Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
File: xcgmUInL3eamxXnNd2tfgMD4rdQ.mft (raw, json)
Hash identifier: VMbtWnSV3eJARtrp6x1nR/xrQEUQ9ArG7uhrdoTg/uc=
Subject key identifier: 6F:74:3B:09:E9:E0:3C:2D:5C:D5:D6:58:B6:2D:E4:B1:7A:50:CB:D0
Authority key identifier: C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
Certificate issuer: /CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Certificate serial: 01A17FCF422444C31F7A4001A892D46BBAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
Manifest number: 05DE
Signing time: Wed 28 Oct 2026 00:00:51 +0000
Manifest this update: Wed 28 Oct 2026 00:00:51 +0000
Manifest next update: Thu 29 Oct 2026 00:00:51 +0000
Files and hashes: 1: m7FhPhHs11a2vSve5xnlsfFohsw.roa (hash: hMpM0IenW1hqeUpQGO4ux70XpFaz54EzPiQ0jMGVOds=)
2: xcgmUInL3eamxXnNd2tfgMD4rdQ.crl (hash: n0UvNpdX8Gcqz/uNfi8bTDj3rceusIwS94oJMU041kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:42:24:44:c3:1f:7a:40:01:a8:92:d4:6b:ba:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Validity
Not Before: Oct 28 00:00:51 2026 GMT
Not After : Oct 29 00:00:51 2026 GMT
Subject: CN=6f743b09e9e03c2d5cd5d658b62de4b17a50cbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:93:6f:09:03:71:41:cc:eb:f6:8a:d4:36:
7d:57:e3:09:54:f5:e0:da:5b:e5:87:d8:e1:2e:3d:
90:24:00:69:32:a8:06:7e:d3:c3:dc:c0:6f:11:1b:
c8:c9:ab:0a:6e:db:9f:13:c5:00:69:94:6f:f6:63:
77:b4:ca:e4:49:ba:cc:16:56:d5:40:19:59:cc:0b:
36:78:89:c1:36:6a:57:5b:0e:14:2c:32:77:27:32:
04:34:25:57:6b:7f:71:2b:4f:ca:2f:26:97:b2:b9:
ca:11:ee:fa:00:e9:35:0d:f0:05:48:0d:eb:83:83:
08:24:02:47:f2:5b:ba:6d:38:3c:46:16:6c:1d:11:
68:6b:cd:04:23:eb:c8:c4:70:27:e0:4c:09:da:03:
be:7e:78:bb:5b:dd:da:32:d8:8a:f0:0a:d6:b4:c6:
d2:9c:3f:d9:cd:45:22:e0:64:ac:e2:33:0f:63:20:
59:b2:8f:5f:cd:61:17:06:95:7d:a1:97:13:af:a5:
9c:a9:c1:46:9b:37:6d:59:d0:92:33:b3:90:40:e7:
24:22:a6:bd:03:9f:f5:65:40:ee:b5:99:8e:7f:a5:
00:93:42:5f:a8:d4:c7:ce:de:39:6e:3d:da:99:89:
7e:de:ad:93:11:fe:72:af:a0:18:2f:d0:22:d0:26:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:74:3B:09:E9:E0:3C:2D:5C:D5:D6:58:B6:2D:E4:B1:7A:50:CB:D0
X509v3 Authority Key Identifier:
keyid:C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c1:fb:25:4e:49:e2:4e:59:43:cd:88:b9:3a:86:17:4a:c9:
d7:23:e6:b1:74:95:5e:00:b3:a7:10:34:91:3c:67:fa:4c:ed:
fa:81:41:7d:44:03:fb:f2:8f:a3:0e:5b:75:19:58:a2:71:cf:
d8:eb:de:a4:47:3b:e2:44:74:42:b3:49:9a:50:b4:53:f6:cb:
bb:82:ac:74:8e:f1:34:33:93:bc:9c:3e:f7:17:c1:64:c8:85:
20:f0:3d:45:ee:00:bd:88:f7:c2:78:a4:f9:af:85:47:f7:71:
ea:92:f6:bf:e6:32:42:fd:38:ce:f5:35:df:8f:fe:d0:fe:55:
61:dc:97:c1:21:2b:6a:8b:57:a6:1a:be:2a:ad:9a:c9:57:e3:
3b:31:ff:1f:1f:ba:ff:4b:b3:14:b1:8d:d6:16:87:ef:3f:70:
cf:2b:c0:5e:2d:9c:b2:93:83:22:cc:16:14:3b:b2:60:02:08:
ed:61:33:2d:7d:96:0e:24:c6:4e:e5:5e:0e:44:a1:30:f8:33:
a0:df:67:41:72:c6:53:65:f7:75:d5:fa:01:87:8c:57:3c:40:
ce:2a:df:e9:bf:b3:02:31:25:12:ee:60:dc:76:40:cb:03:8e:
9e:93:09:85:f7:40:b6:64:89:a6:23:be:0a:aa:93:d9:65:f6:
86:95:5b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:33:12 2026 by rpki-client