Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier: srTRMb398CwA0vpPOfn9KPxTNyKXCho+rqDqV+usPho=
Subject key identifier: 9A:BC:98:83:B4:4C:86:D3:9E:4A:33:6D:BC:52:47:CA:72:3D:CA:3F
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 01A1DB38D4519C8CA01B112D8FA69F95E0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number: 1AF7
Signing time: Sat 14 Nov 2026 18:01:36 +0000
Manifest this update: Sat 14 Nov 2026 18:01:36 +0000
Manifest next update: Sun 15 Nov 2026 18:01:36 +0000
Files and hashes: 1: jbS8RSSk1qPuBMHXiz0NFlG5gaU.roa (hash: ffpPuQq0nfWr1B/H6xQP1tfUAtvyoDxPWUAq5WEIXy0=)
2: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: eWJ5QJQ4hw1pomSSixvEfuwGJ+OZt1Qsh+y2s/tYRbI=)
3: xo3E7B75wnW1W3d1HJPhSZevYZA.roa (hash: PthsrXu6VgY7H1QeefirkpT9auw29AQ4kvdF+HY+Frc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:d4:51:9c:8c:a0:1b:11:2d:8f:a6:9f:95:e0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: Nov 14 18:01:36 2026 GMT
Not After : Nov 15 18:01:36 2026 GMT
Subject: CN=9abc9883b44c86d39e4a336dbc5247ca723dca3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:88:ca:be:46:db:ce:46:73:1c:c6:9c:60:
f3:c4:5e:78:f7:c5:60:33:b5:d8:86:da:2f:5c:18:
84:a8:f9:09:1b:a1:a1:1f:a0:8a:b7:37:0b:bd:37:
f2:7d:30:2e:c6:92:8b:57:0a:d9:54:04:46:0c:6b:
2c:a2:67:ce:c2:48:55:71:4c:1f:ef:d3:af:24:1a:
09:9b:67:3a:b2:99:45:7f:d8:b9:66:16:1b:ab:cd:
5f:38:49:13:76:bd:60:66:fb:58:d0:a0:66:77:aa:
df:09:13:d4:0f:ad:d6:e4:02:cc:4b:4f:94:6a:83:
58:96:49:8f:68:ba:f1:9e:43:12:70:43:ba:8a:5d:
49:ce:8e:21:d1:17:8f:b0:7b:a9:0e:c3:05:90:48:
cf:b6:c4:e9:40:35:f2:6e:f8:6f:3f:ce:8b:40:0e:
d8:0e:89:93:00:a1:ba:cc:2a:04:65:66:ab:df:c9:
b9:b5:80:cf:19:10:bd:75:42:b5:f1:fa:de:8e:37:
45:15:fd:87:69:6c:d9:77:c4:2d:6e:73:14:42:ef:
1f:c9:d1:0b:e4:05:14:9c:aa:57:f6:ec:a2:aa:a4:
14:11:cf:0b:80:66:65:e4:09:b7:e4:d2:51:ce:2b:
99:43:09:c4:bf:57:56:28:3b:bc:8d:da:56:8b:0b:
6a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BC:98:83:B4:4C:86:D3:9E:4A:33:6D:BC:52:47:CA:72:3D:CA:3F
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:71:2d:da:15:54:77:8d:e1:3d:e1:5a:cb:10:00:e4:1c:a0:
8c:a0:e9:ad:ff:36:f7:bf:bc:6a:df:47:22:04:9c:14:56:96:
62:0d:de:2a:95:cb:ba:f6:e6:ac:9c:86:79:c4:cc:7a:d2:cb:
c4:06:06:d6:d0:89:2c:11:57:51:ca:cf:de:27:3d:3d:0d:88:
7b:6c:53:e2:16:bb:ff:c8:f4:e6:9e:73:d7:2c:18:8c:b4:64:
ce:ad:4a:de:f2:78:c1:4d:0b:27:6c:34:40:0f:6e:ef:68:41:
a0:c5:30:09:ec:a5:6d:92:90:ae:07:12:5d:8e:3c:b6:90:4e:
01:ad:72:3d:f0:18:70:30:3e:42:ba:3e:78:bf:34:f7:f9:2d:
f6:32:e0:31:0f:16:ad:c1:a8:77:4b:f5:77:69:28:71:94:59:
cb:d3:08:6f:a8:37:0b:25:7a:26:e4:fa:3b:b0:19:69:21:71:
dd:28:22:80:64:5a:bd:18:7b:97:df:d5:da:17:e9:82:de:e9:
b5:bc:2f:0e:1a:19:bb:5a:9f:3b:a3:43:7b:bb:00:a4:30:f5:
bf:01:a4:13:99:5a:81:86:3e:87:ba:e5:ee:8e:4e:28:20:bb:
22:0a:33:ad:c3:84:0d:13:ac:17:16:fa:33:fa:96:05:74:4d:
d7:09:8e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:27:35 2026 by rpki-client