Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: RbDezW9Nh+DVk5/wbC/hyVrtzeGJysq5OO1XcP5KNW4=
Subject key identifier: AD:70:B5:84:1A:D7:68:61:27:31:9D:5F:84:CA:11:4B:B5:63:DA:62
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 01A102B6E3F16F1AC0EC64D08A5B45ED2341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 130D
Signing time: Sat 03 Oct 2026 17:01:42 +0000
Manifest this update: Sat 03 Oct 2026 17:01:42 +0000
Manifest next update: Sun 04 Oct 2026 17:01:42 +0000
Files and hashes: 1: 1HMsGfdsMj6bVCe_HqSPHKmPGQA.roa (hash: Aa+3horScinkb91IcV06nuOTEkzdcEAPUq8TBlQGMDg=)
2: Q6q5ifTmogwJicn2e4z2f5_1UN8.roa (hash: ZCT+LPivkmFqXHHIYRE3kEHzKOk9mVM2bvW0OtpppFg=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: Y067h8T5Or1lXf6TkCz31Z20Mw3YeEKHUqnWDtQ0/94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 17:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b6:e3:f1:6f:1a:c0:ec:64:d0:8a:5b:45:ed:23:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Oct 3 17:01:42 2026 GMT
Not After : Oct 4 17:01:42 2026 GMT
Subject: CN=ad70b5841ad7686127319d5f84ca114bb563da62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e2:24:a2:83:19:cf:5b:c9:3d:fc:d9:30:3d:
1f:08:8b:82:56:af:8a:5a:5c:e2:79:63:cf:58:a3:
5c:30:e1:fb:4a:fb:24:f4:28:51:5e:e3:aa:47:e3:
96:ab:6b:a0:c1:99:3b:89:f0:4a:29:21:10:a8:a1:
51:65:e7:32:d0:65:23:8d:49:53:2b:80:e4:21:d2:
4a:c2:9c:bf:b6:2d:9e:71:de:09:78:4e:dc:a8:22:
a1:1c:02:15:1e:b4:d2:31:91:dd:fc:6b:7f:13:61:
8d:00:55:01:9c:ce:ed:ef:b8:59:b4:00:9d:b6:4f:
c3:85:35:b2:90:fb:2b:66:3d:6f:3b:95:52:3b:5e:
5c:47:c6:00:96:a2:63:17:28:45:49:1d:ab:0a:50:
a4:c8:da:3f:7c:e7:ee:20:9b:3a:33:33:0b:2b:0f:
9c:8e:c2:56:d0:16:76:ad:ad:ab:f2:a0:f0:32:1f:
ca:a7:f1:96:d2:18:02:f1:e1:22:ad:86:da:38:63:
49:b7:e3:cd:c9:8e:8c:e1:ec:89:65:47:46:0e:c5:
62:8f:fc:4e:89:d3:71:47:d0:9e:b6:14:21:90:ed:
04:76:73:73:ea:90:1a:f9:fa:41:93:23:f5:51:e6:
cc:8a:2f:75:13:e4:4c:92:5b:5d:16:bd:99:5a:dd:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:70:B5:84:1A:D7:68:61:27:31:9D:5F:84:CA:11:4B:B5:63:DA:62
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:94:08:c0:61:15:e6:b9:7a:4f:50:6b:4d:01:07:24:09:c7:
b3:08:6d:22:a8:c7:28:26:87:a4:47:d9:72:3d:0c:8e:93:06:
ad:bd:13:4a:8e:c7:4a:b9:57:21:25:a9:64:54:25:ff:44:41:
6c:a4:80:c2:56:8b:49:70:c7:a0:9f:74:1b:48:3f:d3:b3:44:
41:19:54:38:d4:e9:17:e6:96:cc:2e:de:98:f1:d7:a2:f8:1f:
a2:b3:ee:a5:a2:99:56:c6:50:56:f0:33:6b:5a:b6:6e:c5:88:
19:9a:1f:ed:b5:2d:33:b2:ed:06:63:a1:ae:86:73:8a:f3:8e:
a9:52:38:6a:2a:ac:31:4e:db:cf:50:89:d2:90:3a:fb:ca:c0:
ca:6c:bc:bb:62:9e:6a:07:b1:5f:5a:3e:8e:48:ee:92:46:cd:
3a:29:85:ea:3a:87:5c:38:89:ab:81:fe:78:b4:80:80:79:6b:
7e:0b:a2:ff:09:d2:c0:51:e5:87:ed:77:89:63:bc:bd:7e:c1:
9d:1b:51:d9:f8:ea:37:5b:ca:1c:8b:53:1b:6b:c2:63:79:2a:
a4:f4:ab:39:f7:f3:53:f0:19:bd:d6:1f:6c:69:7f:e4:3b:19:
1b:73:86:3e:70:b2:e3:08:58:ec:43:c7:ba:05:8e:48:7b:aa:
05:40:4f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:38:10 2026 by rpki-client