Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: hyNBntQF5hxSdbb3PkYVwde38dC/JWaYB3LchhjdPZY=
Subject key identifier: 99:50:F4:B5:34:95:4D:FA:1B:95:FE:14:70:90:90:6A:DC:B7:5C:DC
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 01A159D48057885CD8C29BF91CF0A7FE540A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 1AB1
Signing time: Tue 20 Oct 2026 15:01:00 +0000
Manifest this update: Tue 20 Oct 2026 15:01:00 +0000
Manifest next update: Wed 21 Oct 2026 15:01:00 +0000
Files and hashes: 1: 0ZEt5hO5jk8I5B1ric3lV5QOPjY.roa (hash: 2SzUB4ARPZ7+BuiAiToaYolTUFVyZHL4/odctgbUciE=)
2: PX4jRvV2Is0w59EuWq6-Cko1_qM.roa (hash: o5zSrmvOazS6EGtXXnfbpDTf59xV6PS54zdbjnXbBvw=)
3: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: YKk3xUmd9EU1D0craix1Xz9nna9KQtfbTHwesaZ3KUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:d4:80:57:88:5c:d8:c2:9b:f9:1c:f0:a7:fe:54:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Oct 20 15:01:00 2026 GMT
Not After : Oct 21 15:01:00 2026 GMT
Subject: CN=9950f4b534954dfa1b95fe147090906adcb75cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:69:5e:7d:7f:3d:28:ae:2b:0a:3b:1f:98:e5:
78:bc:50:40:7d:aa:84:76:5b:ba:91:11:d4:b3:a7:
11:82:b2:cf:ef:d7:06:ee:c2:7a:24:2f:88:32:de:
19:25:55:b8:48:cb:6e:1a:6e:6f:aa:9b:0b:ac:3b:
f1:4e:2d:3c:7f:1b:76:58:19:8d:62:d0:47:79:11:
88:4b:43:32:95:ef:dc:9b:7f:f0:29:d9:27:0d:4d:
30:09:4c:28:5b:2b:3d:fb:f4:cc:30:4c:65:c3:52:
22:1c:20:35:98:b2:23:9c:06:24:5a:43:f2:cb:4d:
67:82:32:75:47:12:ae:52:8e:ce:6a:d5:fa:d4:4c:
18:ae:40:2f:b4:9c:74:14:0b:2c:9d:06:96:cc:da:
f6:aa:86:6b:88:90:98:f8:52:d5:52:4c:c6:8b:22:
b9:2e:46:d8:09:3f:ba:0f:ca:60:84:ac:37:9a:e3:
22:3f:aa:bc:00:c1:47:de:40:23:5d:a5:dc:5a:57:
4a:fb:45:4a:16:46:c8:a7:73:b2:18:0d:3d:ac:df:
f7:17:37:ac:be:92:b1:77:40:8c:b0:fd:a3:4d:e3:
27:3d:b0:5c:17:aa:1a:f9:81:d9:18:b5:01:f2:96:
86:f0:58:56:82:b5:fa:54:34:8b:d2:7e:b9:1e:5b:
7f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:50:F4:B5:34:95:4D:FA:1B:95:FE:14:70:90:90:6A:DC:B7:5C:DC
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d8:bc:f5:22:44:fd:20:13:fa:59:a0:d8:56:df:34:1a:5e:
b8:04:3a:db:25:18:83:94:3d:33:cb:83:a6:75:5f:af:9b:06:
4c:d5:d8:56:70:68:af:b8:e3:2e:e7:b9:60:01:8f:83:85:5e:
fc:f6:b9:ac:07:98:1f:fd:f3:88:3c:10:cb:7b:a2:ce:df:77:
d4:df:03:64:89:1f:7e:85:67:ed:69:47:f5:41:3b:24:6e:2b:
b3:8c:11:e2:d4:37:64:85:f7:cf:36:ea:81:08:e4:d5:fe:70:
51:bc:25:0b:ce:54:fc:c8:69:e6:dc:92:84:d6:3d:ff:00:d6:
69:70:3e:95:20:10:50:06:84:19:c0:af:09:44:d7:de:67:d9:
95:54:81:37:7b:61:2d:f9:6a:29:7e:6a:91:e6:70:0b:61:1f:
3d:b6:6b:ea:6e:2f:2c:3e:7c:cb:71:6c:e9:50:4d:39:cf:fb:
74:7f:28:b1:94:10:f7:21:54:43:8b:aa:d6:d6:ce:d1:d4:ca:
15:ff:18:63:d7:58:c1:9e:56:00:25:ee:76:65:fe:06:79:c9:
77:36:e5:19:6f:1f:c3:cb:ce:7d:e0:57:6c:88:6d:ed:6f:37:
62:fb:f4:af:94:4e:08:e9:2a:80:fd:ac:80:15:ea:fa:41:a0:
9b:5e:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 02:28:13 2026 by rpki-client