Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: Q7th03RxoCe1UH6ojbi49r1D7/+NdmZK4AuvO3jyngk=
Subject key identifier: 5E:73:E8:B1:FD:EE:EE:7D:11:62:B8:4C:CF:DC:F4:13:B7:EB:CB:B6
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 01A1069336003B673C21F381C58DD194E6F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 130F
Signing time: Sun 04 Oct 2026 11:01:13 +0000
Manifest this update: Sun 04 Oct 2026 11:01:13 +0000
Manifest next update: Mon 05 Oct 2026 11:01:13 +0000
Files and hashes: 1: 1HMsGfdsMj6bVCe_HqSPHKmPGQA.roa (hash: Aa+3horScinkb91IcV06nuOTEkzdcEAPUq8TBlQGMDg=)
2: Q6q5ifTmogwJicn2e4z2f5_1UN8.roa (hash: ZCT+LPivkmFqXHHIYRE3kEHzKOk9mVM2bvW0OtpppFg=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: uY0lolnI/5onX88OKbA00AMY5rRBm0OBOBfgnZU9Ayw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:36:00:3b:67:3c:21:f3:81:c5:8d:d1:94:e6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Oct 4 11:01:13 2026 GMT
Not After : Oct 5 11:01:13 2026 GMT
Subject: CN=5e73e8b1fdeeee7d1162b84ccfdcf413b7ebcbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:7c:af:34:df:37:12:02:45:2b:bf:6e:32:
8b:7f:27:86:0f:cb:ad:ab:0c:03:49:94:1c:2b:32:
07:38:44:c1:ba:79:1f:61:8b:2e:54:46:c7:6d:72:
de:e2:46:e0:5a:a2:c7:e9:5d:25:23:c7:47:9a:4b:
7f:77:61:a9:25:6a:44:c6:c5:79:d1:4a:f2:6f:91:
75:02:47:5c:39:55:51:21:15:91:aa:05:d9:49:30:
b1:17:d5:14:14:15:01:16:6f:2c:19:39:1b:d8:06:
30:5f:47:b3:7b:7d:d0:3c:0f:5f:ee:30:ad:5d:ef:
ff:24:43:9a:35:22:96:41:97:7e:34:6c:7b:ba:05:
e7:85:09:b4:4f:d6:29:65:11:b4:ed:54:05:7f:80:
f4:e9:60:08:32:e0:a5:b8:27:ac:e5:74:52:ae:37:
22:bf:86:94:ba:cc:f0:57:ba:97:f5:db:84:ab:f7:
4a:42:d7:1e:82:b2:a7:78:d5:8b:c9:4c:dd:a7:15:
52:70:a5:46:84:58:46:d2:cc:da:d4:5e:19:cf:f1:
b9:e2:fb:37:24:d8:b3:28:97:6e:6a:04:31:ca:69:
8d:c2:cc:fb:5b:3c:4f:ec:39:7f:22:f4:a0:52:d2:
4d:6e:31:b6:39:db:27:46:77:d9:a3:79:f0:fd:48:
92:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:73:E8:B1:FD:EE:EE:7D:11:62:B8:4C:CF:DC:F4:13:B7:EB:CB:B6
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2f:4e:f1:0c:41:ee:a6:4e:0d:fd:76:a9:e6:42:b5:bf:d8:
93:45:1e:08:ee:0e:f8:3a:87:e6:0d:0a:47:2a:16:95:50:ca:
7c:07:ab:16:ae:33:63:d1:71:f1:2a:1a:d2:c7:64:9e:6c:bd:
cf:60:28:b7:f6:a0:b4:e4:21:03:55:8e:2a:a5:6e:38:7d:e1:
05:52:41:22:8e:70:f8:ef:59:92:00:2e:d5:26:84:94:c5:8b:
aa:3f:c9:7a:5c:61:58:1a:bb:71:80:24:f6:a5:b5:2c:29:b9:
4b:f6:d4:b5:5b:26:5d:0e:1c:82:1d:f3:04:13:51:ca:3a:07:
a4:ea:4d:82:3f:0b:db:17:c7:2b:53:ae:ee:c1:b6:e8:b9:56:
67:18:19:4a:81:76:ff:48:8c:7f:b5:42:58:d6:53:7f:d6:f0:
34:a1:b3:ea:2f:75:12:48:6c:7f:e9:a0:39:f0:06:66:96:bb:
b3:41:9c:32:1e:14:9b:9b:65:01:83:b0:33:a0:01:3a:11:da:
1b:2f:83:c5:54:58:2a:7e:55:4b:74:69:4d:31:81:66:ef:e1:
f7:9a:c4:87:9d:67:7a:a1:c9:c1:1b:4b:7f:68:9e:3e:d2:05:
f4:fa:08:d8:96:c6:d3:40:d6:bd:19:5b:0a:70:8f:26:3d:47:
62:92:2c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:40:23 2026 by rpki-client