Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier: iNW1X7Yv/QbWVH+p71hsJ2fz2Ix2ANMQDL2KICkcsEY=
Subject key identifier: 7D:EB:96:BC:57:27:3F:54:BC:C5:56:9A:5A:EF:BC:FB:34:CC:74:85
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 01A1DDCBD9FAC2A8398AD44B4535534DE10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number: 1AFE
Signing time: Sun 15 Nov 2026 06:01:26 +0000
Manifest this update: Sun 15 Nov 2026 06:01:26 +0000
Manifest next update: Mon 16 Nov 2026 06:01:26 +0000
Files and hashes: 1: YYRSpcNyohXAVMmCQRhhQXcor54.roa (hash: fuXM313ONuqmW2wV79N+ZCUER2LAZ4hkP7+nINYw4hI=)
2: iKpp3qI47nAdkGSzRA3WViJJwfU.roa (hash: cua53JtZVRFiG1D02IQc2WZ6uSxKMIhsPK5IrnlN2iI=)
3: vkpwNDj7xXwx6pMj2XVWZxBCxc4.roa (hash: YGEdE5O7bWJqyVhJI5l0CUgDvZQQki89nPNnaYxZHCc=)
4: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: Wm85P5OwT3/uTt7jMNRGM3dXCfv956YVHnqKciMM8Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:d9:fa:c2:a8:39:8a:d4:4b:45:35:53:4d:e1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Nov 15 06:01:26 2026 GMT
Not After : Nov 16 06:01:26 2026 GMT
Subject: CN=7deb96bc57273f54bcc5569a5aefbcfb34cc7485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:08:89:c9:be:68:51:33:b7:b5:62:19:a4:
7e:a6:4f:1b:dc:e5:3a:0c:68:ba:0f:e6:25:f6:22:
7c:cc:67:c6:6e:80:0b:91:c6:31:37:00:80:83:33:
ca:74:88:a9:68:8a:ea:36:99:94:02:e9:4b:dc:5c:
6e:65:a5:08:e3:b4:32:36:e1:63:3e:a7:d4:d7:c4:
8b:58:18:bd:b3:e1:13:94:d4:b2:11:e8:b7:bb:16:
c3:9a:d3:26:b9:ad:d3:7d:2a:95:55:f0:79:83:fa:
36:08:9d:9a:2b:18:53:c8:cc:4a:a4:dc:65:f0:65:
80:b5:f9:5b:13:13:b1:27:de:62:77:fd:f4:3f:3e:
84:6d:c0:1a:86:c6:87:eb:b0:37:ac:a6:2a:ae:7c:
59:27:9c:37:1a:57:59:ab:9f:40:c6:12:b0:30:0f:
18:5b:09:03:e8:9d:ac:10:7b:ce:d7:b0:65:44:45:
b2:07:c6:62:a7:d0:e3:47:94:8b:a8:8c:c3:6d:8d:
61:8b:be:e7:44:2a:48:1b:80:2e:5e:52:a2:7a:98:
19:67:ff:3d:04:de:39:9c:83:b5:82:c9:82:83:6d:
36:59:08:10:32:4f:1a:63:8b:72:81:af:9a:77:f1:
db:78:26:73:dd:5d:dd:b1:d0:25:4d:6a:e4:07:48:
56:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EB:96:BC:57:27:3F:54:BC:C5:56:9A:5A:EF:BC:FB:34:CC:74:85
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:5f:e3:54:f6:47:36:04:fc:eb:34:4e:15:3d:4d:2e:10:0b:
99:74:79:dd:39:d8:fc:9b:45:27:18:cf:98:20:25:a9:8a:9a:
fb:dd:71:5e:44:95:ad:48:d8:64:2f:30:ae:e9:98:4b:07:cc:
8e:b4:20:f7:62:7f:e8:92:48:f7:ec:8e:64:55:73:9f:d9:6d:
79:df:e5:9f:1c:8a:7b:b6:1b:87:fd:78:d8:97:8e:11:66:32:
f4:b4:73:35:ae:ac:39:96:48:9a:2a:d5:0c:f5:b6:42:c3:24:
41:34:c3:f8:26:ed:40:7e:6c:25:3a:fc:ed:cd:93:50:3e:aa:
cc:a5:f6:92:9c:d3:80:c4:fb:b4:e5:b0:5f:fd:15:40:bc:7a:
41:56:ae:0e:28:49:c4:2b:a7:e3:2c:35:7b:57:f8:2b:30:fc:
7d:ec:45:76:3c:c9:bd:bf:a9:e5:bd:03:ca:a9:83:68:5b:a8:
b0:f5:5f:28:81:50:6f:91:2f:67:97:8c:3b:66:70:cb:20:46:
e6:0f:5f:9b:c6:0c:67:3f:72:79:1a:ed:98:7e:1a:8e:7b:1e:
29:cb:e4:be:c1:03:c3:d2:73:04:80:66:b0:09:f4:6b:e4:af:
c6:c7:85:a0:c3:92:70:d8:44:c5:b7:aa:94:06:8c:21:61:c3:
60:c4:00:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:59:23 2026 by rpki-client