Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
File: xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json)
Hash identifier: WiTkottQjBdtN+gY0m8lAAmx+tcsWRZ9vgZiHnZRuY0=
Subject key identifier: 90:B3:7E:04:E0:45:21:BE:5E:10:B9:3B:D2:A0:5B:65:AA:20:61:A5
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial: 01A0FF105F52D5954AE450B82C2D6342EC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
Manifest number: 06A2
Signing time: Sat 03 Oct 2026 00:00:58 +0000
Manifest this update: Sat 03 Oct 2026 00:00:58 +0000
Manifest next update: Sun 04 Oct 2026 00:00:58 +0000
Files and hashes: 1: MWnPy89PH_1TfAr-2f04R8v5sE4.roa (hash: lLx6SLjmp2bg19wDs+FyMt7/MMn+v1mjyT18ZnGU1Mk=)
2: gchew8N-s3QGJhaPeq9th0RAwrA.roa (hash: 8LHWubfz5C/zrE3nYoyb2vELJgFr9oL05PR7fmzV9hw=)
3: m2sCh5HkLxEE1VASi8B7f5_IGDo.asa (hash: 4Epl+7kUup5rqY+UK4i3mas67nTsku/KVZ8PPtRd/NQ=)
4: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: G7q0E1vIfTqOtkCz+PxAfhYhUY0oR1CQ8xgWSTwy4aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:10:5f:52:d5:95:4a:e4:50:b8:2c:2d:63:42:ec:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
Validity
Not Before: Oct 3 00:00:58 2026 GMT
Not After : Oct 4 00:00:58 2026 GMT
Subject: CN=90b37e04e04521be5e10b93bd2a05b65aa2061a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:54:dd:c3:5f:dc:f9:7d:68:f5:5c:2f:54:
1c:09:78:6c:3d:fb:cb:be:20:e2:10:b7:26:ea:fa:
e0:f3:c3:7f:91:88:d3:20:1b:10:2b:2a:b9:85:8f:
70:12:1b:42:90:4d:69:b5:8f:c0:01:ee:6f:68:b2:
1a:47:f1:8c:56:c6:90:cc:13:95:70:84:2c:5d:6c:
e3:04:60:69:ee:f2:71:2f:ce:d8:cc:cf:9e:73:00:
40:77:43:53:3e:f6:9b:e9:13:09:3d:d6:75:9b:c9:
d3:aa:02:a7:31:b0:e8:fe:13:99:df:2a:67:bf:25:
ff:fa:eb:4a:04:2c:9a:c1:f0:a3:ea:89:f5:23:85:
ab:d2:82:a1:9c:bf:df:77:55:79:af:98:c6:0b:d1:
6b:77:10:1c:c0:cd:06:b4:88:fd:2a:7f:21:d5:c6:
98:43:70:ec:bf:76:0c:7b:ce:81:53:30:eb:84:93:
d2:4a:ed:ab:21:ae:c1:1a:43:76:e5:c2:17:26:ff:
2f:ae:e3:2a:3f:df:21:99:92:8d:bf:02:19:ff:78:
06:83:03:3c:c4:5b:ef:63:5c:81:cf:bd:82:4b:eb:
47:05:4c:a3:88:46:29:7e:8f:01:64:fd:9e:fd:fe:
0e:f7:fa:a5:fd:1e:eb:05:7b:d1:72:64:6d:5c:33:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B3:7E:04:E0:45:21:BE:5E:10:B9:3B:D2:A0:5B:65:AA:20:61:A5
X509v3 Authority Key Identifier:
keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:07:53:82:56:1d:18:90:bd:3f:3c:7a:aa:5e:05:c8:6f:aa:
fa:4a:24:df:98:9d:b7:28:0d:8f:2a:b7:ed:14:d8:ef:d7:67:
1a:f0:fd:e8:58:7f:ca:eb:a7:3a:24:48:31:d7:c3:de:29:08:
d1:8b:78:53:7b:59:ae:6c:56:f1:1d:6a:10:c0:f4:02:d1:9a:
39:3b:21:91:bf:d0:c5:fd:45:a9:23:2a:b3:03:9e:0e:5d:88:
13:96:2d:85:6c:62:f8:ba:70:cb:3e:65:af:a6:6d:4e:4e:d4:
91:25:aa:61:d5:94:c6:37:62:72:7d:2a:e2:b7:99:e2:26:d3:
ec:37:bd:e1:11:86:e0:2a:0a:12:8a:9e:d4:d7:a7:1a:c8:75:
c2:5e:c6:a9:1f:72:f3:02:d7:af:fd:da:43:a4:1f:c3:d7:b1:
4f:06:a4:d4:86:f6:72:39:21:f6:08:b4:1b:15:fe:bb:18:05:
23:2c:dc:85:41:b1:8a:11:46:c7:7e:0f:f0:09:aa:8a:28:b7:
59:1a:99:3f:59:27:57:05:d2:a1:8b:64:4b:57:b4:d3:0d:95:
b9:57:c5:4b:6d:d5:11:dc:d1:4a:57:8d:da:ba:b8:87:f8:31:
9a:65:ba:ac:2f:dd:d2:f6:d8:aa:1b:19:b5:65:95:89:61:d7:
cc:45:df:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 09:54:49 2026 by rpki-client