Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json)
Hash identifier: AAGCmGbHF7A375VLD6Kjrkx0QA7MG31Tb5py39lC6+A=
Subject key identifier: B3:4D:4E:04:57:3F:9E:8E:A9:4D:6F:C2:35:3E:9D:02:14:24:7C:7C
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial: 01A1DE7117DCBE8B5B939EFA3AA6700161FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
Manifest number: 1110
Signing time: Sun 15 Nov 2026 09:01:55 +0000
Manifest this update: Sun 15 Nov 2026 09:01:55 +0000
Manifest next update: Mon 16 Nov 2026 09:01:55 +0000
Files and hashes: 1: 4Kxd8dm-CWu1jCIsUqmZWt5sIc4.roa (hash: RVAhzYMBRgQ2W1wIbtL6Kztr89B+xTCwvr6xBM79OwQ=)
2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: 7cpM+SZBxz3s8wPStTbE8+xtIbMTzQPUVPtKDqcJYe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:17:dc:be:8b:5b:93:9e:fa:3a:a6:70:01:61:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Validity
Not Before: Nov 15 09:01:55 2026 GMT
Not After : Nov 16 09:01:55 2026 GMT
Subject: CN=b34d4e04573f9e8ea94d6fc2353e9d0214247c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:3d:02:d6:e1:a3:a8:69:d2:62:18:70:66:
84:ce:ee:0c:48:49:5a:0d:97:a6:18:69:9d:2c:c3:
2c:0c:44:91:81:ef:dd:1a:93:45:e6:a7:cf:a8:1b:
82:fb:dc:a4:72:5b:57:36:24:fe:6a:7d:3c:e7:38:
0e:43:b9:84:d3:e0:fa:0a:85:66:1d:f5:3b:13:54:
85:af:a6:b3:f0:3a:18:b7:63:6b:9b:df:6f:d4:f3:
83:5c:cb:5c:23:b6:33:20:ad:5f:5f:50:44:52:73:
b7:aa:c5:4b:ec:39:7e:11:b4:85:26:3d:ec:7c:53:
1c:ec:a2:53:d0:41:fc:b2:14:4f:7e:32:8b:c8:8d:
0a:28:9c:67:25:d0:88:a2:75:eb:33:f1:35:39:0b:
28:d9:90:16:96:15:3b:62:ea:3a:0c:1e:f8:92:0e:
7a:8f:9d:41:0f:b5:c5:09:1a:0a:71:9a:ad:a8:7d:
fa:80:45:96:05:b1:54:99:1d:55:cf:fc:bb:8f:88:
d9:48:10:39:b0:ff:9a:b9:e1:62:68:7a:1b:c7:cc:
cd:c3:48:6b:32:0c:92:5b:80:e9:e7:29:7d:88:93:
22:72:c3:3c:db:3d:0b:61:34:c3:da:83:1c:e5:ab:
73:3b:d3:03:1e:68:1c:a7:99:45:c8:09:98:d1:dc:
26:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4D:4E:04:57:3F:9E:8E:A9:4D:6F:C2:35:3E:9D:02:14:24:7C:7C
X509v3 Authority Key Identifier:
keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4d:2e:78:5a:15:a0:94:20:28:cb:6f:01:ca:e5:b4:5f:e3:
fc:44:11:6f:d3:50:01:75:fb:37:08:66:6e:60:84:a4:44:c7:
c7:0d:b6:cc:d7:08:a6:bb:4f:75:eb:e5:ba:9d:a6:2b:11:97:
a2:72:a9:9f:b5:8e:11:1d:2d:fa:2c:eb:22:79:92:0e:26:05:
cb:24:70:b9:22:9d:2d:24:ba:88:64:5f:a2:b5:dd:ee:57:e6:
fa:6e:4a:5e:cb:56:4e:0d:fc:54:58:8d:af:a3:79:2c:d5:d1:
4b:06:93:bf:0e:fb:d5:bc:1d:a1:fb:b8:5d:47:c8:77:c3:a1:
be:6a:dc:76:11:3b:97:e2:96:fe:98:a9:35:21:56:ae:83:52:
95:d0:dc:86:03:8d:66:52:f0:6f:7d:8d:82:42:a7:5c:27:9c:
4d:9a:bd:c0:32:fe:a8:e2:3d:02:dd:14:9c:96:51:74:05:ac:
63:15:71:6b:31:be:c8:1a:4f:22:69:7b:fa:14:3a:85:05:af:
51:4f:b6:ff:5a:c7:d4:53:22:2e:cc:9e:17:e3:46:ce:bc:23:
19:50:92:b2:1a:2b:84:33:b4:45:bc:a5:fa:d7:5d:23:5f:f4:
a4:28:1b:8c:45:82:0e:13:73:06:c1:8f:00:08:d8:c6:4a:78:
19:9d:56:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:29:55 2026 by rpki-client