Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: 7JrM/Xq26QdmXP0oxB5gatFF23FNGkiBhidoZcSNv7w=
Subject key identifier: E8:81:82:FB:03:0B:EE:21:A2:1B:69:0D:E6:45:C9:45:9C:E7:07:18
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 01A0D7964AC791E99A09F91C940ED58710FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 1A01
Signing time: Fri 25 Sep 2026 08:02:26 +0000
Manifest this update: Fri 25 Sep 2026 08:02:26 +0000
Manifest next update: Sat 26 Sep 2026 08:02:26 +0000
Files and hashes: 1: Bufh8fLfGuFcJIRDH90wZyey3vQ.roa (hash: 97pbnQhhP+W/DGuiQ6yzPinj80mmymwV5CPqsqreqm0=)
2: aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa (hash: Xqrg7NBvSV9yvVpUUwp51n6WbUWMsfHL/0GgkjRTj1U=)
3: gjKej6nLmog1Pdhy2m7-nfTgjGw.roa (hash: q4iLVi9p7pL885pUO6lukqaAAVZW6+EWxQvMee6AK60=)
4: phc_rWomL_SloTsFG0Feb3oexB8.roa (hash: vPwplBARp1RlzeoBKfqMgLEmEz1s7NkUpEh7QDk9mPM=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: xTNn7SA7e5JBC0JkqtNJoStSWsl++LDyvm/x+g8ojDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:4a:c7:91:e9:9a:09:f9:1c:94:0e:d5:87:10:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Sep 25 08:02:26 2026 GMT
Not After : Sep 26 08:02:26 2026 GMT
Subject: CN=e88182fb030bee21a21b690de645c9459ce70718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:5d:4b:1f:da:28:66:73:8f:b0:1b:91:1a:
0a:28:32:05:4c:44:d4:05:56:b6:2f:3a:77:f4:02:
50:f2:6e:b6:0c:c3:cf:e0:dc:dd:57:2f:62:46:d9:
e0:7d:fe:2d:8c:f3:14:5f:06:77:f7:fc:9b:c1:36:
31:cd:78:0c:8d:a2:19:0d:f3:99:0c:06:39:1c:d7:
e9:ab:76:09:c6:ae:b9:45:20:d9:77:e2:39:85:51:
13:b7:78:a3:fd:c4:e5:9e:e7:5c:90:e4:0b:36:13:
01:5e:b2:27:87:75:3c:88:d3:88:a5:62:78:3f:4a:
ee:2e:6f:8b:30:24:fa:3f:09:2d:8d:ea:01:82:0e:
9c:46:94:06:0d:b4:ec:51:a8:09:31:5c:84:f5:4c:
20:2c:a3:4a:23:52:cb:e8:8c:5b:4b:fc:c0:46:79:
3f:b3:fe:c8:53:1c:41:0f:87:07:e1:ee:42:76:47:
f7:3c:cd:89:0d:7e:35:cd:f9:3f:b7:88:7f:dd:88:
84:11:55:14:93:14:f9:ff:07:db:96:4a:2c:4d:6a:
25:5c:cc:b7:c2:35:8c:9d:26:03:f1:de:b7:c8:71:
10:11:ad:be:d3:d9:02:d5:f3:33:26:f1:c6:49:29:
54:4b:0f:60:a3:8a:07:11:25:3f:15:8c:8b:bb:45:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:81:82:FB:03:0B:EE:21:A2:1B:69:0D:E6:45:C9:45:9C:E7:07:18
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:dd:83:8e:fd:48:6b:a4:e2:d9:11:8d:48:f5:30:c4:93:b7:
e7:79:ec:0f:74:23:d3:ea:77:43:88:26:c4:30:aa:6a:c7:71:
ac:ab:b3:f6:c7:85:88:89:d9:0d:c5:76:a0:da:c2:17:fa:39:
b0:e5:6f:73:eb:b7:aa:25:5b:ff:64:ad:2b:cd:e6:2d:f0:35:
be:fd:e1:31:a6:7d:04:22:ab:24:fa:76:41:92:24:14:d6:2a:
7e:ba:93:17:a9:04:90:f8:b5:54:f7:56:e5:10:ce:dc:a2:34:
17:eb:22:2e:5f:1e:00:5f:91:b2:8c:28:51:43:5c:ef:eb:e5:
6e:f9:bb:b6:e5:b9:2f:4b:4e:e2:18:cc:20:e1:4f:93:72:47:
f7:b4:d3:3b:e6:f7:a2:67:f0:2d:ba:7b:bd:81:72:55:3f:33:
f7:10:bb:9d:21:ff:7c:ee:a4:50:45:4f:02:cf:b1:6a:9a:22:
e6:58:78:b5:79:be:21:3a:ec:c0:b8:0a:c1:98:45:1a:56:c2:
e2:67:f9:1a:67:40:b8:59:e5:db:d8:a5:36:3d:a8:c4:d2:59:
27:94:af:28:21:cd:1d:b6:bd:48:26:20:3d:9d:44:ca:59:22:
09:88:5e:e0:42:85:f1:f1:7c:34:a7:0b:2c:22:5f:ed:c2:3b:
67:c3:94:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:14:47 2026 by rpki-client