Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
File: _XF_OrY5RaG-c5wrOiWJvqVd224.mft (raw, json)
Hash identifier: vgN9FF41SeHyx6kJ7DvE3sPZc7YABr2qKyF20+stk8M=
Subject key identifier: 39:1E:A4:ED:4B:F8:4B:2C:DC:F8:B0:30:05:6A:A8:2D:5D:12:94:B2
Authority key identifier: FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
Certificate issuer: /CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Certificate serial: 01A0EEF9241D5B051928FACCB167A5180AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
Manifest number: 102D
Signing time: Tue 29 Sep 2026 21:01:40 +0000
Manifest this update: Tue 29 Sep 2026 21:01:40 +0000
Manifest next update: Wed 30 Sep 2026 21:01:40 +0000
Files and hashes: 1: 0k0SMXdBc9F-S0u5frPj7VZDATI.roa (hash: fH1r/M4QH7i4V9CfzqHbwrIzNmtm+Dkd+L50E5BaVjo=)
2: _XF_OrY5RaG-c5wrOiWJvqVd224.crl (hash: IOivbTpHKyN/ym1Q/cT2ddYJBLfnvYnjxbIyR5d+aYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:f9:24:1d:5b:05:19:28:fa:cc:b1:67:a5:18:0a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Validity
Not Before: Sep 29 21:01:40 2026 GMT
Not After : Sep 30 21:01:40 2026 GMT
Subject: CN=391ea4ed4bf84b2cdcf8b030056aa82d5d1294b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:fe:1b:15:04:54:f1:65:9d:cb:3b:b9:6d:
b1:17:23:ed:eb:2e:28:35:17:8c:d5:8b:0a:4e:64:
91:bb:6b:61:1e:11:e4:30:6e:de:bc:11:a1:a3:9d:
7f:a8:d0:5e:99:ca:01:68:b2:51:6f:21:0e:43:e6:
ed:5e:74:cd:a8:d8:d6:1a:ea:3f:c4:17:a6:1d:a8:
95:2d:b3:18:c8:18:a1:74:0c:4a:d4:9e:2f:86:56:
e5:4a:4b:f9:46:a3:26:d2:a8:89:41:ea:ac:9b:1a:
70:c9:ba:67:c2:30:7b:64:a8:5c:64:85:f2:61:37:
57:a8:5d:e2:f6:6a:2b:0a:c6:a4:23:02:41:73:b5:
96:52:03:d7:c6:38:25:b8:4f:4d:07:e4:02:b8:3d:
fa:81:9c:6d:79:33:a8:39:3d:c5:37:1e:4d:2d:b0:
b1:33:5b:b9:28:e5:39:5b:44:0a:70:d3:a6:16:04:
4c:c1:8e:c6:b4:15:a2:39:ca:c7:f9:a3:6d:0b:2d:
2e:b5:be:3c:77:a8:e1:7f:6b:f3:ac:71:7f:5e:61:
85:bd:2c:06:74:42:e3:e4:66:55:7b:6a:df:a6:b4:
33:5e:61:34:9a:22:a8:26:dc:4e:19:39:d5:6f:11:
e8:0c:07:10:5a:e0:31:d5:fa:a3:ff:19:fd:33:5c:
79:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1E:A4:ED:4B:F8:4B:2C:DC:F8:B0:30:05:6A:A8:2D:5D:12:94:B2
X509v3 Authority Key Identifier:
keyid:FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e9:55:21:ee:92:92:d2:b8:b5:ac:06:34:a5:a9:fb:c2:c6:
ae:06:b6:96:66:17:80:f6:a7:d1:d6:84:cd:2f:e1:33:e2:30:
1a:50:db:48:36:6d:ce:35:3f:9f:e2:f6:27:fe:27:e6:91:11:
d1:45:30:fe:38:61:29:59:6d:51:cd:01:84:60:35:a4:9f:43:
87:11:d8:3a:9b:10:c5:e4:ae:b1:4b:57:69:52:d6:44:2a:40:
b1:80:8e:da:83:8f:cb:db:b2:c9:f9:ac:15:80:5d:7d:ea:f4:
08:c3:d1:e0:5a:ec:5d:20:66:b5:c2:e6:ec:fa:d2:3b:d5:00:
0e:07:32:0d:b0:ff:b3:42:39:da:12:bf:b2:8a:1e:8e:15:ce:
81:f7:83:ed:cb:b9:86:ff:14:ec:0b:aa:b0:67:4a:3b:50:9f:
c7:af:90:dc:5d:a9:36:10:e8:e8:90:52:9a:d0:f8:89:b4:28:
f4:f4:12:9a:d3:9d:76:27:f8:7f:42:78:f2:fd:08:e2:1a:f0:
01:ee:8b:8b:37:d3:eb:ea:53:93:6e:a5:bd:e0:96:8d:b7:dd:
4e:37:c1:98:58:2c:ba:9f:3c:ac:1a:ea:c7:09:2d:8b:0c:8f:
3d:e2:16:41:30:d9:07:a6:09:5e:7d:9d:76:71:66:d2:f3:ed:
99:4f:2a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:59:09 2026 by rpki-client