Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
File: xU3YgoUsxFhrH-40wFAdXbfWDws.mft (raw, json)
Hash identifier: QjS0lv1x/WxpiNccuSVewLPPwGnwsZAAjw7ivliDEyg=
Subject key identifier: 5E:F7:E4:6D:31:E9:65:97:6C:23:97:CF:8E:63:C3:7B:13:71:88:A4
Authority key identifier: C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
Certificate issuer: /CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
Certificate serial: 01A0FD227677E7F89E81D863BFC74E9546FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
Manifest number: 0C47
Signing time: Fri 02 Oct 2026 15:01:29 +0000
Manifest this update: Fri 02 Oct 2026 15:01:29 +0000
Manifest next update: Sat 03 Oct 2026 15:01:29 +0000
Files and hashes: 1: 73qIjcwhVoNUSh6y8S9vmR-78LI.roa (hash: W2dcEwkCBgOixH5r0yINyyX7ud/0OMWWSsCwZ1EhRwo=)
2: xU3YgoUsxFhrH-40wFAdXbfWDws.crl (hash: spKuC707g0kg/Co0U3ytuwu9fLv/7BE14nxadOZUGN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 15:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:22:76:77:e7:f8:9e:81:d8:63:bf:c7:4e:95:46:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
Validity
Not Before: Oct 2 15:01:29 2026 GMT
Not After : Oct 3 15:01:29 2026 GMT
Subject: CN=5ef7e46d31e965976c2397cf8e63c37b137188a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9b:20:f4:ad:d2:f0:16:59:af:e8:76:2c:28:
1e:6b:56:2a:cf:a9:70:8d:1e:79:86:f3:a8:66:45:
ee:5a:0d:44:25:67:e9:66:5c:05:86:cb:e0:18:dd:
1f:b5:d8:99:fe:25:2a:0e:dd:32:40:e1:8d:a4:d8:
d3:c6:00:ac:d5:d1:6b:cf:33:fc:09:18:7f:f0:b6:
8a:b9:6d:59:79:f4:9a:ff:8a:7e:59:92:31:6c:09:
b7:f2:5f:66:47:bd:94:28:ec:dd:76:ef:5b:ed:15:
d8:dc:35:a0:0c:1d:38:4c:d6:1e:62:a9:06:1d:33:
34:6d:25:8b:01:3c:57:05:bf:c8:be:3e:fa:e1:ab:
7e:1f:bd:7e:24:9e:dc:be:fe:55:c3:29:9d:4f:12:
8e:c7:5a:57:c0:46:b8:b5:34:b3:18:3a:76:17:cf:
8e:fd:55:61:ec:73:0d:55:55:a4:4d:f6:66:81:29:
0d:08:92:3e:95:87:e2:1b:b5:8a:63:3d:a6:0e:fa:
e0:5c:2a:c1:1f:23:e9:ee:89:ba:31:4a:a6:0d:7a:
8b:78:cf:fe:29:a9:82:a3:1c:c5:5a:7c:e4:2d:92:
43:b3:2c:ff:87:e8:e8:30:71:0d:e6:58:61:51:0c:
fb:17:5d:a3:ee:6b:f2:5b:b0:ca:67:f8:96:f4:45:
43:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F7:E4:6D:31:E9:65:97:6C:23:97:CF:8E:63:C3:7B:13:71:88:A4
X509v3 Authority Key Identifier:
keyid:C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:15:60:fc:0c:a6:7e:ce:85:d4:bf:68:49:a2:48:b8:84:3a:
8b:18:c5:52:39:bd:bf:02:46:39:f7:c9:f8:b3:66:11:09:20:
20:f2:aa:d8:a8:35:fc:92:3e:78:e1:6a:d6:98:37:f8:5f:27:
e4:f0:ec:19:a6:f7:31:04:20:1e:4f:3a:30:06:78:15:9f:bb:
74:20:52:df:db:0c:1c:24:ca:f5:1d:38:87:b9:d8:31:01:37:
f5:65:e5:cb:7c:31:a7:aa:f2:a5:a8:cc:79:2d:37:78:c8:8c:
b4:dd:3b:e2:13:16:13:6c:18:a1:21:9f:83:0c:99:24:d3:ef:
93:40:98:26:b3:ef:cd:e8:3d:36:fc:0c:28:71:95:6c:dd:fd:
da:2c:6a:95:b8:2d:c6:d6:2b:e1:30:66:3e:9e:33:a1:0b:a1:
c7:02:d9:fd:61:3f:29:a9:c9:c8:1b:bb:98:53:35:3a:e0:71:
30:8d:82:c2:cd:ce:bd:a8:af:3c:9b:8b:a5:7b:8b:93:dc:ba:
a1:8b:b7:58:25:f9:96:c9:f1:e2:f9:44:3e:74:1e:61:0b:fe:
c9:47:97:de:23:ec:ad:a2:8e:cf:6c:07:72:52:ca:65:f9:9a:
0b:37:fb:3c:8b:84:7e:bf:be:68:36:b9:78:b1:51:98:89:0d:
be:36:b7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:09:34 2026 by rpki-client