Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier: UHVGOo+1MY/H8erTbWSgg6XYPOvlCRhHABx9eelCVrM=
Subject key identifier: 4C:C9:F0:D0:27:61:4F:C2:D9:48:FB:65:5E:EF:03:2B:2C:54:21:0E
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial: 01A1DDCC1F54D3BAA636B42EB1B341A70B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number: 12C0
Signing time: Sun 15 Nov 2026 06:01:44 +0000
Manifest this update: Sun 15 Nov 2026 06:01:44 +0000
Manifest next update: Mon 16 Nov 2026 06:01:44 +0000
Files and hashes: 1: XfPxNqw04f4ysUNycil0EQofl1M.roa (hash: JClRzQorRQbXDP0L/PC7A7JxisEaLLPV1aRUiLTnBv8=)
2: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: qjzSJh99SGkhOxTK+sSHS4SnsJ3poq1yC0SrDD6bdsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:1f:54:d3:ba:a6:36:b4:2e:b1:b3:41:a7:0b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Validity
Not Before: Nov 15 06:01:44 2026 GMT
Not After : Nov 16 06:01:44 2026 GMT
Subject: CN=4cc9f0d027614fc2d948fb655eef032b2c54210e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4d:77:28:5e:83:9d:0f:0e:77:76:94:89:75:
08:04:4e:58:b7:02:31:94:ec:91:76:32:eb:92:ec:
c3:fa:18:80:3e:90:bd:72:6c:42:32:63:c7:a3:94:
db:b9:19:c0:9e:cb:d6:d2:3f:c9:eb:76:46:54:e3:
05:8a:ad:cf:b9:52:11:6c:f3:90:91:91:4d:3c:21:
6f:18:6c:84:27:fe:d7:62:a7:1c:f8:8c:99:5c:08:
03:c8:2d:09:e8:5d:35:f9:c8:31:d5:5f:41:12:10:
b0:ac:0d:93:b2:0d:cd:b7:6b:e3:ec:aa:2b:e5:59:
cb:e2:50:df:d8:42:f8:d1:e7:34:78:29:09:7a:a8:
d8:0a:cb:9c:ef:b1:cf:9b:20:e9:c4:8e:f6:c1:e5:
eb:f5:7e:67:8d:f4:8e:51:61:67:c9:5a:da:fc:5b:
49:62:bb:c1:83:d9:bd:5c:04:a8:b8:7a:16:df:6f:
63:96:b1:cc:27:3f:e0:e1:da:a8:81:38:a2:b7:8d:
69:c9:9b:21:52:fb:b0:85:4d:77:f4:37:93:93:c0:
24:ec:70:0a:64:18:6a:fd:fe:ab:84:47:39:ab:ad:
9b:c9:63:72:39:85:40:9c:91:8d:08:73:88:29:6c:
0f:9c:cd:8a:fd:62:f9:04:0c:ab:f1:23:1c:e2:3e:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C9:F0:D0:27:61:4F:C2:D9:48:FB:65:5E:EF:03:2B:2C:54:21:0E
X509v3 Authority Key Identifier:
keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9b:ed:40:7f:71:94:7c:cd:30:ce:d9:3a:27:b3:2d:40:83:
b5:25:79:74:f9:e5:e2:1d:10:6b:eb:25:f6:85:77:75:4d:b6:
88:05:6e:ea:9e:e3:f0:d6:11:b2:1e:bb:f6:f8:6b:fb:4a:b9:
d6:64:0c:2d:6f:75:2a:8f:fb:81:8e:b7:2f:bc:8d:db:f2:9e:
5c:fe:5e:18:9c:14:03:9f:f2:f7:be:30:c3:0d:2b:89:5c:16:
e6:9f:b5:ed:54:8b:77:9c:89:36:31:c1:00:9f:53:46:c0:2c:
31:33:f0:67:f1:37:ad:30:67:a8:a4:26:83:b4:16:59:75:0f:
74:12:9d:53:ff:c1:dc:df:e8:f8:19:cd:bd:c0:98:44:a9:0b:
be:fa:c3:70:65:c9:ac:05:bb:55:a8:6e:3e:03:8b:27:34:74:
68:9b:9b:37:d7:32:92:d1:16:20:dc:72:42:2a:27:97:73:84:
53:cf:88:3d:84:16:e4:58:11:17:7a:aa:c6:e5:b4:30:3a:16:
6c:58:31:fd:a5:5a:e1:e6:41:b6:c0:3c:2a:49:18:65:c8:45:
82:4d:4e:78:5a:62:45:5e:0d:18:fe:cd:2d:86:14:a2:2b:f5:
23:77:48:27:b8:eb:0e:56:13:4b:55:d7:83:b5:f4:c1:48:a8:
2e:f9:2f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:22:37 2026 by rpki-client