Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
File: xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft (raw, json)
Hash identifier: jowOekYgtGH6ncsSBAy0KNVAdySOVp84KB4hTqHDfQk=
Subject key identifier: 4B:7F:39:22:DA:B7:1E:C1:3B:E3:43:73:E6:5A:CB:55:89:7D:5F:82
Authority key identifier: C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
Certificate issuer: /CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Certificate serial: 01A0F5A0807F7379FBDAC60550B515C85593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
Manifest number: 1A7D
Signing time: Thu 01 Oct 2026 04:02:11 +0000
Manifest this update: Thu 01 Oct 2026 04:02:11 +0000
Manifest next update: Fri 02 Oct 2026 04:02:11 +0000
Files and hashes: 1: eOXpQIA6qLtSRKi37aaBf2fN-Nw.roa (hash: YlsuBpQ4jmohvQqxKmhcIgBvEbbXIh+AX1kjTabOK9c=)
2: xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl (hash: vwf6g/56l7czKtsVmPhG9PYDzBjKg1a17E3NliPzr14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 04:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:a0:80:7f:73:79:fb:da:c6:05:50:b5:15:c8:55:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Validity
Not Before: Oct 1 04:02:11 2026 GMT
Not After : Oct 2 04:02:11 2026 GMT
Subject: CN=4b7f3922dab71ec13be34373e65acb55897d5f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:79:7e:bd:a3:e1:4b:96:db:e5:72:c6:f0:
04:e4:9e:d4:6c:e6:f0:91:a1:e1:b1:43:49:bd:2b:
30:92:31:13:cc:9e:d0:3f:4f:bf:4a:34:0b:25:3f:
11:cc:2c:c6:6c:e6:de:c3:c5:1c:54:ba:3a:4e:37:
75:41:25:37:3b:cc:26:7d:58:78:fb:1f:9d:86:44:
d1:a3:b6:b5:3b:bd:5d:62:2f:20:30:28:71:09:9d:
58:38:37:a5:17:60:f9:e5:95:97:3b:87:ff:7b:ff:
6f:c3:f9:09:ae:61:f3:f4:c3:d8:ad:5e:d0:bf:65:
a5:94:67:aa:e9:3c:c6:bd:36:90:0f:ad:ce:35:fc:
17:10:3c:fc:d5:cc:fd:82:0a:b5:08:6e:62:88:fb:
ed:2a:55:4c:dc:45:65:11:8d:f4:3e:83:5b:c4:d1:
69:10:54:4f:67:67:ea:13:5a:15:3c:76:94:37:d8:
8a:d7:30:00:a6:b8:48:db:89:28:6f:95:ae:82:88:
7a:47:32:8a:8c:a2:c3:42:a2:ad:a9:f9:79:3f:21:
fb:ae:e0:75:8f:a2:fe:d5:7b:18:df:04:ff:66:f7:
5f:05:19:eb:6c:5c:0c:1b:dc:db:74:e1:da:7e:20:
8f:59:d4:eb:54:e6:5e:1f:50:44:13:80:08:62:cd:
02:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7F:39:22:DA:B7:1E:C1:3B:E3:43:73:E6:5A:CB:55:89:7D:5F:82
X509v3 Authority Key Identifier:
keyid:C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3c:72:a2:54:b5:b3:6b:2f:68:d5:7b:99:0d:9c:fd:ea:ab:
4d:e4:2b:8a:0e:1f:1b:8d:08:c7:ce:bc:96:ee:f5:de:fd:cd:
49:c2:fb:93:84:fc:f0:48:66:2b:e5:e3:60:58:20:16:ef:82:
e8:68:12:1f:8f:b1:1a:43:5b:06:e9:fb:c3:c6:7b:09:d2:34:
94:91:38:be:db:08:53:e0:84:51:1d:b7:bc:a1:8a:6a:2a:82:
cb:21:13:b5:2f:31:65:7c:b3:11:fe:9c:85:52:df:b2:fd:0d:
b3:62:ce:29:98:bf:5d:a0:a8:d0:9e:57:fc:a1:73:04:5d:3d:
78:1d:04:3a:7b:4a:ef:3c:f9:1b:d8:41:43:70:f6:cc:8d:75:
c9:41:db:30:1b:cf:e9:cd:73:1d:09:f6:a2:6a:b6:ba:89:be:
6c:fe:d6:46:0e:e2:81:4d:9b:5a:52:33:34:8e:87:95:30:eb:
d1:a8:4e:98:ef:8d:01:64:b4:f4:74:81:35:97:48:44:4a:66:
62:d7:11:5f:6a:fe:39:53:79:b9:5d:a7:27:5b:6b:26:f5:a7:
d8:d2:33:ab:7f:0b:aa:b8:3d:ba:9c:49:93:a7:4c:d1:e3:8f:
39:a3:ed:4f:b0:1d:50:83:17:1e:1f:d5:a3:9e:80:28:57:d1:
49:4f:40:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:12:47 2026 by rpki-client