Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
File: XDDZUEYzG9zjAYt__g8T2_n8cY0.mft (raw, json)
Hash identifier: DCu1eE3dRxjz2Uvxt/keUAAuN63OwvPrfdc8OnCIsNg=
Subject key identifier: 91:6C:76:61:9F:81:60:A4:D3:A4:F9:37:A9:22:47:EF:EA:FC:42:47
Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
Certificate issuer: /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Certificate serial: 01A18ED457DA57F3BCD59C19973D88D9B59A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
Manifest number: 1ACD
Signing time: Fri 30 Oct 2026 22:00:43 +0000
Manifest this update: Fri 30 Oct 2026 22:00:43 +0000
Manifest next update: Sat 31 Oct 2026 22:00:43 +0000
Files and hashes: 1: XDDZUEYzG9zjAYt__g8T2_n8cY0.crl (hash: Ms5j18LF/y87W1fc0qyWfIbvR8qhgzLob1pn3cTF1c0=)
2: i7ahmmzCoN5G9N5UQomOHHe69RA.roa (hash: GGCZiPMQLo6nn63tOlWXS7/n5qwIMxP1oeej8rFYFvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:d4:57:da:57:f3:bc:d5:9c:19:97:3d:88:d9:b5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Validity
Not Before: Oct 30 22:00:43 2026 GMT
Not After : Oct 31 22:00:43 2026 GMT
Subject: CN=916c76619f8160a4d3a4f937a92247efeafc4247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:c9:d9:92:80:5b:bb:a0:d3:49:8e:ee:be:
05:52:91:cb:c7:5b:2e:c7:8d:64:0d:0a:8f:b8:6d:
df:3e:06:3c:a1:56:fd:c6:47:14:c2:b3:9d:8a:1d:
c5:7c:79:1a:7a:23:47:a8:4f:51:c4:6a:56:8c:df:
b8:e5:7e:55:13:59:5e:24:7b:3d:9e:ad:f4:e6:f2:
2e:96:77:d4:87:aa:51:a8:14:fd:e2:e9:b6:17:ef:
8a:f8:f5:1b:1b:dd:ac:d2:da:e0:69:5c:77:10:cb:
a9:54:6a:f7:9d:42:8e:2f:3f:85:e0:40:58:10:e1:
74:70:69:12:6c:f6:3f:81:02:83:40:d5:55:f1:cf:
f6:e2:0f:53:a4:de:47:fd:f6:b8:32:a7:1e:74:db:
d1:47:54:f0:ec:1b:ca:21:76:99:56:06:bd:5e:3b:
5c:f8:05:17:fe:ee:4a:34:34:44:4b:21:61:5c:16:
9f:12:e0:34:f6:6b:b0:ad:02:61:5d:be:fd:8e:82:
82:41:c9:2c:bf:35:89:e1:44:37:31:04:3d:76:f9:
87:7a:bc:56:8e:ad:00:09:ef:2d:46:54:66:20:b8:
22:91:12:96:c1:75:ad:bf:4e:71:38:e3:09:71:44:
4b:cb:57:42:95:27:45:eb:12:88:fe:87:9a:7a:1c:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6C:76:61:9F:81:60:A4:D3:A4:F9:37:A9:22:47:EF:EA:FC:42:47
X509v3 Authority Key Identifier:
keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7c:ad:0e:02:e5:82:9d:88:f2:5f:35:ce:64:83:06:7a:2e:
fe:6a:26:f5:2c:70:b8:2c:ba:28:2f:40:ee:37:e6:56:28:2d:
d0:94:dc:ca:71:f2:a3:56:eb:2a:01:84:c1:ce:02:a8:7d:e3:
d9:a8:c3:63:a1:e0:7b:60:16:6b:a3:8a:8d:95:fb:35:86:88:
b3:f5:f7:1d:8d:d3:55:79:ae:96:1f:9c:73:3c:7c:40:95:03:
4e:cc:03:68:08:f4:b3:cb:4d:6a:d5:52:83:d5:86:f7:74:a9:
0e:0e:53:4b:5b:36:4b:d9:69:be:81:39:2d:d5:bd:21:44:61:
fb:be:c5:7f:78:8b:f3:99:b4:52:19:8e:e4:0c:78:1e:c7:f9:
fd:c7:b0:03:5c:7d:89:de:c1:be:6d:95:6b:90:a8:ae:68:82:
d5:eb:ff:c1:7d:6f:4e:83:6f:f8:0d:66:2e:f5:6c:ac:ab:a5:
b8:5f:8d:85:a7:be:be:5f:c9:44:5e:23:65:da:26:73:ba:4a:
b9:08:5e:07:f7:73:38:f1:d7:a7:94:51:55:5e:1f:c4:24:27:
7a:6a:76:7f:98:b9:02:17:2a:f9:3e:03:5a:73:39:95:a6:da:
65:0c:a3:c1:3d:9c:54:9a:7b:34:11:de:54:19:8f:c7:28:6d:
06:ae:4e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:42:38 2026 by rpki-client