Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: Bc9IytnJvVxiRUgbdzVcEDiO8FhNrOZRYe/8kXFZam4=
Subject key identifier: A5:86:1D:F0:AB:32:1C:2A:72:78:D6:6A:63:D1:69:A7:8A:B0:8D:11
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 01A155F7CF32C5CD91456B1E93D6B93F6EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 1AAF
Signing time: Mon 19 Oct 2026 21:01:06 +0000
Manifest this update: Mon 19 Oct 2026 21:01:06 +0000
Manifest next update: Tue 20 Oct 2026 21:01:06 +0000
Files and hashes: 1: 0ZEt5hO5jk8I5B1ric3lV5QOPjY.roa (hash: 2SzUB4ARPZ7+BuiAiToaYolTUFVyZHL4/odctgbUciE=)
2: PX4jRvV2Is0w59EuWq6-Cko1_qM.roa (hash: o5zSrmvOazS6EGtXXnfbpDTf59xV6PS54zdbjnXbBvw=)
3: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: ZBKuP6VuZ3lRM1tO1UGTgzyZ7/Cjn2N/EQKP7emhXbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:f7:cf:32:c5:cd:91:45:6b:1e:93:d6:b9:3f:6e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Oct 19 21:01:06 2026 GMT
Not After : Oct 20 21:01:06 2026 GMT
Subject: CN=a5861df0ab321c2a7278d66a63d169a78ab08d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:b1:49:36:af:1e:e6:17:36:72:6e:83:b2:
06:58:da:07:87:b5:2e:ea:5f:ed:b1:74:18:cf:c6:
50:0b:b2:31:06:64:a7:93:10:ee:5b:76:ae:9f:b1:
a4:c1:04:23:26:b6:67:a4:71:f0:2d:3b:aa:64:85:
9b:b7:57:46:9e:6f:12:81:11:ed:69:c6:20:da:16:
57:f1:35:d4:4d:0e:79:c1:8d:24:86:11:cc:e5:1f:
1d:58:ec:e3:76:f7:8d:3c:a8:3e:db:78:2b:03:41:
5c:85:e6:bf:d8:fb:e7:e5:0c:92:69:9a:e0:8b:c5:
21:e6:4d:86:1f:38:5e:9f:77:5b:29:07:8d:90:fa:
03:74:0e:53:37:ac:b2:a1:ae:0e:7a:7b:4e:62:99:
fd:a4:a9:2c:ad:94:78:b5:40:0a:c0:bd:ad:ca:27:
4e:75:f4:b2:0d:3f:58:2c:03:34:86:c6:4e:7b:d7:
94:64:c6:83:bc:99:30:e3:65:34:27:18:b3:23:4c:
c3:47:92:fb:64:a6:f4:6f:e6:5f:9b:81:56:7a:22:
b5:27:c8:ef:37:7a:06:4a:71:06:db:f2:60:12:4d:
5b:17:3b:b7:06:b7:76:11:b6:c2:62:07:49:df:aa:
4e:79:f6:7f:13:14:d5:e8:2f:f5:22:e9:19:f2:0f:
6f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:86:1D:F0:AB:32:1C:2A:72:78:D6:6A:63:D1:69:A7:8A:B0:8D:11
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:35:a5:9e:c7:fa:7a:74:86:d2:9e:31:c7:b6:dc:ee:05:71:
f5:e6:00:54:21:8a:4a:ed:ea:c9:5a:a4:be:ff:c9:ba:bb:ba:
ad:b5:ed:dc:db:d2:0e:ac:d2:8a:b5:cd:2e:dd:3c:cc:94:a3:
ca:a3:5e:ec:5f:8c:e7:52:01:b4:3b:fa:6b:f0:5f:2c:ee:52:
fd:f9:d6:25:80:b4:e4:7c:4a:8f:e7:ab:48:fe:6b:fa:5b:80:
d0:0a:f7:a4:95:29:cb:ba:0c:a8:c7:b3:fa:3d:b7:9f:85:c5:
a4:99:5d:5e:27:64:fa:3b:2b:82:ed:41:8b:51:3d:62:8f:b7:
49:d5:9d:12:29:ea:6f:60:39:b5:81:65:a8:54:36:bb:2a:58:
af:f1:73:d1:37:c1:2c:f1:82:ba:32:78:f1:2c:21:25:df:d8:
fd:69:6b:e4:a5:10:f3:c8:a7:47:45:03:1d:5c:b9:cb:89:4a:
2c:87:ab:1d:85:1f:a5:2d:06:a3:99:d0:09:63:98:e6:58:71:
e9:cb:2d:46:93:84:08:31:f6:bd:60:f6:b6:e1:e3:af:49:b2:
8f:1e:37:dc:47:39:0f:29:94:59:8f:ac:9f:87:23:28:79:5a:
ae:cf:e1:38:c1:8c:37:ca:83:d9:b5:4b:bb:b6:5a:a1:e9:28:
a5:21:1f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:56:53 2026 by rpki-client