Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: 7lCk1+S66cJMx3olk2knttoh8nr5O9j1/e2ufk56oI4=
Subject key identifier: DA:00:A4:9A:07:40:83:B0:11:27:78:4A:9C:4A:CD:29:C3:FF:8D:05
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 01A10FCC9983D1D83D6F22302534EC802343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 1A91
Signing time: Tue 06 Oct 2026 06:00:29 +0000
Manifest this update: Tue 06 Oct 2026 06:00:29 +0000
Manifest next update: Wed 07 Oct 2026 06:00:29 +0000
Files and hashes: 1: YJVBg6yi8rhbBJuxWKJ7v5Xiat0.roa (hash: Hyd6ST+4DY0Ptd4aJ86bVxwbS75QcKsP6VrnesIx1WI=)
2: __9VedluN1sWd7ruf5_gxA1gv9U.roa (hash: 9+zLsshZreT9h4dF/gegkgeeA5ROS1Ql2Nv3i9Zy+8U=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: XmtQxGsVaMCapOLtMNrTuqgo9TV7jVtDAKisbMtx6dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:cc:99:83:d1:d8:3d:6f:22:30:25:34:ec:80:23:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Oct 6 06:00:29 2026 GMT
Not After : Oct 7 06:00:29 2026 GMT
Subject: CN=da00a49a074083b01127784a9c4acd29c3ff8d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:7a:3b:ee:be:1f:16:13:e1:4e:c8:5d:c3:
9f:e7:8d:f2:d9:67:29:a8:fe:41:49:ab:1e:1b:71:
16:66:a6:ba:d6:9b:69:64:e2:24:72:cd:44:e3:6e:
94:fd:47:b0:20:6c:c9:74:eb:77:2f:9f:0c:c4:d9:
4d:6f:5d:2c:9e:34:fc:69:f1:a0:4d:52:f6:44:1b:
da:a4:52:c0:29:4e:95:f1:2b:ee:4a:f6:d7:66:6d:
70:75:5e:6f:e5:b1:d6:a9:55:0d:b1:ec:03:55:2c:
4f:1e:4d:6f:3b:c7:a0:c0:a2:c5:24:6f:60:c7:3b:
80:1a:4d:5a:42:eb:68:a2:3e:a6:a2:96:58:63:29:
91:1e:a5:ef:38:cf:7e:7f:99:61:89:c1:f2:a1:48:
17:77:e0:34:5f:7b:11:61:6d:cd:08:ea:ad:6c:27:
68:aa:d8:2a:08:c1:59:28:08:ec:c5:69:6c:10:cb:
46:62:7c:fe:99:9c:22:96:c8:b0:4a:23:22:67:8a:
9d:5e:55:40:3b:e2:96:1e:80:8f:93:98:ba:69:b4:
b1:da:94:a2:19:5a:4b:12:7a:7e:1c:aa:bc:46:7c:
58:78:da:db:33:68:80:b6:d9:95:dd:4b:cc:0e:00:
a7:73:19:4c:c6:7f:9c:04:ac:fa:75:9d:b3:23:0b:
0c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:00:A4:9A:07:40:83:B0:11:27:78:4A:9C:4A:CD:29:C3:FF:8D:05
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1f:58:be:41:82:18:3a:0b:cf:62:39:76:40:03:50:ff:31:
f7:5e:38:c2:ac:e6:6d:bd:2f:8b:36:7f:73:d5:48:47:19:f8:
ed:84:bd:e6:3a:60:f0:4e:5e:74:c0:14:e1:b2:2a:8d:c1:53:
e4:23:71:46:5b:c6:a7:35:f5:9a:96:e5:bc:0f:19:a0:59:28:
bf:40:65:d6:4b:9b:4b:5f:14:b0:b9:d7:ae:7f:57:cc:80:99:
4a:04:77:1a:99:c4:c3:a3:b8:4e:38:74:ff:fa:4b:64:50:35:
9b:03:e4:65:2e:1c:e0:1a:c9:a1:db:31:5d:2c:18:3f:42:3a:
9f:40:b6:4a:85:c7:fa:24:0b:66:fc:d7:60:13:c9:86:89:22:
1b:ef:73:3d:81:c8:b0:ea:c9:dd:d7:41:00:22:a2:24:ca:48:
1b:3f:c7:55:36:27:fc:1f:15:2f:dc:92:0a:58:65:5b:9c:d3:
15:56:0a:81:0b:73:3f:6d:72:c2:e0:7a:f3:0b:e6:ed:df:89:
f3:de:91:30:29:16:a8:8e:10:24:e6:12:c0:de:10:ef:93:bd:
51:0e:6c:ed:c6:05:7c:5c:83:eb:e0:21:12:26:83:40:eb:e0:
36:d8:08:69:68:02:39:ea:6a:25:69:e4:5b:52:1b:d0:fe:28:
15:08:95:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:52:46 2026 by rpki-client