Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File: xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier: VXMJUbA7r3tCYzgoCK7Z8ugXy1Avi9tXsg9ryYb/pPg=
Subject key identifier: D4:78:7E:55:58:3F:A2:AA:34:C4:FC:86:37:05:D1:E9:9A:79:05:77
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 01A0D45D408CC26CB6C4461FA2B8AE06830A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number: 1A73
Signing time: Thu 24 Sep 2026 17:01:16 +0000
Manifest this update: Thu 24 Sep 2026 17:01:16 +0000
Manifest next update: Fri 25 Sep 2026 17:01:16 +0000
Files and hashes: 1: GpZIgv126Cl3UoGhkY1Uvof1iPY.roa (hash: fP30v2kEF8neAtWHSrqD3PG/OVeu+YIU3qixidi5CQc=)
2: idf0hZZENN-4_aae9KN1w6rgM4Q.roa (hash: qK834woHIrutz8SD0paYhf0sMnrUCo/j6IC8hJut1/0=)
3: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: QqN5A9ooA0UNiA+oqiXgqU16qEBJABRv/8TblrikPEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:40:8c:c2:6c:b6:c4:46:1f:a2:b8:ae:06:83:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: Sep 24 17:01:16 2026 GMT
Not After : Sep 25 17:01:16 2026 GMT
Subject: CN=d4787e55583fa2aa34c4fc863705d1e99a790577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d0:e9:10:56:db:17:16:c3:78:5c:de:fc:90:
fd:b9:39:50:6f:fc:80:f2:a3:f1:cc:d2:da:d0:bd:
e9:2d:87:e0:ed:68:84:63:dd:c1:0e:92:6f:ef:d6:
d5:2f:03:27:d7:90:16:e2:1c:d5:6f:b5:2b:6e:03:
1d:4b:13:31:8e:d0:b0:c4:fe:2c:f3:2a:45:27:4c:
a6:33:7a:58:8d:46:5f:86:85:f1:fa:1d:58:b1:04:
84:22:aa:b1:8d:e0:b7:68:64:be:7f:a4:4b:ec:58:
9b:08:83:e6:44:2e:26:15:94:87:b5:ac:54:17:32:
f7:f9:93:7d:e1:7a:5f:cb:39:e4:54:57:2a:b6:bf:
bd:7c:ff:50:a3:86:87:02:ca:0e:d7:45:3b:af:9a:
8d:5a:52:81:62:cd:4e:e0:e9:ea:e5:31:3b:ed:ad:
16:9e:3f:90:05:99:ee:e6:e3:43:fb:61:c1:f6:14:
0b:81:90:73:b2:4a:fd:cb:97:70:aa:dd:9d:3d:45:
c4:31:d1:d6:49:b0:43:3b:15:11:1b:a2:4a:02:19:
1d:ed:c6:6c:4a:69:bd:ed:24:f7:06:0d:55:aa:15:
8a:3e:f6:5e:4d:08:49:2d:72:bb:d5:a5:fc:98:74:
d8:c6:d7:7b:df:14:44:94:ec:25:63:f7:06:6e:4d:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:78:7E:55:58:3F:A2:AA:34:C4:FC:86:37:05:D1:E9:9A:79:05:77
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5e:3f:35:38:e4:0e:b4:fc:d4:23:7e:1f:f6:31:5a:7f:68:
54:71:9d:8e:3b:56:56:ba:77:62:d2:73:5c:7f:f6:32:37:24:
d7:f8:f4:d3:65:37:34:ce:89:25:01:ed:43:a0:a7:95:c9:2a:
02:5c:42:e7:ff:bd:7a:4a:6b:57:ba:c8:17:e7:39:1c:bb:63:
08:b2:fc:c5:ff:0c:cf:8c:00:f3:0e:49:79:ce:72:09:21:77:
9d:e1:69:97:58:49:07:83:07:2f:8f:16:3a:88:b5:8c:c0:6a:
ed:50:30:2d:81:9c:bd:7f:d6:e3:6e:30:53:19:22:d7:73:87:
c4:d7:dd:12:52:f5:8a:32:d4:5a:29:d4:21:44:0a:65:2b:d1:
4f:22:dc:b9:83:f3:41:c5:43:a0:07:c7:b4:da:90:53:cb:0c:
1e:ce:62:ee:3d:34:67:3e:31:1d:3f:7f:cb:c3:31:a4:32:c0:
bf:df:ef:7f:34:db:eb:2f:c1:13:05:07:b0:65:f7:f8:c1:bd:
e9:0d:b5:f0:03:09:61:92:e1:8c:d4:14:43:b9:69:77:a9:bb:
f6:e8:6d:60:f0:8d:bd:d4:7a:83:b9:13:09:08:cd:70:68:08:
f8:df:f2:99:da:73:82:3f:7b:b3:be:6d:21:ad:82:2e:a7:b1:
e6:2b:43:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:52:11 2026 by rpki-client