Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
File: XM97P9h86bzpn5ALZBmdYGvxYGk.mft (raw, json)
Hash identifier: vV52mG04cBKi1j2LvJS/Tm33WZtJRCZ0vp+YgcIcRw8=
Subject key identifier: F4:E4:E1:5B:D8:F7:46:AE:AB:45:23:8B:C6:71:9D:14:C9:0F:A7:2C
Authority key identifier: 5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
Certificate issuer: /CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Certificate serial: 01A1762704D378B58083EA9044E76FA753FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
Manifest number: 1A54
Signing time: Mon 26 Oct 2026 03:00:30 +0000
Manifest this update: Mon 26 Oct 2026 03:00:30 +0000
Manifest next update: Tue 27 Oct 2026 03:00:30 +0000
Files and hashes: 1: KhLnM9UHZFCOQul_YnhOlrlNWQg.roa (hash: F9XQk4xPu6hZHYNZKH9uTFT9zpakfltc+2j9WkGLNVk=)
2: XM97P9h86bzpn5ALZBmdYGvxYGk.crl (hash: mfoL0xrUuugC26bYgyWuqRvcR1leUeDDZk+iHkgiAOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:04:d3:78:b5:80:83:ea:90:44:e7:6f:a7:53:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Validity
Not Before: Oct 26 03:00:30 2026 GMT
Not After : Oct 27 03:00:30 2026 GMT
Subject: CN=f4e4e15bd8f746aeab45238bc6719d14c90fa72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:75:49:06:39:6f:ec:74:e8:f2:70:3e:b0:af:
55:87:94:93:67:bb:22:01:97:a6:39:60:ac:9d:cf:
6b:be:9d:b6:fd:a3:a7:e7:07:96:e4:8c:62:99:8c:
b4:78:36:37:86:a0:d1:26:55:33:c6:b2:62:e7:78:
02:e3:c1:20:ba:bf:97:ed:ad:74:4c:ca:6b:a9:4c:
09:24:b9:8f:c2:e5:78:86:42:a8:e4:73:0e:7a:ad:
ec:7e:77:8c:44:20:ca:24:b3:39:c6:5c:50:ac:da:
83:b8:81:9e:33:53:29:c1:d8:0d:d7:26:31:f5:05:
cb:89:f5:b4:9f:4f:94:b0:07:8d:52:f5:e0:03:19:
ea:38:3a:7b:85:88:53:16:2e:d8:0f:a0:1c:4b:01:
f7:c3:24:63:95:bf:3c:cf:5d:11:ea:32:2d:73:a7:
75:98:c1:ea:74:57:24:39:ed:31:ba:e1:21:5a:01:
01:3d:c9:c6:df:92:2f:6e:16:85:1d:7f:b3:bd:d7:
bb:06:a6:54:e6:ce:25:9d:02:d6:8e:b4:69:33:33:
ea:5c:be:5b:a4:1e:60:a6:da:70:37:88:45:2b:0a:
9a:14:ec:5c:a8:e3:30:d4:8b:18:39:53:5c:cf:9f:
83:a9:4d:20:fd:52:84:18:5a:c5:d4:2a:91:7f:32:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E4:E1:5B:D8:F7:46:AE:AB:45:23:8B:C6:71:9D:14:C9:0F:A7:2C
X509v3 Authority Key Identifier:
keyid:5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b3:5f:32:63:a7:7f:8e:76:bb:0a:96:31:16:2a:07:17:0d:
84:55:0d:f8:ef:d2:be:6c:36:53:44:89:f5:f7:24:d8:f0:3c:
20:18:a1:57:80:fa:86:84:08:e0:ca:95:95:30:4d:1b:35:2e:
9e:68:8f:fc:93:18:ff:4c:66:52:6b:f0:e7:b3:fb:f4:58:79:
4a:30:52:9e:fd:39:7e:1e:89:29:e4:75:9c:61:a8:a6:09:a1:
8a:7d:16:0b:84:00:7f:57:76:e1:08:c5:aa:b9:ed:69:81:65:
64:ef:7b:c5:39:dd:23:d4:78:03:fe:4b:34:d9:83:ea:74:61:
9a:09:8c:51:32:66:fb:70:03:ca:78:a3:92:4b:c0:5c:dd:23:
be:7d:2c:78:83:41:e8:ec:0d:95:bc:10:d6:0f:ae:30:76:d0:
33:7e:e8:e6:69:9f:87:0a:a1:37:b4:1f:69:e5:b1:0e:6f:2d:
f9:2a:51:50:13:1b:77:69:f9:76:53:78:46:1d:8d:3c:15:86:
92:2e:09:2b:78:36:66:b9:93:93:c0:d1:d8:98:81:84:92:5b:
11:92:44:89:93:00:7d:da:43:e1:8c:e4:f9:64:98:fd:03:d9:
a9:da:dc:0f:58:96:f7:12:1a:0e:7c:1d:ac:4b:41:a1:7f:78:
96:c0:9d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:40:27 2026 by rpki-client