Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: Gz6O1GUBXi7CribxL1rRs8DDakWEcC6I4lj1HM3teYA=
Subject key identifier: 7B:13:17:D7:4D:7A:C4:20:9F:0D:C9:C3:78:FC:59:19:A9:5C:07:0F
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 01A17BF283A0158B2F8EE2F1493CB6901E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 1AC3
Signing time: Tue 27 Oct 2026 06:00:53 +0000
Manifest this update: Tue 27 Oct 2026 06:00:53 +0000
Manifest next update: Wed 28 Oct 2026 06:00:53 +0000
Files and hashes: 1: Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa (hash: Ykk34DqNXHApsE9nxxAgQ38pONoyVUESYWMP39kBFzk=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: ObELA3jchBvzNQCP6USav1emBUjLDqp61sjnHF2Yl9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:83:a0:15:8b:2f:8e:e2:f1:49:3c:b6:90:1e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Oct 27 06:00:53 2026 GMT
Not After : Oct 28 06:00:53 2026 GMT
Subject: CN=7b1317d74d7ac4209f0dc9c378fc5919a95c070f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:35:83:ee:24:b0:5c:0a:7f:22:e6:3b:ff:
d6:13:10:73:b0:50:34:ad:b6:73:45:4c:a4:c4:0a:
5c:4c:d5:90:0f:0b:cc:6a:5c:96:f6:5a:1f:b6:64:
d4:29:bd:ba:e2:b1:ee:f7:64:7f:d1:da:2b:83:d1:
f3:43:4e:55:81:23:f5:25:03:c9:61:6f:9d:f2:46:
1e:0e:46:cd:fc:a5:15:90:7e:4c:0a:0c:6f:44:8e:
66:5f:85:e1:9a:07:79:e2:4e:9c:67:f2:a0:09:42:
f7:fe:ab:68:59:4d:54:ef:98:33:9d:6e:29:f1:cb:
cf:9a:a1:0c:2d:1b:ae:24:45:4d:8d:04:ac:22:15:
84:9a:b7:e9:27:4d:ec:2d:59:8a:c5:fb:49:d4:6d:
e7:12:a8:54:d7:72:e1:ca:a2:53:db:6f:cd:a8:b9:
1e:9d:43:d9:10:cc:a0:dc:47:fa:3c:b8:ec:21:d3:
8e:00:fa:75:8e:46:22:1e:9a:72:21:4d:86:ba:e5:
cc:b3:76:d8:59:eb:d8:51:24:2e:d4:72:92:d4:57:
e0:79:da:3d:fb:e8:fe:00:b5:31:a6:2e:be:15:81:
9b:1a:0b:9f:d6:4d:01:fd:af:be:e3:38:35:41:8c:
07:4d:4e:ab:67:ba:6e:6f:68:95:15:07:c9:3d:91:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:13:17:D7:4D:7A:C4:20:9F:0D:C9:C3:78:FC:59:19:A9:5C:07:0F
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:53:80:1d:25:b2:31:1f:bd:59:32:bd:17:ef:16:26:46:a6:
38:1f:66:75:af:78:61:1e:21:5a:f2:2b:d4:a6:14:1b:aa:d6:
32:2e:3b:c0:6f:71:c3:4b:49:e8:1a:e5:10:cb:1e:94:93:59:
5f:a1:e1:29:a5:17:ec:e4:17:45:8a:8a:aa:38:56:3d:c5:23:
af:1c:4c:b5:26:b7:fb:95:6f:6e:1a:3b:2e:e6:6a:a9:d8:e1:
b7:91:1f:3a:ba:7d:a1:fa:a0:b5:98:93:2e:59:c5:7b:3b:ac:
3c:30:a0:c5:c7:10:e2:83:70:4b:b2:b1:18:ad:2e:d4:73:31:
e3:f9:dc:97:da:ed:69:1c:57:35:1e:8c:02:89:0d:56:48:9b:
98:99:73:e4:bf:c9:91:cb:b2:8d:0f:5f:5f:23:71:7d:0c:6f:
f2:d8:73:c4:67:de:d0:f7:22:3c:81:48:35:7f:a2:98:64:f6:
4e:e7:25:c0:4c:4a:8e:52:8c:56:d1:fa:45:f5:d2:8d:3c:8f:
73:68:a6:13:47:98:08:e7:f4:52:4d:e3:e9:3f:62:96:13:01:
61:78:51:5b:7b:01:23:39:16:e2:ad:b8:d9:5d:23:8b:1e:b0:
6e:4f:4b:a1:27:bb:b7:19:6f:29:4b:05:0c:53:e9:f5:0a:2a:
d6:95:d1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:13:30 2026 by rpki-client