Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: JQrInoyL2sbbupoLh9WbzHlQzO2GKT/JQBlVWPzrvQw=
Subject key identifier: 57:7A:53:6E:A6:F6:9C:E8:2A:FF:12:81:F9:A3:40:95:50:EE:7A:AE
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 01A1DE395140BC81E9DAE4F4F61B5210B2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 1B0A
Signing time: Sun 15 Nov 2026 08:01:00 +0000
Manifest this update: Sun 15 Nov 2026 08:01:00 +0000
Manifest next update: Mon 16 Nov 2026 08:01:00 +0000
Files and hashes: 1: 5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa (hash: qdwMngtFVt4ZyT/UodrlBdn1CZ1QUvtY6m9NXbdSStU=)
2: DYkV04gki79D3asculnZRcHU37Q.roa (hash: qlIkHsV6HBqGkc4tTxIBB1jTZcTStbiHUpGcVOphuGk=)
3: X-ehgfatBtOAnRXcz6-5Jx0F8B4.asa (hash: /YVTHqMQAjpDaMD8b9BYDBTtlnwA4KQTEd5uL4RrvtQ=)
4: wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa (hash: xzHJiZgBxtEtCYr9MbTY6G8tT0OCniElkcH6xF7+Cv8=)
5: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: TKfddb+bw8EDfEn2Mz07ChMGxM7cxpjUnk5ylaxV7YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:51:40:bc:81:e9:da:e4:f4:f6:1b:52:10:b2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Nov 15 08:01:00 2026 GMT
Not After : Nov 16 08:01:00 2026 GMT
Subject: CN=577a536ea6f69ce82aff1281f9a3409550ee7aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:02:3c:26:dc:cf:ed:fa:a2:08:09:c3:5a:95:
09:4c:e6:00:48:85:fd:1c:b2:95:6d:23:d7:87:81:
c2:4c:14:29:49:2d:58:cc:f6:5b:ac:4a:3e:26:cd:
f0:a2:68:34:44:8a:09:af:b8:2b:46:52:87:e5:2d:
89:9a:33:ee:51:09:e2:f0:62:92:6c:5d:26:05:47:
45:80:e3:f4:3b:be:49:00:e4:a9:d6:af:2c:80:6a:
d2:e5:4b:5d:80:79:9d:22:23:cc:e6:af:2a:41:06:
9b:a0:a5:85:c8:70:b6:82:83:ba:76:bc:1b:38:60:
c5:6f:d4:d8:40:65:2b:74:8a:88:22:46:5e:08:98:
22:d7:bd:d1:b2:7e:d6:22:6c:fa:15:04:5f:b8:b8:
e0:cb:85:2d:af:72:29:e1:76:ff:c9:0a:e7:e6:fa:
d3:5b:c8:3c:80:d3:79:59:a5:77:b4:87:2d:21:7b:
a1:c7:8f:3a:56:d8:15:75:89:ab:96:68:6a:a0:fb:
16:9f:ad:7a:e8:5f:35:6b:f4:99:f3:b1:01:48:64:
42:99:3d:22:49:86:b3:3b:d1:46:ab:4a:99:e4:55:
f6:7d:66:ae:ef:59:fa:ac:95:fe:1d:96:47:59:42:
05:8d:51:47:ee:6d:dd:35:87:42:6c:71:d9:4d:83:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7A:53:6E:A6:F6:9C:E8:2A:FF:12:81:F9:A3:40:95:50:EE:7A:AE
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b2:a7:a9:b4:a9:37:4b:e8:ca:2e:4d:df:61:59:c2:52:be:
07:63:bf:c8:19:30:c1:2a:02:df:70:c4:ae:04:c3:5f:dc:15:
7a:54:17:8f:8c:c0:2f:ae:9c:36:8f:4b:5e:35:f1:62:56:de:
4f:a9:33:90:54:99:98:19:dc:0b:0e:85:45:64:57:24:51:0c:
08:9c:3d:4e:8a:cf:d9:82:9a:d7:91:eb:2f:f1:05:fd:4f:62:
02:2b:b3:97:d6:0b:b7:d7:82:94:4c:85:68:75:41:d4:99:15:
81:f8:80:ff:ab:d3:9b:96:e9:59:17:0f:f8:81:62:f5:61:30:
ed:2a:29:2b:fb:5c:73:26:59:00:e7:c5:c8:09:73:7a:a4:e8:
35:9d:94:3a:6a:e8:39:61:88:93:28:35:77:c3:32:ca:06:93:
5e:42:be:da:4d:01:be:de:99:f9:a8:6e:d0:88:72:1f:e7:db:
59:e0:93:f7:35:32:5f:84:80:a2:91:05:7d:9e:64:85:58:48:
fa:3a:d2:33:0a:90:61:80:ea:68:a7:66:dd:5e:5a:2e:6c:86:
36:e4:41:b5:2d:93:30:47:a2:cb:41:0d:b7:71:db:3d:5e:08:
0c:bf:16:a9:25:4d:2a:b2:f2:09:d1:27:93:02:20:17:76:52:
1e:a9:1a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:20:50 2026 by rpki-client