Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File: xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier: T5j6QeNPfpkIsxc6WL6ALNdxf+vJjnNxi1hQxgWYPCI=
Subject key identifier: AF:C3:5E:24:27:2D:17:A2:96:73:F2:06:C9:7A:A0:2B:5F:1C:F7:B1
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 01A0D64BB0C8A4AF89AFEB7C2006E3B515C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number: 1A74
Signing time: Fri 25 Sep 2026 02:01:19 +0000
Manifest this update: Fri 25 Sep 2026 02:01:19 +0000
Manifest next update: Sat 26 Sep 2026 02:01:19 +0000
Files and hashes: 1: GpZIgv126Cl3UoGhkY1Uvof1iPY.roa (hash: fP30v2kEF8neAtWHSrqD3PG/OVeu+YIU3qixidi5CQc=)
2: idf0hZZENN-4_aae9KN1w6rgM4Q.roa (hash: qK834woHIrutz8SD0paYhf0sMnrUCo/j6IC8hJut1/0=)
3: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: eJsxtfKP5Nu95u0Xf5oNsOelHf6fLdB/nLBFqxV5F5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:b0:c8:a4:af:89:af:eb:7c:20:06:e3:b5:15:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: Sep 25 02:01:19 2026 GMT
Not After : Sep 26 02:01:19 2026 GMT
Subject: CN=afc35e24272d17a29673f206c97aa02b5f1cf7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:1b:aa:e9:f0:0c:00:24:21:27:72:95:95:
ba:88:35:33:b6:4e:0d:1a:4c:a4:0c:2e:aa:db:ca:
d4:d5:83:86:93:c5:3e:65:03:0e:99:b3:18:a3:a1:
ca:dd:d7:df:75:42:60:fd:8f:46:1b:20:3b:98:e4:
bf:ff:c9:ef:25:49:cd:e1:43:0a:52:07:33:22:59:
43:94:f8:f2:35:e2:37:55:9b:4c:c7:3e:19:1f:92:
20:8f:32:f6:df:ad:56:de:6e:49:37:0f:bf:ed:60:
44:d8:f1:ff:1e:2f:55:5e:c4:bf:7e:1f:d8:bd:e7:
c8:ef:a3:cf:7a:ff:43:64:f1:93:c6:4a:09:76:87:
34:2e:4f:69:0f:4b:4c:0f:4e:4e:28:90:22:7c:a4:
e7:fe:4d:ff:3d:99:5e:5b:3f:b3:5e:d0:50:ea:99:
f4:27:b2:a1:a9:47:9a:5b:e1:aa:ef:b1:9d:33:9a:
d7:02:85:f0:95:94:35:51:68:da:2b:68:8e:9e:cd:
31:a4:c8:f6:2f:28:2e:1c:33:8a:4e:7e:83:cd:6a:
83:58:04:61:b1:c2:dd:21:cd:23:64:e0:ba:57:67:
27:fb:69:32:1f:17:79:38:ba:ff:f0:58:6b:74:d6:
31:e4:21:d1:e4:b8:b1:ec:07:88:da:72:18:f7:2a:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C3:5E:24:27:2D:17:A2:96:73:F2:06:C9:7A:A0:2B:5F:1C:F7:B1
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f3:cd:11:49:25:27:89:2f:cf:42:eb:44:05:87:50:58:9b:
75:76:0b:bc:47:96:ce:d0:3a:b2:72:e4:96:31:d3:6b:02:81:
2e:b2:19:f7:82:4d:70:37:c1:85:1c:f0:d0:ca:09:57:31:77:
cb:f3:d9:16:e1:60:d9:64:b7:e8:7f:8d:d6:f4:1b:84:ec:ba:
cc:93:25:39:63:e6:4a:5e:ef:19:bf:a5:5d:65:65:ac:fe:2d:
97:39:bc:a2:9c:36:65:1a:72:23:8d:53:99:5e:06:c5:27:d5:
a0:44:42:d1:84:4a:6c:66:8a:fe:5c:51:82:45:93:40:e1:8b:
a1:b9:0e:c7:38:fd:b6:5e:6d:01:11:50:72:4d:71:3f:f9:c6:
52:ef:4e:c5:46:cf:fc:b3:78:d7:cb:d7:8e:a5:39:11:6d:b2:
62:3a:15:f5:b3:2c:49:9e:39:89:46:a0:a4:83:e1:ea:b9:aa:
69:40:41:24:6d:f1:91:98:f8:fd:a2:ff:9e:fb:3b:45:b2:a2:
3a:06:47:ad:18:26:0f:54:47:f2:a0:65:7b:07:b4:4b:6a:0e:
c0:8e:62:3c:de:22:2e:0c:8f:7c:d2:45:6c:5a:4a:5f:97:c7:
b9:9f:aa:57:b3:8a:d9:0a:39:fd:06:5b:c3:23:1a:1a:a5:b3:
af:38:88:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:41:33 2026 by rpki-client