Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier: CSA1vkFuBIhbsU45efUdiBIerDnAbSRc8OasievIQWk=
Subject key identifier: 9D:73:57:80:49:3D:F0:40:08:2B:E0:C6:7A:06:8E:FC:42:B7:83:93
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 01A0D2DEA23F6CB32F859A8B555E30DCA6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number: 1779
Signing time: Thu 24 Sep 2026 10:03:20 +0000
Manifest this update: Thu 24 Sep 2026 10:03:20 +0000
Manifest next update: Fri 25 Sep 2026 10:03:20 +0000
Files and hashes: 1: Cj9YGHvlLrMUi1SQsU7dObHSVlQ.roa (hash: ZPq9Z29tNM3JkEKWEncbVwe+zKH6BGs9kcyPYhZ/Frc=)
2: SpCNuk1u-hXCk_6chs0ukaT-xPc.roa (hash: KE7oMTHzlDHmctRL6sItqmo0AwEpnij4sNxyXYuwrUk=)
3: Vu85Nu-HoLeRv_52CEznI8bQbss.roa (hash: c6ty/wCdDrBOcI9jUvVNl5APK8YZjil4x8ZlNRshHvo=)
4: hwEYkWKezFU1S6DS8A0TF6JXUos.roa (hash: dJKRSf7F67Dm6ZGKlb7G6KP8NQfxdE863RZT2JIwE9k=)
5: kj0n6dD5Oy19P3eSGpW6sXPidMc.roa (hash: KnSRmZL/r55wQ34F0TOQmyUNo1O0fG3sUmtVLwDVu9s=)
6: lo3R5w_kTel81Z1irkIbzAD6F8Q.roa (hash: PuU1Xdn3kY1LjMwZS3Qaqe5MniakxiQ+Y+f6yTPGRCQ=)
7: nb0hXlBPQhPWTuMEqZzkSxkwpXI.roa (hash: 55gzjqx5n4gyySLdEurC8vvFbXFEosab3sYhqOZ+WA8=)
8: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: zXVKqJViYA4IoieTbUeNlkaDcMRJZTZmfhiaBJQNAQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:a2:3f:6c:b3:2f:85:9a:8b:55:5e:30:dc:a6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Sep 24 10:03:20 2026 GMT
Not After : Sep 25 10:03:20 2026 GMT
Subject: CN=9d735780493df040082be0c67a068efc42b78393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:bd:47:d7:e3:18:29:16:c7:6e:dd:09:6d:
90:ef:a8:08:77:97:de:52:3d:57:c3:90:fd:f2:93:
9a:03:27:c0:97:56:19:ae:41:5c:f7:f5:e7:da:d2:
72:90:2d:bb:c6:dd:6e:4e:fd:52:ab:4f:6c:2d:06:
58:d8:d9:0d:3d:9a:62:f9:fa:32:3f:ce:ab:98:38:
b4:89:34:90:0a:af:7f:6d:25:89:2c:39:12:57:66:
7e:f5:42:d9:48:df:ae:10:e9:2d:67:04:cb:32:81:
aa:60:64:f3:3a:58:0b:87:fd:ac:73:41:5b:0f:a4:
5e:b4:72:b2:a8:20:b5:c3:84:69:ef:37:b6:98:58:
95:b0:8c:95:15:e7:a1:23:70:b4:08:19:d4:1f:2f:
78:e8:62:a1:37:82:ff:ff:7a:9f:de:be:0d:a0:82:
d0:33:39:37:64:5f:8b:07:cc:6e:46:d0:cf:65:ab:
b3:81:02:87:47:86:a0:4a:ed:3e:fe:42:12:9f:36:
7d:87:75:71:5b:be:ef:23:9b:dd:6f:32:ee:20:0b:
66:b3:28:b9:f6:c6:c5:c7:1e:40:cd:9b:a0:84:50:
46:44:e0:db:0f:d9:ed:72:2b:91:98:c1:2d:fb:a5:
e2:1a:60:9a:30:65:7a:a5:62:48:54:24:db:5a:91:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:73:57:80:49:3D:F0:40:08:2B:E0:C6:7A:06:8E:FC:42:B7:83:93
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:78:98:df:74:96:ea:57:83:8c:89:44:6e:af:a2:43:b7:10:
b7:05:37:3c:7d:cc:55:6b:a8:10:2f:e3:31:31:ca:cc:86:a5:
f9:59:43:49:d0:7b:fe:a9:35:ff:c5:ea:fb:d6:96:67:ac:3e:
4b:46:33:f7:e7:7e:b4:db:a6:e5:1c:6e:62:c8:a2:4d:a2:67:
0b:00:5b:3c:72:8f:ad:6f:69:32:24:9a:fc:95:46:a2:5c:bb:
2c:0f:18:99:13:67:4d:02:9a:b4:ab:34:e5:e8:51:d6:28:ea:
9b:d2:26:26:c2:13:6d:7b:1e:7f:83:86:f3:ce:23:19:16:db:
0f:1b:77:fa:1f:4f:8b:57:e4:b1:3a:06:e7:2f:c9:79:30:9b:
fa:a8:ce:ff:7f:12:c2:21:dd:31:07:73:92:01:07:0d:82:f6:
7b:e1:8d:e3:48:cf:fb:a0:5d:9b:0f:de:84:90:93:40:4e:15:
9e:7c:df:ee:70:2b:c2:73:f1:e5:6d:c1:d0:98:7f:02:d4:ad:
e8:5c:7b:a7:bd:84:53:3e:e5:ff:ae:57:42:39:ee:7d:96:9f:
dc:7d:aa:87:d1:dc:e7:3e:f4:4a:36:44:66:99:0c:1f:e5:75:
77:5b:28:55:45:55:d5:40:76:fd:09:08:d6:78:e6:05:7e:09:
98:31:30:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:05:33 2026 by rpki-client