Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
File: xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json)
Hash identifier: nRW+2oLjWPq5UkatAuP/iXetTBJ/VV4CMFrEXLiArVc=
Subject key identifier: 9E:2F:4C:CB:1B:5A:E4:AC:74:37:68:3C:93:A0:97:8F:F4:22:84:47
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial: 01A176CC572D85A12BF3D244825E8424CB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
Manifest number: 0B65
Signing time: Mon 26 Oct 2026 06:01:05 +0000
Manifest this update: Mon 26 Oct 2026 06:01:05 +0000
Manifest next update: Tue 27 Oct 2026 06:01:05 +0000
Files and hashes: 1: 4kyWrT9Xy1B7TLtNDP6HuPz-7hw.roa (hash: sWHWI8IzaliyTyKxy/NPSWlKi/bMUwx2CvIPkFk/56s=)
2: A_J1Iis85mInuYBjqNWnaY64Er4.roa (hash: KG2bwrYCBOkD3k9N+nA/ujMikD/ZloBG8hBsS2kc7cc=)
3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: R3C/5e7nyrzCr2yL7fvNjVqbGWMIwQNVEtsPvAz4e9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:cc:57:2d:85:a1:2b:f3:d2:44:82:5e:84:24:cb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
Validity
Not Before: Oct 26 06:01:05 2026 GMT
Not After : Oct 27 06:01:05 2026 GMT
Subject: CN=9e2f4ccb1b5ae4ac7437683c93a0978ff4228447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:b2:61:3e:d6:3f:88:e6:20:47:c1:5b:29:
7b:44:a7:2f:d7:87:f2:15:5d:24:a1:a3:10:ad:fd:
9a:75:64:7f:19:6a:63:b4:e4:d2:45:4f:cb:ab:85:
c9:d0:d3:d4:ee:fc:eb:4a:17:f7:53:b0:81:cc:9d:
0d:52:1d:9c:3c:4f:36:c5:bb:4e:e6:77:7f:bb:26:
81:64:dd:e8:71:5f:41:e8:aa:8a:6e:51:5a:d5:0a:
68:e2:73:c3:be:7d:bd:6e:a9:bc:b7:d7:a1:25:44:
50:e3:d5:1f:3a:b6:72:ee:88:a1:9e:5c:c9:2f:b2:
5f:4c:e4:47:3e:91:1f:58:ac:71:af:52:f2:26:59:
1d:67:d7:23:08:64:88:74:91:1e:0d:5c:50:a1:39:
04:53:e7:f0:d4:35:fe:20:c0:b4:49:2d:0f:9f:8d:
d4:f5:80:88:81:78:7b:a3:eb:13:2c:7e:1d:b9:07:
f3:fa:f1:20:13:8d:0c:f6:2d:9d:d9:74:7b:52:a6:
71:cf:7f:d9:c8:8a:1d:b0:36:8d:ff:b8:3a:b5:2a:
44:92:3f:8f:45:59:d3:cd:7f:2a:29:92:0d:8c:a1:
97:79:4b:f9:0b:e9:c3:8f:c0:90:c7:9e:82:52:b9:
5d:e7:a3:e7:e1:f3:11:0d:d8:b0:ca:87:17:fe:50:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2F:4C:CB:1B:5A:E4:AC:74:37:68:3C:93:A0:97:8F:F4:22:84:47
X509v3 Authority Key Identifier:
keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:33:cb:20:0f:94:f3:2d:8b:5a:50:c5:87:b2:b2:e0:38:1a:
20:cf:f1:22:1e:41:fa:56:87:4c:07:35:9b:dd:3d:36:1f:04:
72:67:8b:66:b8:27:2e:2e:f0:ef:0d:a2:dc:9d:80:7f:e1:a8:
64:7c:2c:55:c7:2b:5c:e9:2a:57:dc:f9:36:09:ff:d4:31:24:
6e:0e:0d:3c:0d:2f:70:09:a0:15:86:44:0e:76:16:9b:b4:99:
cf:3c:47:4f:c3:3b:00:36:8b:eb:43:f0:94:17:ce:4b:ad:d9:
48:3a:95:29:f8:a8:b2:a4:96:12:5d:a4:15:c1:45:36:46:4b:
c7:63:26:8b:5b:48:c2:a3:f4:f5:11:8c:de:51:7b:a1:cb:4a:
68:69:39:ff:53:1b:6b:ba:33:2e:d9:74:96:56:62:87:e0:1c:
67:01:fd:4f:11:80:49:38:f9:7c:e5:04:33:74:2d:3a:73:fe:
d8:18:87:70:22:bb:ef:b2:2c:1a:d0:15:af:66:52:8a:b9:7a:
ec:b5:08:3f:51:80:e6:99:ce:43:d5:37:13:85:16:33:93:6d:
0e:1d:cf:b6:75:41:f8:bc:d5:24:2b:5b:70:b4:15:a5:7b:95:
a5:4b:eb:ec:89:d8:de:19:eb:90:c8:87:0a:8d:1e:71:72:cd:
47:4a:36:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:44:41 2026 by rpki-client