Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
File: _XF_OrY5RaG-c5wrOiWJvqVd224.mft (raw, json)
Hash identifier: MY5xk/QWaPnQQjfl/Eq5//n5sO4DypkEV4TURrRRgiI=
Subject key identifier: 77:46:1E:A8:F5:4B:78:5B:65:C2:96:A9:0D:A5:80:F3:17:30:BB:88
Authority key identifier: FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
Certificate issuer: /CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Certificate serial: 01A0F0E78F051D5CD37EC3509497214E80DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
Manifest number: 102E
Signing time: Wed 30 Sep 2026 06:01:42 +0000
Manifest this update: Wed 30 Sep 2026 06:01:42 +0000
Manifest next update: Thu 01 Oct 2026 06:01:42 +0000
Files and hashes: 1: 0k0SMXdBc9F-S0u5frPj7VZDATI.roa (hash: fH1r/M4QH7i4V9CfzqHbwrIzNmtm+Dkd+L50E5BaVjo=)
2: _XF_OrY5RaG-c5wrOiWJvqVd224.crl (hash: XQ7j3ud144iog2taijAVyCkqg+GybpBGJkJovHoR2W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e7:8f:05:1d:5c:d3:7e:c3:50:94:97:21:4e:80:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Validity
Not Before: Sep 30 06:01:42 2026 GMT
Not After : Oct 1 06:01:42 2026 GMT
Subject: CN=77461ea8f54b785b65c296a90da580f31730bb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:4b:6d:a0:7b:5d:3e:93:c1:ba:fa:54:dd:
05:2e:b3:2e:b0:09:4c:c8:a2:81:e4:9f:be:5b:50:
7b:6c:c6:09:cc:7b:77:13:b5:4e:18:aa:dc:e6:b0:
52:85:ef:a0:c5:af:dd:ac:29:63:0f:2c:66:d7:a7:
7c:de:76:b6:c5:88:ec:15:ed:31:26:81:38:f0:8e:
7d:f5:6e:fc:51:88:16:f4:86:26:cf:e1:2e:74:05:
04:b2:11:de:eb:15:6f:29:ca:7b:50:d8:6e:0c:e3:
dd:a3:9f:26:e5:86:3c:a3:84:e4:51:5a:c5:02:1b:
2e:5b:8c:5d:57:f6:a5:ba:07:65:7b:76:95:f0:e9:
a6:dc:e0:2f:54:20:cb:fe:42:11:06:be:eb:24:c0:
4f:45:26:be:a1:8d:d9:4b:d1:07:33:c5:f5:8f:b3:
61:67:48:ad:58:c8:2a:af:ee:d4:6d:95:20:06:ee:
c6:2d:c0:57:c5:d2:c1:5e:bd:20:83:39:1b:81:08:
eb:b2:9b:58:ce:cf:ba:ca:2d:a1:83:be:53:8c:31:
03:4b:d2:4b:14:fe:60:59:fc:63:19:d2:b1:bd:5d:
0c:cd:da:b2:22:e9:89:1e:7a:42:ed:17:c0:07:72:
e8:63:d4:7b:9d:ef:0d:97:84:db:b6:e6:e4:ab:d5:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:46:1E:A8:F5:4B:78:5B:65:C2:96:A9:0D:A5:80:F3:17:30:BB:88
X509v3 Authority Key Identifier:
keyid:FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c8:88:1c:ce:eb:d8:88:8d:93:1c:2f:20:0d:49:14:6d:37:
4a:4c:e6:9f:a2:18:7d:3a:fa:9b:91:e7:df:df:c2:c0:b2:c4:
eb:af:59:1d:12:7a:5f:fb:a0:08:14:84:87:9b:92:e0:f1:e7:
6d:97:c6:57:c0:23:ca:e8:93:99:03:21:5f:39:4c:4e:6e:51:
f6:ae:66:37:bf:74:6f:92:b2:e0:5e:37:12:a9:d2:8a:93:58:
4b:4c:a4:80:e0:0f:ef:08:99:66:b7:8b:c1:20:ac:b5:f0:94:
1f:3b:ec:b6:2d:71:03:b6:11:2c:0d:9e:64:9d:92:b8:0b:ce:
ee:54:4c:12:8c:9e:39:d6:9f:b1:da:9e:14:b8:58:69:0f:2c:
11:37:95:ad:55:f2:ed:39:eb:52:83:e6:8e:c7:34:8b:cb:16:
2c:9b:73:e8:56:9d:61:c0:37:47:b3:3f:c0:24:de:13:0c:a5:
70:65:35:6b:ee:04:4c:aa:d8:58:45:77:19:f7:37:1a:21:b4:
6b:0d:84:b5:f9:ad:f9:8e:e8:8c:f7:dd:fb:ae:e2:23:7f:aa:
3e:42:39:16:6a:7b:b1:77:02:66:0a:25:ca:06:50:ca:02:86:
18:d3:23:16:0d:c5:6f:bf:e2:00:9b:69:74:22:90:e6:a3:3c:
9b:8e:5d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:06:55 2026 by rpki-client