Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
File: XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft (raw, json)
Hash identifier: /SuFTzKQYlddZZ4P9frcvk05EwNBxQKXFeXCCUy+bLk=
Subject key identifier: 34:1F:A5:52:E4:76:1A:FD:91:4C:25:32:50:7E:B1:17:0B:19:D2:FA
Authority key identifier: 5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
Certificate issuer: /CN=5e774467e21849524943d2bd459010720f3e20e4
Certificate serial: 01A14E074FBE738BB2023B0E07D8249C8DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
Manifest number: 15BC
Signing time: Sun 18 Oct 2026 08:01:04 +0000
Manifest this update: Sun 18 Oct 2026 08:01:04 +0000
Manifest next update: Mon 19 Oct 2026 08:01:04 +0000
Files and hashes: 1: 46eH9Cj2ZoAvvZOdO1gLEixXty0.roa (hash: nutrSegvu5QxeGV6g/QuVOtrzFyb4Km/JeoI/dWaXRo=)
2: XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl (hash: CcZcmbGWNab3G5AgsU77AHgNWRTLBYW3aULUlD9nYbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:07:4f:be:73:8b:b2:02:3b:0e:07:d8:24:9c:8d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e774467e21849524943d2bd459010720f3e20e4
Validity
Not Before: Oct 18 08:01:04 2026 GMT
Not After : Oct 19 08:01:04 2026 GMT
Subject: CN=341fa552e4761afd914c2532507eb1170b19d2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:63:38:61:54:2a:1c:cd:c6:81:c8:8c:0c:
8e:ab:8a:89:fd:21:70:70:8d:a2:bd:f3:e8:7e:05:
88:74:6d:a4:2d:e6:6a:54:10:0e:48:7c:28:2c:95:
fa:8d:58:5e:3f:93:74:fe:0d:b2:ed:52:00:5b:3b:
1c:36:0c:cf:8b:da:85:04:67:cc:e3:41:2c:0d:ca:
3f:45:6d:1c:ef:10:22:ee:ff:86:5b:92:49:95:cb:
9f:5e:1e:f1:0d:84:e5:d0:0b:77:75:f5:32:ed:34:
d1:c8:57:25:d0:ee:5e:e3:3f:7b:df:af:b3:0f:16:
7f:3e:30:cd:bd:48:75:06:ca:ac:44:80:bd:b3:60:
1c:e9:68:0e:9d:e8:4b:25:42:af:ff:14:e9:ab:a1:
21:b7:72:08:f3:b0:25:bd:c7:a9:5a:36:1b:8d:d4:
6a:3a:42:95:d0:a3:fd:b8:b0:7a:1d:3a:a2:00:c1:
bf:94:b5:a0:f8:0e:ce:3c:97:0b:22:70:60:92:7d:
50:a4:bb:df:8c:ff:60:04:2e:39:12:66:21:cc:30:
7a:d3:60:0f:c4:fc:11:55:7e:dc:5f:04:0b:34:63:
37:f4:2e:90:11:34:34:ee:b5:86:08:75:61:4f:19:
9a:ee:25:57:00:bd:af:9d:6c:a5:ad:b9:29:4f:f2:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1F:A5:52:E4:76:1A:FD:91:4C:25:32:50:7E:B1:17:0B:19:D2:FA
X509v3 Authority Key Identifier:
keyid:5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:55:a0:d2:7d:8f:b1:de:90:59:35:57:fc:ee:f5:c2:fa:7f:
a3:36:35:c1:2d:36:99:c6:ff:1d:11:af:4f:2d:2d:f6:c4:32:
e3:ed:80:4d:09:f5:ee:8b:8a:39:2d:37:71:ef:eb:0c:da:e7:
c8:4e:de:52:34:53:b3:06:8d:ad:71:fd:73:c9:ba:4c:09:45:
ae:b2:bb:ee:26:44:8a:90:d0:1e:d4:a1:3d:95:be:29:1c:61:
8a:f5:3e:7a:8e:bd:21:7c:38:b6:5d:6d:09:8b:87:80:9a:41:
9e:d7:77:bd:68:98:7b:a9:bb:0f:33:b1:85:a1:c6:94:3d:a8:
e6:90:af:81:43:35:b9:6b:58:60:e4:b4:b3:06:d7:0f:ae:9c:
0c:25:ab:13:86:1c:f2:3a:79:65:cf:dc:8e:20:2e:2e:46:ee:
80:ec:e9:8a:42:a0:ae:3d:7a:d8:db:3f:36:29:01:0f:2c:fb:
1a:2d:06:ca:15:7a:3a:d1:66:b5:07:db:d7:6e:e7:3d:bb:22:
1c:99:ca:96:2a:b0:c2:ff:34:8d:81:e6:29:5c:13:c4:0f:8d:
85:08:ab:d5:a1:c3:48:6f:d3:b4:ec:14:e2:00:b1:4d:7d:98:
43:88:cc:42:c7:4f:23:1b:b7:87:89:7a:d4:5b:ce:18:50:9b:
15:84:6e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:05:37 2026 by rpki-client