Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
File: xIzPWOSy4trdSoSDPAZ87iuXRek.mft (raw, json)
Hash identifier: xFlw7ehYrgkCLFZv7EcDa9vbK1k2346hweRWvVHSJRA=
Subject key identifier: AB:72:4B:EA:80:5F:90:C1:44:DE:A7:0F:E4:40:8F:EA:41:A2:B9:E1
Authority key identifier: C4:8C:CF:58:E4:B2:E2:DA:DD:4A:84:83:3C:06:7C:EE:2B:97:45:E9
Certificate issuer: /CN=c48ccf58e4b2e2dadd4a84833c067cee2b9745e9
Certificate serial: 01A0D64BEFD502058542A60A705A969D818B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
Manifest number: 0C9E
Signing time: Fri 25 Sep 2026 02:01:35 +0000
Manifest this update: Fri 25 Sep 2026 02:01:35 +0000
Manifest next update: Sat 26 Sep 2026 02:01:35 +0000
Files and hashes: 1: gew7CyhHuASbV9jBOKJxjZWPhoI.asa (hash: lgbjlGGTdX1VPPAtMEGO3nFaDYLeDx/a+Kuz01fFw18=)
2: xIzPWOSy4trdSoSDPAZ87iuXRek.crl (hash: hQXpuIbUuFNaAQLDJ2rRgxBlZZs7WsGvPb4KjkIZ5XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:ef:d5:02:05:85:42:a6:0a:70:5a:96:9d:81:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48ccf58e4b2e2dadd4a84833c067cee2b9745e9
Validity
Not Before: Sep 25 02:01:35 2026 GMT
Not After : Sep 26 02:01:35 2026 GMT
Subject: CN=ab724bea805f90c144dea70fe4408fea41a2b9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:22:9c:a3:c0:7b:0d:b0:e1:8a:9f:dc:8a:e9:
e2:77:0d:a8:ea:76:fc:b6:b5:a1:0a:a9:d1:dd:9a:
b1:f0:df:64:7e:86:e6:be:06:87:a7:0d:65:49:32:
ec:c9:9d:f0:18:5d:95:0b:9a:12:df:aa:63:49:ae:
26:dc:5a:c0:80:d5:16:53:63:a3:b5:e0:b3:91:ea:
53:fc:51:c2:09:83:5f:e1:2b:48:8f:5a:31:27:58:
c1:a2:2c:be:74:06:f3:31:7a:84:09:f5:58:f1:f8:
2d:0c:8f:be:91:75:de:89:ac:46:b3:73:c2:99:38:
61:26:5d:55:07:61:77:e6:34:07:71:a3:3b:5c:55:
99:94:7d:49:56:92:d8:62:e6:a2:54:7b:12:87:74:
93:83:52:92:37:e1:cd:ef:11:b9:c1:32:b1:94:49:
40:87:95:06:35:c7:7a:b0:10:9b:ab:3d:ae:a1:91:
64:c4:87:7a:07:b1:f8:44:52:d9:bc:39:97:a2:ef:
2e:1c:77:b4:a3:47:6b:08:9d:77:f5:16:8f:e5:76:
69:a2:e7:01:54:43:9b:98:bd:01:f5:d8:b4:b8:f4:
c4:aa:dc:4a:2e:ea:48:95:b2:a1:85:1b:58:4e:3d:
32:c8:64:43:28:b3:4d:3e:1c:f6:45:b8:13:14:c6:
8f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:72:4B:EA:80:5F:90:C1:44:DE:A7:0F:E4:40:8F:EA:41:A2:B9:E1
X509v3 Authority Key Identifier:
keyid:C4:8C:CF:58:E4:B2:E2:DA:DD:4A:84:83:3C:06:7C:EE:2B:97:45:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:54:3c:c3:2c:29:30:15:e7:85:d0:a2:31:1d:f3:d5:3d:6d:
f1:ea:34:ee:58:2c:5d:bb:dc:9f:d6:47:6d:d1:b7:fc:bd:0c:
bb:5d:f5:24:e7:f3:6a:5c:90:6f:39:e9:5c:73:f0:e9:d8:7b:
d7:b1:07:ed:d1:1c:e5:12:a9:da:ce:7a:85:49:33:94:49:58:
52:63:d7:bd:88:c0:26:86:b4:ea:12:7c:d3:70:29:7e:95:11:
f4:cc:dc:57:14:67:21:7c:f5:12:c4:bd:c5:a2:7e:6b:0f:88:
d8:07:3f:99:34:d5:41:cc:ba:49:2b:78:a6:fe:80:4c:82:19:
15:81:37:dc:f6:4b:ae:74:5c:e8:42:90:6d:5b:e5:77:f7:5a:
52:39:ef:b5:73:cb:f0:7d:2e:4e:37:7d:65:24:32:36:f7:f9:
9c:fb:9d:cc:30:04:60:5f:15:79:f6:6f:39:ba:6a:4e:15:3d:
e2:66:94:62:94:29:34:3b:d4:9c:58:60:18:21:4b:2f:fb:58:
19:b2:c7:09:ac:41:23:38:34:78:1b:67:68:2c:4a:7a:33:d6:
a9:39:6e:05:82:c4:c5:f9:39:c8:f7:af:a8:bf:c4:21:a1:12:
74:0d:f4:ae:6e:ba:ec:68:71:00:be:ce:26:8e:30:7a:d5:b5:
97:c6:38:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:35:06 2026 by rpki-client