Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
File: xx85HWDhoTnMxCsXoyqVNj31z7A.mft (raw, json)
Hash identifier: b5EQwDnsVthNWGgqLj2kpqlg4ehJy+Vdf8SOZsWAxuE=
Subject key identifier: B0:39:E0:FF:BB:21:1F:55:97:7B:23:6F:93:17:E2:1D:0B:22:9D:34
Authority key identifier: C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
Certificate issuer: /CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Certificate serial: 01A107381DD177F599CBFF14AEE67983C0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
Manifest number: 03A6
Signing time: Sun 04 Oct 2026 14:01:20 +0000
Manifest this update: Sun 04 Oct 2026 14:01:20 +0000
Manifest next update: Mon 05 Oct 2026 14:01:20 +0000
Files and hashes: 1: 5Ac1xGg2xzacy1Elgpwm7Fl9gOY.roa (hash: VWmcJPkpnJaJdz3GW3aT+bj0R6mJFxMSWGrX3LD0Zyk=)
2: xx85HWDhoTnMxCsXoyqVNj31z7A.crl (hash: 2D2h02VGJMfMhyNA3qVvSb8osl261OouI3EMr1t770k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:38:1d:d1:77:f5:99:cb:ff:14:ae:e6:79:83:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Validity
Not Before: Oct 4 14:01:20 2026 GMT
Not After : Oct 5 14:01:20 2026 GMT
Subject: CN=b039e0ffbb211f55977b236f9317e21d0b229d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:35:be:ea:86:dc:47:01:09:bc:15:10:17:
e0:ce:57:0f:26:3a:5b:05:cf:3f:d5:ea:44:5b:5c:
ce:95:af:e9:eb:b1:9b:69:2b:73:58:8b:71:56:1e:
28:c1:2d:4e:26:5f:58:88:72:eb:e1:36:46:2d:b0:
66:0f:96:55:4e:6d:69:11:c9:38:75:1d:8b:d4:28:
69:10:7e:fd:81:ad:fb:48:f6:c2:74:8e:15:9d:cb:
5d:2f:73:11:bb:bc:97:d2:16:0d:05:95:dd:a5:9d:
d2:50:87:c9:f7:eb:a3:d3:a4:61:42:f6:c8:33:9e:
ed:d6:3c:c7:e9:e1:03:96:2e:5e:a6:a1:9c:28:cf:
ed:37:90:75:36:a4:f2:74:0b:59:51:91:da:06:2f:
01:52:fc:a6:3e:1e:25:04:c0:d6:a5:2c:69:7b:13:
dc:15:89:06:83:02:95:af:b6:37:93:49:e7:33:76:
cf:1d:0b:db:29:6e:5c:5f:1a:10:05:81:cc:76:f9:
a9:27:80:c5:57:22:82:1d:39:45:5e:f5:97:fa:7a:
fc:d7:6f:8a:b4:cf:2e:50:a1:1d:38:6b:58:3a:48:
dc:84:80:9f:ad:7b:5b:4b:f8:90:04:61:db:33:9a:
d5:88:57:a8:05:94:5e:5b:f7:91:e3:e8:4a:0a:58:
d9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:39:E0:FF:BB:21:1F:55:97:7B:23:6F:93:17:E2:1D:0B:22:9D:34
X509v3 Authority Key Identifier:
keyid:C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:43:5c:2b:ae:83:fb:e6:dd:0d:22:28:df:ca:4d:e9:6d:99:
c5:51:75:5d:c7:64:2e:99:e9:c2:13:e2:92:f5:5a:ee:eb:dc:
c6:d9:04:62:bf:63:ad:98:87:3d:34:22:5d:fe:ab:0a:fc:28:
7e:28:05:e1:b7:08:0f:6b:41:bd:86:fe:06:1b:f5:e6:6e:b5:
cf:12:e3:c7:dd:9b:48:8e:38:da:16:81:7e:98:f5:86:c7:27:
8b:3a:d5:fa:da:36:b2:1e:fc:d1:80:cc:4d:e1:cd:1c:64:af:
3f:1b:40:03:48:1e:19:06:30:3b:5c:b7:a9:8b:53:9a:15:29:
d1:ba:2d:75:b9:00:dc:32:3d:ca:85:94:0d:be:ef:4d:a8:9b:
30:40:2e:79:ce:55:5d:b0:91:41:4b:db:3d:83:e9:f0:c1:ff:
18:74:e6:50:21:6e:7b:f7:5e:a1:3b:98:79:77:e3:4f:30:be:
f7:88:67:9b:2f:17:5a:48:56:52:fc:7d:fb:41:b9:e7:8a:7b:
f4:00:ae:34:9f:76:a8:e8:25:87:f6:92:b9:b7:1b:34:e0:e0:
fc:05:92:32:ad:ad:3a:5b:5d:86:3b:e7:51:38:d2:ed:b5:35:
24:a3:ba:66:3e:f2:b5:2f:ff:ae:00:22:22:9a:b3:af:b9:79:
e3:81:57:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:25:45 2026 by rpki-client