Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
File: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft (raw, json)
Hash identifier: 2w8piC50T5dK1cKaa5N0pFtqowE+xe7g5c4yctgxJ60=
Subject key identifier: 57:C8:FE:90:E3:5E:D2:BB:2B:EE:6A:E0:54:CE:37:CE:62:F3:BD:89
Authority key identifier: 5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
Certificate issuer: /CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Certificate serial: 01A175F07BE2A159F0C9AE2C736247BA266C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
Manifest number: 02D9
Signing time: Mon 26 Oct 2026 02:00:56 +0000
Manifest this update: Mon 26 Oct 2026 02:00:56 +0000
Manifest next update: Tue 27 Oct 2026 02:00:56 +0000
Files and hashes: 1: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl (hash: A9mEEdKzahPzsxycPVhLYlaC+iaVqWngOFQbnVS5t+0=)
2: sILmqECvPUOwIkOHOOhRTao7v74.roa (hash: llFUAC/mu2lwxUsJ40bzdjW3ddWww0AROSXO714SrqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:f0:7b:e2:a1:59:f0:c9:ae:2c:73:62:47:ba:26:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Validity
Not Before: Oct 26 02:00:56 2026 GMT
Not After : Oct 27 02:00:56 2026 GMT
Subject: CN=57c8fe90e35ed2bb2bee6ae054ce37ce62f3bd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b7:a5:ff:81:9d:a5:3b:d4:14:11:71:fb:11:
2a:cd:c3:7d:74:ce:da:8d:8a:a9:99:c6:01:39:6f:
b5:14:b1:30:c5:01:1d:f6:3d:57:68:e0:c6:f3:c4:
cc:42:f0:81:22:d6:4f:9f:f8:11:55:f1:d0:78:d7:
89:8a:e6:d3:19:8f:66:fe:a9:a7:57:39:c2:91:50:
9a:d9:af:b5:3a:bb:65:83:1c:92:9f:ba:cd:c1:88:
50:42:c6:e4:a9:cc:06:fd:00:26:8f:33:4e:9c:69:
0d:b5:22:17:65:e2:fc:21:a1:4d:0f:15:7f:0e:5f:
39:38:25:62:b4:96:f3:90:87:80:eb:c3:c7:11:ac:
42:c7:3c:26:1d:77:e0:41:51:61:10:e8:38:f6:99:
67:57:4b:05:33:c6:99:e8:ef:d2:42:fa:79:a5:33:
6e:71:2d:65:3a:4c:b5:05:87:c1:ca:50:01:3a:1c:
2f:c3:db:4d:70:6e:8e:81:5a:9a:29:8f:25:58:b0:
77:06:03:5e:a3:a3:04:57:f8:1d:ca:19:49:10:5a:
95:cd:e0:3b:e1:6f:f6:d2:b9:1d:42:db:dd:9b:52:
9f:96:21:4a:26:ff:45:e6:c3:6d:1e:b1:9a:59:61:
e6:6e:3b:d0:13:55:12:f9:1a:09:af:26:a4:a0:1c:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C8:FE:90:E3:5E:D2:BB:2B:EE:6A:E0:54:CE:37:CE:62:F3:BD:89
X509v3 Authority Key Identifier:
keyid:5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:79:ef:69:db:c8:fc:05:ba:c3:e9:f2:f4:bf:2e:51:0f:7f:
d2:b4:19:dd:de:ce:2b:ab:8b:ac:1b:e6:37:be:9b:ab:3d:c1:
01:2f:53:90:af:41:b2:9f:b3:26:14:34:37:84:5b:97:dd:cf:
2e:d9:e9:93:20:18:19:e0:b3:5f:cb:0b:85:86:07:af:4b:a4:
eb:ef:0a:a9:ac:a0:b9:59:94:c3:b9:ea:e2:47:8b:80:47:ea:
f4:f3:98:21:aa:ac:80:56:8a:6a:58:8e:2f:6f:68:5b:ab:9f:
6b:27:f6:67:5c:f3:41:db:77:4a:e8:dd:66:3a:79:26:41:e3:
ca:c9:ea:bb:d4:26:20:f6:6a:35:8b:2f:2e:71:ef:9e:a2:74:
08:6c:3a:3f:09:b5:ff:38:c0:86:ff:9d:ff:7f:c6:f7:40:32:
27:a1:c4:a8:dc:e6:17:6b:9a:d8:f7:84:41:3e:77:8c:f9:57:
ef:3e:86:72:ee:9d:b2:39:31:d0:3d:ca:ef:02:5e:c5:91:d4:
db:81:55:6f:d9:9b:a2:15:b8:68:2c:53:8e:0a:61:ba:7a:63:
41:1f:16:e6:93:c4:17:84:a0:5d:c9:cc:09:1e:d7:62:4c:61:
d1:80:57:59:3f:17:1a:06:f7:4f:fa:85:50:7a:89:37:db:f0:
26:80:b4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:23:13 2026 by rpki-client