Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
File: xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft (raw, json)
Hash identifier: SHvOAPYHrZK2qTSPxMArGOdmp1ykVggKOCMXaDovHFA=
Subject key identifier: FB:7C:25:83:98:12:B6:C2:67:8C:14:04:66:9A:67:2D:7A:00:B2:DF
Authority key identifier: C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
Certificate issuer: /CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Certificate serial: 01A0D4CB27B08AB952D7BFCD4F389C7B4EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
Manifest number: 0C0C
Signing time: Thu 24 Sep 2026 19:01:18 +0000
Manifest this update: Thu 24 Sep 2026 19:01:18 +0000
Manifest next update: Fri 25 Sep 2026 19:01:18 +0000
Files and hashes: 1: bkpFrc_6laoYbGdkqTlHlW-Qe80.roa (hash: p/3gwRkkBDXycKoUYkEzWpJbWT3T+RMybdZ5AMyzIgo=)
2: xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl (hash: DtuSbj2v/7JplfcU1X18HOm3K71Ov+qj8zKOgTHbxn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:27:b0:8a:b9:52:d7:bf:cd:4f:38:9c:7b:4e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Validity
Not Before: Sep 24 19:01:18 2026 GMT
Not After : Sep 25 19:01:18 2026 GMT
Subject: CN=fb7c25839812b6c2678c1404669a672d7a00b2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:e7:21:de:22:d0:d2:26:db:a1:f3:69:e5:
1c:06:19:62:99:4d:33:ae:41:cf:d2:d3:a4:f8:08:
a5:05:9e:d8:72:a8:b3:96:f1:d4:56:3a:9f:c0:0a:
2d:cb:df:f2:ca:51:8d:a3:2c:d9:6b:bc:7b:96:86:
90:dc:00:e6:ce:b1:16:8b:3f:ce:91:16:ab:75:9f:
83:33:63:ed:ee:e6:d1:1f:f8:89:25:f1:b4:d8:8a:
0c:02:95:5d:53:8d:78:21:5f:fe:a7:a8:4f:ef:d8:
df:22:c3:d4:8e:3c:ec:5f:37:d5:48:50:3d:4a:e1:
5f:7d:33:10:91:03:bd:70:9d:4c:cd:56:7d:51:b5:
40:81:09:e8:87:7c:63:76:2c:a1:11:aa:e3:12:b9:
8a:b6:36:4f:f2:8d:15:7c:ac:1b:9a:b7:b1:3f:7c:
9a:1d:f4:71:29:1d:c4:41:32:0f:37:48:23:e8:9f:
a5:d3:3e:70:0d:8a:ff:cc:12:aa:4c:8c:b8:26:bc:
63:89:c9:90:1b:5d:54:5c:43:bb:74:cc:44:b6:8b:
a4:e3:cc:7e:b7:d4:84:0b:d5:c9:90:b5:9b:6d:90:
5e:26:fa:a2:e6:61:f3:d9:e6:bd:06:fb:ac:e5:b9:
e8:74:cc:e9:96:15:21:31:2d:18:df:99:3f:b4:b3:
61:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7C:25:83:98:12:B6:C2:67:8C:14:04:66:9A:67:2D:7A:00:B2:DF
X509v3 Authority Key Identifier:
keyid:C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:85:06:1e:e6:ec:8b:a2:7b:f1:3e:6f:eb:5c:01:c3:9c:91:
0f:f0:f5:08:be:00:e1:92:53:e9:58:b9:1c:85:92:eb:68:7a:
ab:37:1a:21:b3:f6:4a:1f:9c:04:1a:8a:6e:ca:b1:f0:d5:fa:
69:c8:f3:7e:5f:61:23:02:a2:b4:af:cc:04:71:74:8b:09:34:
56:20:98:2f:ed:15:ab:e9:c1:46:10:e1:c6:f9:44:a6:b1:00:
67:4d:77:0f:ec:2a:97:14:99:36:f6:98:a1:3c:8c:9a:7b:39:
b5:30:98:6a:04:b2:7b:c9:2a:13:ba:f1:55:4f:7f:af:77:53:
a2:4f:b4:86:34:da:fc:4e:5e:1e:e9:b2:86:d0:45:60:c7:4f:
54:c4:54:e3:d6:85:60:89:de:8f:b5:f7:2c:4d:c1:15:aa:22:
8a:69:44:15:ad:6f:95:f0:e5:23:e2:89:34:5c:85:9b:f1:0a:
c1:e3:eb:b4:54:9c:7e:a8:87:a6:d0:7f:5c:a0:93:b2:b5:eb:
00:27:9b:b2:1a:ea:6c:c1:3a:22:21:7d:bf:4e:11:92:8e:0d:
1f:c2:41:75:3b:97:96:11:4c:e0:1d:2e:30:26:82:20:49:17:
c3:8c:b7:b9:2a:03:3e:7b:45:81:e8:6e:e2:8c:fa:d5:b6:5d:
9c:62:0d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:13:27 2026 by rpki-client