
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/1613aa-b7e6-482b-9395-e6c0f1b29a8f/1/xECobZS6dED07PpqvM19NmfeFu8.mft
File: xECobZS6dED07PpqvM19NmfeFu8.mft (raw, json)
Hash identifier: F7dzV5MrzbCjjf9Rw8WS11SZsSpdWH0SQ6j5i2gI77w=
Subject key identifier: 5A:C7:17:5D:B3:43:D6:A6:5D:EB:9F:5B:97:B6:C7:F8:3A:AA:FD:AB
Authority key identifier: C4:40:A8:6D:94:BA:74:40:F4:EC:FA:6A:BC:CD:7D:36:67:DE:16:EF
Certificate issuer: /CN=c440a86d94ba7440f4ecfa6abccd7d3667de16ef
Certificate serial: 01A105805AAE8808E78AD0216C97849BCA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xECobZS6dED07PpqvM19NmfeFu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1613aa-b7e6-482b-9395-e6c0f1b29a8f/1/xECobZS6dED07PpqvM19NmfeFu8.mft
Manifest number: 1E
Signing time: Sun 04 Oct 2026 06:01:00 +0000
Manifest this update: Sun 04 Oct 2026 06:01:00 +0000
Manifest next update: Mon 05 Oct 2026 06:01:00 +0000
Files and hashes: 1: olENn8z2oeymVvFBKGCcsropB2k.asa (hash: 81kkkwFsEXTUKeM4iGPd3FMZGZAWb498rELa9H4bn8U=)
2: xECobZS6dED07PpqvM19NmfeFu8.crl (hash: SGvEOEaT2jk08KLm3EBROc8ZcypLhdrm85oILuddy64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1613aa-b7e6-482b-9395-e6c0f1b29a8f/1/xECobZS6dED07PpqvM19NmfeFu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1613aa-b7e6-482b-9395-e6c0f1b29a8f/1/xECobZS6dED07PpqvM19NmfeFu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xECobZS6dED07PpqvM19NmfeFu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:80:5a:ae:88:08:e7:8a:d0:21:6c:97:84:9b:ca:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c440a86d94ba7440f4ecfa6abccd7d3667de16ef
Validity
Not Before: Oct 4 06:01:00 2026 GMT
Not After : Oct 5 06:01:00 2026 GMT
Subject: CN=5ac7175db343d6a65deb9f5b97b6c7f83aaafdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:d6:bd:0f:d3:4c:cd:55:16:b9:59:07:b8:
a7:ff:af:ed:38:3c:9e:a8:9b:8b:0b:be:75:7a:09:
7f:20:79:5d:db:3d:1b:69:8c:be:82:19:61:48:d8:
3e:8f:59:65:4a:42:66:a0:61:1b:d6:f4:f1:d3:cb:
38:ba:63:03:8a:0b:38:b4:ed:ad:3a:ce:6f:80:c7:
bd:bb:c5:64:5d:4f:0a:f7:44:0c:5c:2e:6b:61:16:
f5:31:d6:47:10:c7:6b:17:e4:e2:87:de:5c:dd:5d:
9a:9d:9a:4c:fa:93:70:93:ef:cb:28:cf:e3:dd:5c:
84:46:df:21:96:1f:83:99:71:5d:60:09:a9:43:3a:
97:1a:9f:13:66:c5:d4:1d:ec:2c:fd:7e:25:73:a1:
79:f1:c6:74:90:d1:4b:d5:d1:11:6c:7e:71:64:7e:
0a:a9:37:f8:22:69:99:bd:31:18:98:2a:dd:3d:5d:
1f:cf:9c:5b:d1:d7:9f:45:5d:1a:db:d1:bb:10:5b:
a0:86:fa:8a:51:1d:84:ab:47:c8:9e:c4:ae:81:0c:
67:31:4b:57:c1:0c:66:c0:da:03:51:9e:65:03:f5:
b1:3d:03:6f:84:61:65:a3:09:7d:eb:af:15:67:5c:
a4:d0:cf:0d:12:43:7a:d8:b4:5a:77:81:07:17:78:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C7:17:5D:B3:43:D6:A6:5D:EB:9F:5B:97:B6:C7:F8:3A:AA:FD:AB
X509v3 Authority Key Identifier:
keyid:C4:40:A8:6D:94:BA:74:40:F4:EC:FA:6A:BC:CD:7D:36:67:DE:16:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xECobZS6dED07PpqvM19NmfeFu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1613aa-b7e6-482b-9395-e6c0f1b29a8f/1/xECobZS6dED07PpqvM19NmfeFu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1613aa-b7e6-482b-9395-e6c0f1b29a8f/1/xECobZS6dED07PpqvM19NmfeFu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cb:1e:37:97:9c:7c:fc:33:32:2c:3e:83:71:c4:5c:1a:a1:
e2:2e:1a:d3:50:0b:3e:ea:3b:45:8c:29:4e:cc:2f:b4:f3:c7:
1f:04:85:f7:a3:53:59:1b:db:31:18:c7:50:bf:9b:d7:1d:d9:
9a:3f:5c:7d:ea:09:f4:15:f8:ef:4c:c0:12:3b:e8:ab:23:fb:
ad:c7:ca:10:7c:d7:f0:55:39:90:e8:c0:72:05:ab:43:d5:71:
e5:61:8e:a7:18:84:f3:0e:82:01:10:16:f9:a0:82:89:57:3d:
31:37:88:21:97:41:ab:48:3a:aa:70:7c:6b:ec:ab:16:5e:ea:
fa:fa:d0:65:ff:7c:71:d6:d5:d5:33:fa:4a:82:83:56:81:f9:
15:8b:37:75:70:93:cc:79:db:9b:bb:df:9d:5f:d2:7f:79:9e:
d7:9e:9d:b3:04:b3:c5:7e:55:fa:22:71:8e:2f:6e:55:3b:25:
c0:df:ed:3f:80:22:44:1f:85:59:04:1d:6a:8d:d3:77:6e:e0:
04:c8:2f:fc:74:49:51:4e:b9:22:7b:c4:4d:be:fe:75:35:cf:
76:2b:b8:89:b6:f7:18:08:48:12:55:10:f2:bd:b7:63:3d:3f:
27:90:39:99:5f:6f:e5:46:cf:f3:52:f1:8b:5c:ba:7e:3d:06:
6c:90:06:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:34:21 2026 by rpki-client