Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: lgY09vrU+bukZMGlEnN5FWuDQtuV7UJ232RZFvg1NsE=
Subject key identifier: 13:06:3F:BC:B7:B7:AF:B8:21:0E:9C:E8:9D:70:86:22:DC:7D:A2:EA
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 01A0E0CFA4FC6967C4108053BFDD33440BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 1A11
Signing time: Sun 27 Sep 2026 03:01:39 +0000
Manifest this update: Sun 27 Sep 2026 03:01:39 +0000
Manifest next update: Mon 28 Sep 2026 03:01:39 +0000
Files and hashes: 1: mTuVuiw3HM2pBIheqITWSq5I3n0.roa (hash: Ipl/v3cZkycb4zTv5tbg7JdjHKPt6S5to0wny64/QVQ=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: Xa5llhgA09dGY5hN7FWJQbFaHsh7XrqVC0B1DUYz4YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:a4:fc:69:67:c4:10:80:53:bf:dd:33:44:0b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Sep 27 03:01:39 2026 GMT
Not After : Sep 28 03:01:39 2026 GMT
Subject: CN=13063fbcb7b7afb8210e9ce89d708622dc7da2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:c4:e4:cd:d9:79:97:55:ea:ba:56:f8:4b:
d7:ff:1d:a4:6d:0b:ce:2c:f4:d6:ee:72:40:3d:44:
f4:50:da:83:0d:86:ea:81:14:f1:3e:47:d5:d9:83:
c3:df:4d:c6:7b:5f:c2:40:34:29:a4:fc:d4:50:62:
8f:09:65:fb:93:88:e2:9c:a2:98:ca:1c:64:3a:47:
7f:12:f8:48:2b:31:2c:00:42:18:1c:f5:88:c5:b3:
eb:fc:42:1e:49:58:1f:8a:0c:dc:5e:4b:fe:b2:aa:
3c:38:92:3c:ec:d4:27:1e:7b:63:b5:84:c5:3a:7d:
e4:2d:68:ed:4e:fc:bf:6d:16:b4:dc:b3:bc:5e:e0:
6d:94:13:57:3b:95:b5:8e:93:e8:2e:c8:1e:69:f2:
3c:23:c4:c1:7a:49:94:15:4c:6f:7c:92:88:76:e6:
fd:d3:48:8a:33:82:5b:42:c4:12:9c:ac:97:bc:ee:
5f:20:8f:19:59:23:b7:e9:0a:f4:72:ab:61:63:d7:
99:51:84:18:f6:85:44:c1:0e:f0:37:33:29:06:1a:
05:cc:c7:8d:86:e3:8d:03:e1:5d:2a:61:37:a1:43:
9e:ee:3c:3b:c6:6d:1f:3e:3c:91:e0:ba:de:63:e2:
2c:69:79:bf:da:91:44:53:22:12:ec:73:39:58:d7:
bb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:06:3F:BC:B7:B7:AF:B8:21:0E:9C:E8:9D:70:86:22:DC:7D:A2:EA
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:da:6a:7c:d2:54:74:58:07:5c:22:69:78:a7:c8:d9:68:de:
2b:0b:4b:76:2f:6e:59:1c:06:f0:76:f7:7a:68:6a:a4:fa:c8:
f3:96:65:34:4b:0c:19:e3:96:69:46:f3:13:6c:8e:e1:35:58:
03:fe:6b:c6:14:1f:c6:0a:79:b4:03:4b:f0:aa:70:30:1d:a7:
21:a6:55:4d:cd:c6:a2:98:69:08:2b:44:68:5f:ff:10:23:c5:
70:e6:ac:32:d9:1a:3b:ba:b0:6a:dc:97:17:f9:c0:98:70:42:
34:ca:82:18:58:07:30:8c:f7:7f:ce:77:c4:3d:e1:f2:b7:cb:
9a:c3:a9:84:ed:db:72:92:ba:32:db:95:06:2a:64:ae:a8:db:
d3:80:d9:68:49:65:2c:63:79:f4:a1:82:5f:95:55:54:e2:69:
11:a4:39:4e:aa:ea:28:d9:83:d3:e5:bb:4f:3a:27:0d:be:de:
5b:98:bc:08:29:e2:41:ac:91:84:04:50:c2:5a:2f:a1:b9:9f:
1a:1d:e7:d1:0c:9b:35:db:5c:a2:d9:b0:c5:05:45:78:da:e3:
56:27:43:cb:4b:e7:9c:5f:6e:71:2e:3c:87:f7:08:89:7e:92:
87:e3:70:6f:da:20:18:23:c7:64:7e:18:47:52:0f:c4:d5:9f:
2f:bf:fe:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:36:51 2026 by rpki-client