Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
File: xC4WYonhwfw6mLVFQLzHMUbXSII.mft (raw, json)
Hash identifier: dNKCYnTE6VKBZgz9UgdPOsATS9Q8MthBwvS/9zgGYJY=
Subject key identifier: F3:F8:A3:BD:85:44:26:E6:64:51:85:8C:F1:71:FD:47:BB:25:47:79
Authority key identifier: C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82
Certificate issuer: /CN=c42e166289e1c1fc3a98b54540bcc73146d74882
Certificate serial: 01A0DB03CE5F21318DC7CAFE2994BAE0DEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
Manifest number: 0271
Signing time: Sat 26 Sep 2026 00:00:54 +0000
Manifest this update: Sat 26 Sep 2026 00:00:54 +0000
Manifest next update: Sun 27 Sep 2026 00:00:54 +0000
Files and hashes: 1: Lte9ihIhwLMJEwykODf0-Ea8xPQ.roa (hash: v/rTSSPoZthEpEjHR7Sqj/7dnyWCaWiGBnHcyQGxAwA=)
2: xC4WYonhwfw6mLVFQLzHMUbXSII.crl (hash: Med+wyH1nNofOigG15T1sCiW1fYYx6qAI72so1Fv7nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:03:ce:5f:21:31:8d:c7:ca:fe:29:94:ba:e0:de:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42e166289e1c1fc3a98b54540bcc73146d74882
Validity
Not Before: Sep 26 00:00:54 2026 GMT
Not After : Sep 27 00:00:54 2026 GMT
Subject: CN=f3f8a3bd854426e66451858cf171fd47bb254779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:31:ca:b2:6b:d5:7a:49:5b:67:04:be:13:24:
c3:27:ff:a1:53:02:d0:99:e4:85:a7:81:e3:7f:38:
a3:21:0e:d7:aa:a5:04:01:c9:96:67:c3:ca:91:c5:
1e:c4:a6:ea:8d:80:c7:2f:07:4b:84:23:a1:7d:02:
c0:46:20:57:aa:1f:01:87:08:ec:e3:8f:e3:75:43:
ac:b5:29:35:ed:4c:f9:f3:ba:38:ac:84:af:b3:1c:
21:ca:22:7d:0b:da:e4:52:52:9d:46:4b:86:1a:39:
f2:f4:44:b5:41:ea:e0:9c:78:d7:25:61:5b:08:d4:
db:76:e6:9a:59:eb:18:49:db:a2:e5:14:b4:99:0e:
a3:52:03:f6:74:27:51:7b:cd:fc:c0:3e:33:e5:a6:
d8:b2:03:00:65:40:6d:f6:e1:78:70:4f:ee:9d:ab:
70:5f:a4:1b:20:cd:a7:eb:75:37:28:d0:d6:c0:bb:
23:70:b6:6e:05:2d:20:e6:4d:83:d6:2f:a1:de:61:
17:be:66:72:a9:54:84:08:6c:d3:85:71:b0:f4:5b:
1b:d7:19:7f:ee:e6:a5:9f:c4:a9:37:f7:20:76:0d:
00:19:1a:c9:45:94:96:86:9d:fc:dd:38:56:7b:75:
04:11:c8:66:1d:2b:2c:aa:a0:aa:a2:e0:4f:da:28:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F8:A3:BD:85:44:26:E6:64:51:85:8C:F1:71:FD:47:BB:25:47:79
X509v3 Authority Key Identifier:
keyid:C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5d:0c:6d:47:72:ba:0c:bb:6a:b0:fb:32:6b:83:1e:24:1e:
d4:e2:f7:51:82:ef:64:47:fa:2a:d4:b9:e3:13:a1:ad:6e:ff:
9d:ab:c5:77:84:f8:e4:c2:58:62:9f:80:97:e3:ac:67:0f:e0:
7a:10:29:14:75:fa:17:cb:de:c6:12:ad:f1:74:5b:ac:27:79:
8c:ca:8c:25:60:4b:d8:c5:58:60:d7:eb:36:dd:6f:f8:f9:92:
76:d3:01:f9:e6:c6:fe:69:0c:17:14:88:91:39:71:69:99:de:
3a:a7:12:0a:cc:38:6c:04:6c:f6:90:a2:42:9c:0f:f0:a9:70:
3a:29:0a:c6:2f:a4:1a:33:c6:4e:af:60:38:26:8d:df:b6:c2:
97:4b:a7:85:38:9e:94:b7:be:87:57:94:44:61:11:eb:6b:37:
e9:34:21:46:f7:ba:64:ea:38:4b:52:2f:35:3e:17:16:9a:4f:
c4:27:23:b3:fe:f6:0c:2d:56:c4:a2:60:0e:48:f8:cf:f6:47:
c7:31:47:64:b1:bb:95:9b:36:f9:50:56:fa:22:72:0d:52:13:
b8:d9:f3:e2:77:5c:96:a9:fb:30:d0:dc:a7:2e:93:f3:c7:cf:
57:d0:39:5d:2c:ed:2b:fd:64:04:62:e6:ee:b8:8e:3a:7e:51:
2c:92:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:36:12 2026 by rpki-client