Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: chMadzYWxB818vYWHqDdIQM1ok7djct6csS3BtA4eOo=
Subject key identifier: F6:7D:7D:41:51:44:DB:DA:B8:79:02:0F:F0:57:19:8D:DF:4A:82:7D
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 01A109CB0194055412C2F4D04893CC2F148C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 0C36
Signing time: Mon 05 Oct 2026 02:01:01 +0000
Manifest this update: Mon 05 Oct 2026 02:01:01 +0000
Manifest next update: Tue 06 Oct 2026 02:01:01 +0000
Files and hashes: 1: OBJUqWKdq6kiQbp0gg2le_lxwc8.roa (hash: Q6TNVRFJT35RFtqmG8IVN0WlQLvaNhPi6XH41fNOOas=)
2: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: qMxUrgJC7/Q3GyRMcaJj/9UpJ+UhzRNdz9b/e669KsE=)
3: pDXgmFSEjeXu5kTO9JnxKOTny04.roa (hash: zBFnWy98uBKGBRB8AClKYux+jyTzJfSF7W9SKPlT+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:cb:01:94:05:54:12:c2:f4:d0:48:93:cc:2f:14:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Oct 5 02:01:01 2026 GMT
Not After : Oct 6 02:01:01 2026 GMT
Subject: CN=f67d7d415144dbdab879020ff057198ddf4a827d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:4d:06:9a:c6:28:c9:a3:04:d2:42:50:a9:
75:e2:d8:65:49:41:ae:20:bc:66:09:61:9f:6a:c4:
dc:a2:48:10:6f:5d:48:83:6e:01:ec:77:f3:ab:40:
84:c2:0b:c3:cc:30:80:b0:4a:b6:c3:4d:56:0c:33:
61:44:06:ff:be:9c:e2:3e:99:f3:bb:aa:62:c4:18:
67:20:14:a1:c5:82:b5:bd:82:f3:78:77:10:df:7e:
d7:7e:ba:9f:2b:07:ee:73:16:f3:0a:8a:49:8e:d2:
ef:6e:50:d3:f4:f5:11:62:e7:c6:47:43:85:66:b5:
3f:1a:98:f2:03:25:c9:8a:a0:98:f8:87:b5:9b:89:
3a:1a:eb:19:34:49:02:32:63:90:83:84:09:ce:e9:
a8:24:9c:fc:da:e1:da:84:c6:fa:97:13:91:1c:4b:
ac:39:5d:bd:5d:8f:9e:2c:a5:f6:d1:b5:31:5a:ea:
e4:f4:71:20:b2:c3:c8:cd:a5:70:39:c2:9c:a9:23:
d7:cf:d3:a2:22:4a:dd:3e:da:96:7e:cf:84:f6:38:
7f:b5:74:dd:f6:7a:f9:7f:8f:43:cf:c7:60:e0:f9:
33:00:3c:a6:2d:65:9c:29:47:df:2a:6a:09:fd:4c:
07:04:10:03:c3:36:76:7d:d3:b8:15:cb:02:39:29:
5a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7D:7D:41:51:44:DB:DA:B8:79:02:0F:F0:57:19:8D:DF:4A:82:7D
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a9:28:57:d1:60:90:45:27:e2:e7:0f:22:49:cf:76:57:85:
c0:fe:14:0d:5e:86:61:9b:a6:b6:be:2f:ee:4b:22:58:5c:ad:
d1:63:4e:2f:98:ab:73:51:3e:87:60:1d:bb:7f:ff:9b:5b:63:
5a:63:9e:d6:42:41:4e:51:79:32:34:03:58:a6:81:0e:68:b5:
3b:b6:5a:98:a2:dc:7e:67:6d:ab:ad:58:92:67:36:10:aa:2f:
e3:7c:47:63:c8:e7:83:18:53:e8:43:13:a8:99:f3:82:7c:d5:
6a:5b:25:00:40:95:a1:2c:fd:ee:f4:0f:a8:42:60:d9:23:97:
11:b5:8d:e5:76:78:a0:cd:5e:07:5c:30:6e:73:91:87:be:ce:
23:0f:44:f3:34:e5:d4:3d:05:84:71:28:ed:72:75:56:3c:3f:
b1:38:51:5d:4a:d5:53:6e:76:68:f5:ad:2e:17:0d:69:ea:be:
5f:8d:3f:42:e1:4b:12:76:3f:7f:8c:72:bf:5d:8d:8b:72:4b:
b5:89:a9:4d:78:68:8c:97:81:a9:e8:4f:eb:5f:e9:89:61:0d:
52:16:0b:d0:5a:96:b2:41:ff:7d:1e:a2:7c:0f:b0:10:43:de:
a4:c0:3c:c0:e5:7a:73:87:13:67:1f:76:66:2c:80:e1:ea:8f:
87:df:04:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEJywGUBVQSwvTQSJPMLxSMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3OGM3ZmM2YjIxMWUyNzFmNzQ4M2Y3MjFkNDVmMjM4ZGQ3
ZGU1YzQwHhcNMjYxMDA1MDIwMTAxWhcNMjYxMDA2MDIwMTAxWjAzMTEwLwYDVQQD
EyhmNjdkN2Q0MTUxNDRkYmRhYjg3OTAyMGZmMDU3MTk4ZGRmNGE4MjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLpNBprGKMmjBNJCUKl14thlSUGu
ILxmCWGfasTcokgQb11Ig24B7Hfzq0CEwgvDzDCAsEq2w01WDDNhRAb/vpziPpnz
u6pixBhnIBShxYK1vYLzeHcQ337XfrqfKwfucxbzCopJjtLvblDT9PURYufGR0OF
ZrU/GpjyAyXJiqCY+Ie1m4k6GusZNEkCMmOQg4QJzumoJJz82uHahMb6lxORHEus
OV29XY+eLKX20bUxWurk9HEgssPIzaVwOcKcqSPXz9OiIkrdPtqWfs+E9jh/tXTd
9nr5f49Dz8dg4PkzADymLWWcKUffKmoJ/UwHBBADwzZ2fdO4FcsCOSlaLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZ9fUFRRNvauHkCD/BXGY3fSoJ9MB8GA1UdIwQY
MBaAFEeMf8ayEeJx90g/ch1F8jjdfeXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMt
NjJiMWRhMjYxMzI5LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMtNjJiMWRhMjYxMzI5
LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhakoV9Fg
kEUn4ucPIknPdleFwP4UDV6GYZumtr4v7ksiWFyt0WNOL5irc1E+h2Adu3//m1tj
WmOe1kJBTlF5MjQDWKaBDmi1O7ZamKLcfmdtq61Ykmc2EKov43xHY8jngxhT6EMT
qJnzgnzValslAECVoSz97vQPqEJg2SOXEbWN5XZ4oM1eB1wwbnORh77OIw9E8zTl
1D0FhHEo7XJ1Vjw/sThRXUrVU252aPWtLhcNaeq+X40/QuFLEnY/f4xyv12Ni3JL
tYmpTXhojJeBqehP61/piWENUhYL0FqWskH/fR6ifA+wEEPepMA8wOV6c4cTZx92
ZiyA4eqPh98Evw==
-----END CERTIFICATE-----
Generated at Mon Oct 5 13:31:37 2026 by rpki-client