Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
File: XfEaGA3xeZTkitMxhyz9AK2augQ.mft (raw, json)
Hash identifier: rNDikEGtxBTuVYPW+pBkzAf/VIXyq+9rn89HWAwLW8c=
Subject key identifier: EB:25:A0:DE:48:6B:F6:28:23:AF:D6:26:BF:EB:C4:BC:D5:A7:EF:66
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial: 01A193FAE1B6308F9E5B6B73F08FC4EF2D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
Manifest number: 1AD1
Signing time: Sat 31 Oct 2026 22:00:54 +0000
Manifest this update: Sat 31 Oct 2026 22:00:54 +0000
Manifest next update: Sun 01 Nov 2026 22:00:54 +0000
Files and hashes: 1: XfEaGA3xeZTkitMxhyz9AK2augQ.crl (hash: Ej87n7v/rShq2F3yJMA1/a2vg96+XyHpyo+Gg4JO3HM=)
2: vOvUH4QL3euA8n5Zs-p3s8pu5OU.roa (hash: qqJCGshMa7lPJa7oCp0UWM6NmrUrD8W4y4uDd4fxLLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:fa:e1:b6:30:8f:9e:5b:6b:73:f0:8f:c4:ef:2d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
Validity
Not Before: Oct 31 22:00:54 2026 GMT
Not After : Nov 1 22:00:54 2026 GMT
Subject: CN=eb25a0de486bf62823afd626bfebc4bcd5a7ef66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:ff:34:fc:38:3f:80:cf:41:2d:c6:75:fa:
84:8b:00:12:1b:ce:0c:e7:a7:0b:d3:d1:54:6c:33:
ca:67:61:f2:9e:17:63:38:0b:d2:d6:5a:47:36:de:
83:9d:7b:36:c7:fd:b9:7a:4e:fe:31:ca:50:3f:a7:
ac:af:a7:12:5c:78:6b:b7:f2:49:af:09:99:02:00:
f1:81:ae:4d:f3:02:6d:32:2d:d8:fa:e6:57:26:f5:
a2:65:39:d9:d2:e1:b8:bb:86:70:f4:00:46:d5:df:
7e:47:e6:94:02:45:77:b7:b2:14:3f:1c:c6:cb:f6:
18:a7:f9:3a:7e:e7:cf:7d:47:70:7e:ff:61:50:4f:
6a:3c:18:78:3a:8c:6f:7a:7d:b5:3e:0e:af:70:29:
32:b0:cf:c0:dd:c5:4c:26:e3:2f:2e:ba:85:cf:8c:
a1:70:a1:4f:29:33:03:45:c4:02:2f:1f:85:3c:93:
50:18:8c:2e:69:a4:8c:09:ef:a1:f6:f0:e8:5b:45:
14:c7:76:87:18:47:a8:58:84:e0:71:24:44:34:a5:
c2:bd:3e:a4:02:bd:2b:90:2c:cf:d1:23:cb:e2:ac:
4b:e8:1f:9f:04:40:9d:b4:49:20:30:1d:cd:43:38:
7c:81:77:fa:a6:e3:f0:69:2a:bc:1e:82:6f:f9:73:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:25:A0:DE:48:6B:F6:28:23:AF:D6:26:BF:EB:C4:BC:D5:A7:EF:66
X509v3 Authority Key Identifier:
keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:db:77:e6:f1:5f:bd:00:e5:86:0e:55:b0:d4:f4:a1:f3:4a:
73:bf:56:26:b0:d4:fb:98:28:80:4d:e8:b9:41:cd:73:23:06:
c1:27:8f:8b:a4:71:7c:71:d0:c3:50:9c:ab:92:66:9a:d3:11:
9f:6b:66:3b:a6:35:87:40:76:24:c9:39:5e:18:37:03:91:19:
6c:1d:c1:dd:11:78:f3:58:87:78:b8:84:35:76:53:1c:8d:dd:
08:94:0d:0b:2e:62:2d:82:a5:33:5c:73:de:ae:d6:d2:3c:7e:
25:b9:32:c0:44:b6:d4:ac:fe:8d:e6:14:14:e5:69:d7:1a:ac:
f2:a6:97:22:6f:2d:4e:2c:da:09:36:de:9d:cc:a9:98:b4:6e:
c0:55:87:90:ec:6b:77:19:9d:83:98:b7:eb:44:51:7b:07:b9:
56:91:83:81:2d:95:05:e1:82:6f:69:cf:c2:20:89:13:f4:a2:
37:c6:0e:97:78:bc:89:cd:69:f6:4e:3d:3f:85:0d:12:de:90:
8e:1e:a9:8e:86:e3:55:b3:97:27:f4:17:bb:9f:11:b9:f2:1d:
9c:69:42:56:43:ef:09:2e:d9:29:8e:0f:1a:bf:62:f7:13:17:
6f:23:b3:44:66:26:91:5b:7d:d4:a0:a9:6b:a6:01:e0:95:9b:
87:54:57:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:21:59 2026 by rpki-client