Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
File: x1es7dSIRbnr0Muqfb2ri8z9jWE.mft (raw, json)
Hash identifier: 6MdFQ+1O74ZkT3sfNZZHx0VY+rlBrPudd+WYI8ehu/A=
Subject key identifier: 84:D7:84:79:C3:3E:EE:13:12:46:B6:AB:60:72:29:30:15:57:D7:74
Authority key identifier: C7:57:AC:ED:D4:88:45:B9:EB:D0:CB:AA:7D:BD:AB:8B:CC:FD:8D:61
Certificate issuer: /CN=c757acedd48845b9ebd0cbaa7dbdab8bccfd8d61
Certificate serial: 01A12AD62E4DCA92C29CB1AA932171E20FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
Manifest number: 0114
Signing time: Sun 11 Oct 2026 12:00:41 +0000
Manifest this update: Sun 11 Oct 2026 12:00:41 +0000
Manifest next update: Mon 12 Oct 2026 12:00:41 +0000
Files and hashes: 1: 1-Urp8rAL1ZSmlkxaPOzl5pj6sR8.roa (hash: eq+9SCGsso6J0nmlRfLYKk2u+tOTbol21TaNCHcqDic=)
2: YBBatb3zVPdSOcJ9MpSHMK867-k.roa (hash: IlKGC7X7khejWn4GInerZOXh0TDt6Gd+xhqLmW0TfU4=)
3: x1es7dSIRbnr0Muqfb2ri8z9jWE.crl (hash: we+u8/sISJsOHH8uTmSAPDQ5Gw6hUp/DazNY2ZDbymI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:2e:4d:ca:92:c2:9c:b1:aa:93:21:71:e2:0f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c757acedd48845b9ebd0cbaa7dbdab8bccfd8d61
Validity
Not Before: Oct 11 12:00:41 2026 GMT
Not After : Oct 12 12:00:41 2026 GMT
Subject: CN=84d78479c33eee131246b6ab607229301557d774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:61:30:82:29:a0:a0:d6:aa:ea:ce:5c:db:
87:af:73:28:bc:22:01:6d:06:bd:1d:51:77:4c:ab:
e7:d0:95:2b:42:8b:ea:60:34:93:d8:77:cb:2d:cf:
e9:3d:d8:fa:8e:88:51:cc:d7:26:22:58:92:17:21:
2e:2d:bb:af:3d:0d:f7:ae:1b:ff:22:09:4a:21:77:
ef:cb:49:cd:76:6f:ee:24:22:a0:b6:49:e7:a8:1d:
69:58:e7:8a:11:f9:bb:70:f3:a5:3e:9b:67:80:6b:
93:68:49:4f:00:1f:a7:e3:c4:36:43:b7:f7:41:66:
d4:9c:00:9b:db:55:23:05:97:43:d6:ef:dc:c9:f6:
76:5d:1b:d1:35:fd:54:56:fb:0e:d4:b1:ae:4a:e2:
20:36:4b:83:b5:4c:ea:4e:3b:e8:ec:d1:f7:c8:4d:
68:ce:eb:9e:c9:bb:7a:ce:ec:70:8c:81:2d:ab:e3:
59:8d:5b:8c:bd:88:2c:02:75:80:91:aa:67:72:84:
eb:fc:d7:69:63:16:ab:ea:cf:18:50:68:77:5d:1c:
0c:55:ce:be:9c:f7:b1:42:3e:81:58:5c:ba:39:cf:
25:c2:52:cd:2e:bb:c6:1d:d1:4c:6c:a8:77:95:ee:
2b:30:5d:5b:3a:fd:30:40:13:40:22:9c:d2:eb:28:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D7:84:79:C3:3E:EE:13:12:46:B6:AB:60:72:29:30:15:57:D7:74
X509v3 Authority Key Identifier:
keyid:C7:57:AC:ED:D4:88:45:B9:EB:D0:CB:AA:7D:BD:AB:8B:CC:FD:8D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:90:2b:47:fa:e5:b1:a4:8d:48:08:78:ce:3d:13:92:cd:a5:
91:de:e0:71:fc:b2:c1:28:6c:37:83:e1:a0:ab:0a:c0:0b:51:
61:a5:ad:fe:a8:74:94:8e:9b:54:b5:80:bb:c1:8b:f5:5c:55:
3a:c0:44:6e:eb:36:ea:a2:e9:7e:c8:70:2b:16:bf:83:ea:6e:
fd:1f:64:6b:70:ee:21:a5:10:69:bb:32:18:20:7e:c7:bc:4b:
6d:6f:8f:47:22:bd:22:d7:5e:d9:2e:95:d3:8b:48:f8:96:40:
30:ae:ed:9d:0a:67:67:60:1e:2d:72:9c:f8:0f:5c:25:2a:07:
dc:e8:a0:c0:54:50:f2:5f:bb:89:75:27:b2:5d:d5:cf:22:09:
f9:6e:4c:58:b3:d0:23:34:9a:3a:33:30:cd:d5:77:11:33:cc:
09:3d:92:5f:64:62:55:a2:8d:aa:8f:6f:2d:54:e3:13:09:d2:
48:e3:72:2e:e3:be:84:89:7d:f6:4a:a1:84:2d:d1:b4:f0:84:
ba:93:a6:17:1f:3c:91:55:43:bf:57:73:bb:60:1b:be:25:4d:
0f:ec:93:2b:8a:87:88:8d:c7:ad:86:db:c8:70:21:9e:b6:37:
8f:c8:46:ea:98:95:e1:9e:57:c0:8e:1c:b3:89:ff:ac:10:1c:
fc:33:13:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:20:07 2026 by rpki-client