Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
File: xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json)
Hash identifier: 8TlPEQIs7KfLFiBBcJQSHHKlq593uYHburg4pgeBAcw=
Subject key identifier: 79:1E:04:7A:4E:DF:F7:04:79:64:F5:69:6C:0E:ED:37:D6:1F:E8:FC
Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Certificate serial: 01A1DD94DD703D1E1FA55CA36049876694C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 05:01:23 +0000
Manifest this update: Sun 15 Nov 2026 05:01:23 +0000
Manifest next update: Mon 16 Nov 2026 05:01:23 +0000
Files and hashes: 1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: bOl8Zen/VKXEY33mGC34JIL1kkwlvkdE6XYNsnZ22yY=)
2: xsHwN39t7Lg_0JrvQJX-o8s4wJc.asa (hash: uUROjO5Wuy6f76sPTNQEiOJg9EZNcnwz3IXWyZD8TU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:dd:70:3d:1e:1f:a5:5c:a3:60:49:87:66:94:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Validity
Not Before: Nov 15 05:01:23 2026 GMT
Not After : Nov 16 05:01:23 2026 GMT
Subject: CN=791e047a4edff7047964f5696c0eed37d61fe8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:02:f9:27:f5:74:b4:99:6d:7f:5d:c3:60:
ff:fa:ee:24:b9:7a:cb:b6:ac:98:93:fc:cd:79:1e:
40:74:5a:62:3c:2d:42:94:cb:39:99:6f:9e:0d:9a:
69:f9:6c:d8:f5:4c:93:3c:fd:8e:48:ee:e7:62:81:
12:81:40:66:c8:fd:4d:3b:b0:63:99:8a:37:8f:da:
71:02:47:08:26:92:d4:95:24:c0:03:e7:8f:d5:54:
46:9e:dd:d8:22:37:7d:0f:8c:ba:ea:ac:17:fa:ee:
31:9d:9e:e0:1c:2f:2e:36:f8:1b:9b:de:23:d3:8b:
81:34:65:3e:63:d5:71:3d:28:24:e2:9e:ed:d2:ea:
52:67:ef:42:3a:9b:7a:26:7f:74:14:1e:ea:b5:2b:
fc:b6:35:82:a1:5d:58:b2:bf:86:b3:88:78:e2:bb:
78:af:6c:3b:53:4f:da:e8:7f:d6:0c:67:a9:f8:2e:
7d:41:9e:bd:6c:ae:13:26:2d:b9:8a:6c:b8:7a:68:
39:a7:20:c4:6b:fc:2f:ca:03:80:a7:e5:17:ce:04:
e6:f9:75:70:9a:8b:60:07:d2:e9:d9:a5:0b:07:bc:
cb:95:03:54:48:88:90:1d:3f:57:c4:71:24:4b:f0:
65:08:fc:b6:59:a4:6f:35:81:59:50:8a:3a:11:8c:
04:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1E:04:7A:4E:DF:F7:04:79:64:F5:69:6C:0E:ED:37:D6:1F:E8:FC
X509v3 Authority Key Identifier:
keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:89:d2:4f:31:56:7e:6e:c6:01:53:93:78:ae:4d:b7:9e:db:
68:6a:a6:5c:76:6c:ba:aa:dd:b9:26:4c:29:0d:7a:20:bd:69:
88:75:07:b9:c5:1b:43:1b:4b:4f:fe:5e:ad:b2:68:61:06:a3:
6a:3a:25:18:58:6a:6e:f6:be:83:0a:3c:3e:f8:ef:b6:c1:77:
74:94:fc:46:94:36:1f:38:b1:4f:91:fb:4f:70:4d:12:5c:8c:
82:21:b3:21:d1:09:02:5b:a4:b7:b9:a9:6f:4e:84:c9:f4:9d:
e8:4c:be:fd:74:0b:37:f8:23:1c:76:a6:50:61:65:a3:f6:11:
64:ee:0b:2b:85:9d:c2:bc:17:b6:52:69:96:28:f9:17:81:e7:
60:ec:3f:3b:9c:5a:4c:ab:e7:33:79:eb:5c:59:64:08:b6:4a:
fd:5f:96:84:54:a1:2a:5b:1f:73:e4:a4:83:f5:54:98:a8:1a:
17:0a:35:22:aa:88:d8:69:2c:7f:b0:d8:3e:be:f0:ed:a3:12:
1b:4b:f6:f4:b8:78:9b:0a:4b:21:bc:a4:44:01:2b:d8:3f:a9:
7d:9b:26:b7:36:65:98:38:de:a9:1c:bf:6c:1c:40:ce:69:45:
73:e3:0a:94:8c:e3:9c:75:08:95:04:76:5d:93:68:26:98:02:
18:c4:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:49:22 2026 by rpki-client