:3c:42:2b:f9:77:3f:4d:33:
f0:3e:a3:85:dc:2d:12:f1:fc:2b:49:15:bc:b8:66:fb:68:a4:
35:de:83:40:09:f2:b9:d0:76:94:4c:a7:70:b1:f8:0c:7f:dc:
21:b7:86:ff:fc:a9:40:1c:58:35:7e:31:14:74:17:4e:d2:c7:
35:1c:29:be:3f:c1:b3:bc:c4:29:e1:a0:50:42:c1:9b:c5:37:
69:eb:15:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:11:17 2026 by rpki-client