Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.mft
File: Xx0htjXMvXDmTKZR9atINcrjufk.mft (raw, json)
Hash identifier: Mci2gEKqr571qgHG0eShofAOr9In4+8ZDb2645X8ZVc=
Subject key identifier: F4:95:EC:5A:2F:6B:C7:49:A8:76:E2:9C:B7:CE:79:97:2B:23:90:B8
Authority key identifier: 5F:1D:21:B6:35:CC:BD:70:E6:4C:A6:51:F5:AB:48:35:CA:E3:B9:F9
Certificate issuer: /CN=5f1d21b635ccbd70e64ca651f5ab4835cae3b9f9
Certificate serial: 01A17D3C7E273835E50A2A965207A7CF33C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx0htjXMvXDmTKZR9atINcrjufk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.mft
Manifest number: DD
Signing time: Tue 27 Oct 2026 12:01:18 +0000
Manifest this update: Tue 27 Oct 2026 12:01:18 +0000
Manifest next update: Wed 28 Oct 2026 12:01:18 +0000
Files and hashes: 1: 7bWbVotUtv52xOiDEME3dz5_e98.roa (hash: sHchAOAFmNObQRTRvZeViPzc8t8WH0mwLDZ2MCC81Ag=)
2: Xx0htjXMvXDmTKZR9atINcrjufk.crl (hash: 499Huig0trii5bH/UoJzyGHZhTpfotqgPWyKrLE0lvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx0htjXMvXDmTKZR9atINcrjufk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:7e:27:38:35:e5:0a:2a:96:52:07:a7:cf:33:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1d21b635ccbd70e64ca651f5ab4835cae3b9f9
Validity
Not Before: Oct 27 12:01:18 2026 GMT
Not After : Oct 28 12:01:18 2026 GMT
Subject: CN=f495ec5a2f6bc749a876e29cb7ce79972b2390b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:7d:01:79:f8:7f:1c:07:12:6d:4d:01:b9:
33:f8:99:95:9c:cf:75:ff:55:b7:6d:b3:8c:bb:82:
4f:09:e9:c9:c4:ad:f4:b1:94:2d:16:19:38:40:82:
ea:1a:4e:8e:90:7a:64:08:cf:4e:77:70:fc:64:0c:
2e:7a:56:0d:3a:37:82:da:1a:ae:44:8f:69:47:80:
a9:95:d5:7f:a5:3c:ab:7f:ca:e5:8a:81:89:af:ff:
49:ec:10:3b:0f:e7:d1:66:55:12:6b:72:52:65:d9:
0a:20:12:87:a8:79:80:ed:1f:d1:d8:80:31:58:d6:
ab:f1:3a:9d:6c:11:49:b9:c8:60:33:66:18:89:a8:
94:85:5e:29:fd:a3:be:a4:91:cb:66:1e:fc:2f:fc:
fc:5b:15:3b:71:4e:75:10:53:fe:7b:93:e7:95:2a:
97:0e:70:f2:32:14:01:a9:f9:b3:71:4f:08:7f:46:
c9:35:d0:26:58:3f:12:d4:8e:a3:aa:57:bb:78:a6:
23:1c:50:ea:6c:52:f3:71:cc:03:42:b0:53:ff:e8:
3c:16:2e:fc:67:28:60:11:ea:a4:9e:f6:3e:01:db:
d3:d9:7e:a8:2b:aa:bb:32:a6:8e:28:4a:0d:63:dd:
65:9e:70:6e:19:71:22:50:0f:30:0a:d5:45:04:65:
a0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:95:EC:5A:2F:6B:C7:49:A8:76:E2:9C:B7:CE:79:97:2B:23:90:B8
X509v3 Authority Key Identifier:
keyid:5F:1D:21:B6:35:CC:BD:70:E6:4C:A6:51:F5:AB:48:35:CA:E3:B9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx0htjXMvXDmTKZR9atINcrjufk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b0:af:c2:6a:0a:79:fb:d8:36:5c:ca:e5:cf:87:b2:08:2d:
ec:73:2e:2c:7b:a9:3f:db:cd:d3:ab:8c:9d:f6:80:f3:f4:68:
9d:43:ca:38:1d:03:18:1c:95:e9:33:cd:55:5c:91:72:f0:9a:
d1:dc:ad:6c:cf:9f:91:20:30:7f:5e:7d:24:94:8d:f8:65:0e:
12:46:6d:52:fc:02:ab:7a:78:b7:de:92:41:0e:54:e7:7c:0a:
41:94:72:58:53:5e:d6:e3:08:a1:ae:24:21:7a:bd:98:1f:22:
df:71:96:9e:16:48:58:2a:d9:76:66:b5:27:ee:e3:90:e0:3a:
7d:a5:62:79:1f:21:9d:82:e1:56:6a:fd:73:85:f2:b3:ae:27:
45:f1:cb:4a:17:d6:e8:fc:e7:ad:9a:fa:b0:7a:df:f4:c7:5b:
e9:e7:91:cf:74:d6:a1:ea:25:6f:21:81:cc:b1:84:27:ae:b0:
0a:f1:45:46:e7:4c:13:fb:fa:89:07:a3:30:2c:98:15:11:56:
e4:53:1b:95:04:65:9a:35:89:ae:07:1c:7c:53:cb:bd:44:e8:
73:22:40:29:10:18:93:21:48:ab:cf:b1:dc:32:26:4c:bd:b4:
8b:00:fd:9f:b2:b1:09:d7:9e:7e:23:ff:7b:da:f4:e1:10:17:
7a:23:b3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:59:52 2026 by rpki-client