Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: BNNHYUxLNWIl5F+4jxFkMyUg+oGaj9SruF4nDRtdcLA=
Subject key identifier: 8B:9C:26:E7:B9:F0:74:F5:C6:62:F4:49:9E:B3:CF:C0:52:81:0F:90
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 01A178152A9558D18A362EB78260A99F9A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 1AC1
Signing time: Mon 26 Oct 2026 12:00:15 +0000
Manifest this update: Mon 26 Oct 2026 12:00:15 +0000
Manifest next update: Tue 27 Oct 2026 12:00:15 +0000
Files and hashes: 1: Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa (hash: Ykk34DqNXHApsE9nxxAgQ38pONoyVUESYWMP39kBFzk=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: evTEXqFLRGZd/Smt8vTwfu1nRrzFhCQPFuhfgI88E+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:15:2a:95:58:d1:8a:36:2e:b7:82:60:a9:9f:9a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Oct 26 12:00:15 2026 GMT
Not After : Oct 27 12:00:15 2026 GMT
Subject: CN=8b9c26e7b9f074f5c662f4499eb3cfc052810f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:ab:00:77:fb:33:07:59:33:42:2d:71:d7:
08:83:dd:ac:66:51:87:9d:70:ac:de:59:f2:54:ef:
b8:bd:1f:ae:4c:a2:cf:55:47:7e:9f:c3:d5:8b:5c:
d3:c9:e2:3a:af:1a:09:82:18:92:a5:5e:28:df:c6:
a2:6a:a5:66:c1:28:23:ec:d8:6f:f3:31:53:6b:37:
a5:5e:01:de:cf:8e:4c:d7:82:3b:08:c6:ae:f3:a2:
3b:13:08:92:de:36:b4:bb:32:91:4e:c2:03:b2:f7:
7c:7b:55:1c:24:3a:b8:9c:f9:60:82:89:ce:98:a5:
2d:97:70:c7:f6:f4:12:16:c8:76:54:88:2c:cd:e2:
d1:cc:af:6e:24:70:2a:58:4e:9c:d2:1f:f6:2c:72:
48:26:6d:3a:18:a7:c5:8f:1c:79:c6:38:a7:e6:71:
80:6c:ef:38:02:37:bb:a2:47:cb:cd:11:c2:86:d4:
6b:bb:3e:82:fb:64:02:73:09:ce:e1:5d:d1:e1:b0:
d6:5e:3d:13:83:27:48:f5:d9:e8:f1:29:25:0e:a7:
fa:7f:c0:c5:39:63:d1:4e:a4:a4:68:12:5d:85:cf:
6c:32:10:be:1b:9c:2d:f6:cd:ff:47:cd:8f:6d:90:
89:b0:9f:48:b0:14:9d:ef:25:b8:69:0e:7d:02:5e:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9C:26:E7:B9:F0:74:F5:C6:62:F4:49:9E:B3:CF:C0:52:81:0F:90
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b9:a1:74:c2:e7:b8:1a:e1:ad:dd:7a:25:ed:9e:77:99:07:
0e:13:54:b3:83:8a:50:ce:44:06:ff:3a:2c:13:ee:d3:34:28:
b2:e9:35:2c:de:ed:7d:7c:94:bc:6b:6e:11:9a:0e:30:e8:16:
9e:81:ed:fd:c7:5d:cc:e7:ec:f9:60:aa:fa:bf:48:c4:16:61:
1c:17:31:3b:b1:fe:79:df:97:cb:a0:01:a2:3c:c3:0c:f5:9d:
f3:84:36:87:94:75:0a:80:e1:bf:89:ba:05:bb:e1:21:77:5c:
27:47:ff:cd:2e:d3:6a:d8:be:e9:a3:5d:73:47:38:d2:c5:37:
df:08:b5:6e:d9:e4:da:d5:1d:04:70:1e:a9:d1:d3:8a:ad:9b:
11:5d:dc:53:7a:cf:5a:58:19:14:0e:86:f2:44:69:8a:5f:a6:
8a:71:e8:10:9a:c3:a1:16:8a:f0:28:13:55:ac:71:51:4e:ce:
98:12:6d:ab:3c:74:bd:04:2e:78:b0:03:a7:c6:77:f5:97:52:
ef:68:15:ed:e7:e0:d5:77:8e:5e:7a:e1:ca:83:f5:05:c1:ab:
54:4e:c4:68:bb:d5:4c:9a:36:0c:2f:f6:50:8b:0b:06:59:42:
09:cd:26:17:b7:97:a7:e9:ee:07:37:5a:c8:b5:7f:89:a2:63:
fc:2c:35:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:52:42 2026 by rpki-client