Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
File: XlTVGjJHsX9vlqDM4lMBktyfdCI.mft (raw, json)
Hash identifier: DpKHjvZjf84k9JgecuecScZpNqrQeorTONn/P2iJ8Gs=
Subject key identifier: A4:24:34:98:98:31:07:46:C5:F2:59:64:39:46:C8:57:74:2C:77:8C
Authority key identifier: 5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
Certificate issuer: /CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Certificate serial: 01A17D732DE2C06A163A676FC1E28702F98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
Manifest number: 0A9F
Signing time: Tue 27 Oct 2026 13:01:02 +0000
Manifest this update: Tue 27 Oct 2026 13:01:02 +0000
Manifest next update: Wed 28 Oct 2026 13:01:02 +0000
Files and hashes: 1: 6ucGtK7FcksHzlY1YGqVPJ32eXQ.asa (hash: yntjhmHRC4ZtpCtWv+R0AHGvZGv6MeRAiAn1Fsy5inU=)
2: LHKcw1T_xip-dQxjFBPkIK8lD-g.roa (hash: sNHczNheeTOetPwxKMLP2zssG5kyELZ3Q0OnzJ3Pj7k=)
3: XlTVGjJHsX9vlqDM4lMBktyfdCI.crl (hash: sV5XqjV6m1wPvrxb6EmQD1wJkYziIrP5ZpMnNVdladk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:2d:e2:c0:6a:16:3a:67:6f:c1:e2:87:02:f9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Validity
Not Before: Oct 27 13:01:02 2026 GMT
Not After : Oct 28 13:01:02 2026 GMT
Subject: CN=a424349898310746c5f259643946c857742c778c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:6c:2b:fa:10:fb:82:69:51:73:25:9f:5d:
7c:79:83:5e:2f:2c:2c:84:5d:8d:72:52:6a:a4:b8:
8d:d2:73:44:c5:8c:f2:55:35:f9:ef:cd:1d:0d:ef:
85:79:fb:b2:89:f2:36:17:06:3a:3a:0b:6f:a6:80:
2b:37:e0:e1:0f:83:41:cf:33:cb:40:07:ec:1f:17:
69:19:e0:42:91:65:cc:b9:eb:fa:7f:18:f3:68:86:
14:2d:22:1d:63:98:5f:1b:c1:78:0f:e8:74:dd:3d:
74:6c:88:f6:23:b6:9c:cb:c5:33:f2:49:0a:1d:6a:
a0:7d:b6:bc:4d:42:a6:ed:5b:04:04:38:aa:2a:56:
a6:f8:e4:80:fb:f2:94:5a:22:b9:5d:11:05:b8:17:
44:a6:69:c0:c9:c5:c9:68:c5:a3:21:16:eb:ea:b4:
e6:af:2b:ec:23:15:cb:47:79:de:41:3d:a9:cd:65:
b2:25:6d:fe:13:e1:bc:ba:07:f5:02:8b:26:62:da:
63:78:d3:f6:90:43:75:a3:38:38:9b:11:f6:36:9c:
44:88:ca:d0:1c:07:a0:d6:9d:c9:40:d5:86:17:d2:
72:0f:23:7b:3c:2d:80:90:63:be:33:f5:77:6a:b5:
31:da:bd:70:d7:9c:ec:e7:b0:f5:e9:0c:4e:b5:58:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:24:34:98:98:31:07:46:C5:F2:59:64:39:46:C8:57:74:2C:77:8C
X509v3 Authority Key Identifier:
keyid:5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c9:03:9a:54:49:a7:ff:9d:97:ae:02:b8:df:91:35:c6:c5:
7c:29:32:5d:81:ba:15:e3:83:97:12:04:f4:81:09:16:f9:56:
20:97:a0:82:bb:9f:ce:2b:ee:ca:00:10:ea:fe:80:d2:5c:c0:
18:81:b6:4e:0b:ae:f6:c1:4f:7b:b5:a3:b7:0e:f9:59:8e:c3:
e3:f0:c8:42:b8:b6:c9:ef:13:e5:5e:6f:1a:e0:68:99:74:97:
40:4b:58:5b:a5:8b:05:f3:df:79:91:c1:05:5a:8d:fa:e4:5e:
69:0a:b0:71:38:15:26:61:fb:95:89:1d:82:76:fc:77:2d:30:
12:0b:ab:25:bd:9c:51:26:06:c7:17:d3:9a:68:8b:81:d5:02:
b8:a6:4e:aa:39:33:37:fe:a9:66:31:49:36:6d:ff:9a:30:80:
b8:f0:fe:43:d7:7f:25:ab:f9:c7:5d:dc:2c:de:1c:db:e1:06:
44:e6:9f:1d:70:24:0d:df:3c:bc:5a:0d:36:46:78:0a:79:e3:
56:03:5d:b9:11:b6:1a:97:86:20:99:45:cd:d2:77:02:c2:84:
6f:de:39:a2:74:1e:18:00:e2:8f:10:f0:04:a8:87:8f:15:20:
2b:0e:4b:b1:ba:51:9f:9a:51:7f:da:ec:03:d8:e4:a3:e3:a5:
a3:05:23:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:18:01 2026 by rpki-client