Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
File: xfFStqDQBGJ9KF2Hmqg-WEYast8.mft (raw, json)
Hash identifier: Onao2CilbBOqzAbVNw4fI1nQJ/kFeNo7hnSKKdPTOJY=
Subject key identifier: 24:C8:C0:3E:A9:8E:71:F5:27:0B:0D:8E:96:97:81:A8:72:76:95:B9
Authority key identifier: C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
Certificate issuer: /CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Certificate serial: 01A1558A6C6FAAFDD42AD0C4D6A8417F9E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
Manifest number: 16D9
Signing time: Mon 19 Oct 2026 19:01:37 +0000
Manifest this update: Mon 19 Oct 2026 19:01:37 +0000
Manifest next update: Tue 20 Oct 2026 19:01:37 +0000
Files and hashes: 1: OOLI65R0yCKZEu3Vq7zDXU2EWX4.roa (hash: 4DqbTA05LGH4CBe/nZXvETcQrYnAANXi1pLFxFMD7zg=)
2: XCjw9b2OwQl43FlCHMe4Y7ZHEf4.roa (hash: wCbMmCARfzkMC7BdujK2S3qjjOC1hyZJ59PQGiRtmM8=)
3: xfFStqDQBGJ9KF2Hmqg-WEYast8.crl (hash: GABdkI+onvO1H1Ayil8PM45GV9PKkldU3BGeajtKLCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:8a:6c:6f:aa:fd:d4:2a:d0:c4:d6:a8:41:7f:9e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Validity
Not Before: Oct 19 19:01:37 2026 GMT
Not After : Oct 20 19:01:37 2026 GMT
Subject: CN=24c8c03ea98e71f5270b0d8e969781a8727695b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:fa:83:cf:46:74:0c:58:a1:46:20:e0:b9:
6f:98:13:92:5d:ec:cc:87:33:76:2c:4a:a8:77:04:
dd:bd:ca:d4:cb:2e:b4:cb:bd:15:1f:42:4a:f5:7f:
97:81:8d:f2:cf:48:c1:83:36:8e:17:d6:4e:c2:2a:
91:d6:a6:1a:ba:49:7b:e5:03:a5:1d:a5:72:87:6f:
1f:8d:1d:04:2e:01:e3:d6:75:52:ee:85:db:79:3b:
9d:34:bf:10:1a:db:21:10:c2:59:82:e1:85:0b:b8:
1b:c4:fc:c8:24:be:e0:85:65:88:d1:d5:8c:94:61:
a0:37:36:d8:bd:8f:93:74:2e:47:88:a0:39:96:9d:
65:98:08:2b:6e:a6:0c:5b:68:72:af:fc:66:9a:58:
8f:61:1f:fb:e4:e3:4e:20:ed:98:20:10:6b:e6:14:
d8:ef:59:13:16:23:04:0d:cd:0f:68:ee:b3:cd:5d:
9b:7d:93:58:aa:47:83:fc:73:bd:79:00:02:b6:78:
13:87:18:1f:c0:99:37:8e:d9:59:99:46:5e:cd:64:
3d:84:06:82:12:ba:b0:68:6a:86:fa:ae:6e:ca:e0:
9b:ad:8b:65:23:c6:ca:24:35:5b:0d:84:26:95:f0:
ed:40:ed:ae:ab:68:95:99:34:67:17:18:17:6c:59:
9d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C8:C0:3E:A9:8E:71:F5:27:0B:0D:8E:96:97:81:A8:72:76:95:B9
X509v3 Authority Key Identifier:
keyid:C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:88:4a:71:e5:a0:47:8e:e0:09:85:c9:24:37:75:bb:71:d9:
19:56:1e:df:2e:37:8f:78:d8:a3:e3:3d:64:5c:b2:86:b7:1f:
d8:fc:b6:c2:b3:19:51:4f:ca:67:d3:b2:35:0e:5d:1a:0c:08:
14:9e:bb:ac:3d:13:33:5a:bb:62:f9:65:29:ef:ff:97:fa:cc:
60:ca:68:bb:4e:29:49:db:20:60:08:2f:28:03:74:c6:45:db:
6b:60:3d:86:38:9f:b6:68:1c:60:89:4d:47:ff:79:f2:60:5a:
50:86:47:ff:d4:5f:31:d9:d0:73:fb:82:af:0f:93:20:56:7d:
08:d9:b9:48:a4:02:b4:4a:ec:36:06:fa:0b:6b:d2:a3:01:b0:
ab:fe:de:7e:e5:c7:41:4d:0d:72:31:1d:5e:2b:67:9a:e7:0f:
64:3f:35:c9:80:c2:77:01:62:25:8b:ab:04:05:81:c2:e8:05:
4f:53:15:af:ba:7e:df:60:33:df:70:57:9b:4d:ea:5c:14:85:
91:31:73:c3:2c:54:de:cb:24:73:4b:e5:7f:50:82:ef:d2:82:
a7:67:ff:79:98:0b:ca:2d:2d:e0:7b:70:9a:ce:2e:34:6b:fb:
98:38:53:f3:89:19:40:f2:c4:40:94:d2:a4:c5:87:b9:3e:2a:
b2:0f:b9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:32:40 2026 by rpki-client