Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/48b327-737d-4928-bb0c-186682b8f8df/1/xTlPscJYAPoJAFZMEiYtsev1Hbg.mft
File: xTlPscJYAPoJAFZMEiYtsev1Hbg.mft (raw, json)
Hash identifier: 8bh70fknLlbcQxnqGjrdGBO0yj5Q4LzpOD8Zuf/6KjI=
Subject key identifier: AC:92:FF:66:49:3C:63:4D:21:F7:FB:2C:49:C9:1D:FA:1C:7F:09:02
Authority key identifier: C5:39:4F:B1:C2:58:00:FA:09:00:56:4C:12:26:2D:B1:EB:F5:1D:B8
Certificate issuer: /CN=c5394fb1c25800fa0900564c12262db1ebf51db8
Certificate serial: 01A17995E5E49A77951FF720B035E8DEB5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTlPscJYAPoJAFZMEiYtsev1Hbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/48b327-737d-4928-bb0c-186682b8f8df/1/xTlPscJYAPoJAFZMEiYtsev1Hbg.mft
Manifest number: 5E
Signing time: Mon 26 Oct 2026 19:00:29 +0000
Manifest this update: Mon 26 Oct 2026 19:00:29 +0000
Manifest next update: Tue 27 Oct 2026 19:00:29 +0000
Files and hashes: 1: 05ay0Ql2sWgkpZO24KFDNpytuz4.roa (hash: D4ibNFALvaaxjHjP16CsY2hQz9JBAyuJZhQaFzc0WWw=)
2: xTlPscJYAPoJAFZMEiYtsev1Hbg.crl (hash: r8oYGEb7a+mfjWXAup+psda967G2kK8VaMQo6k0fujI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/48b327-737d-4928-bb0c-186682b8f8df/1/xTlPscJYAPoJAFZMEiYtsev1Hbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/48b327-737d-4928-bb0c-186682b8f8df/1/xTlPscJYAPoJAFZMEiYtsev1Hbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTlPscJYAPoJAFZMEiYtsev1Hbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:95:e5:e4:9a:77:95:1f:f7:20:b0:35:e8:de:b5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5394fb1c25800fa0900564c12262db1ebf51db8
Validity
Not Before: Oct 26 19:00:29 2026 GMT
Not After : Oct 27 19:00:29 2026 GMT
Subject: CN=ac92ff66493c634d21f7fb2c49c91dfa1c7f0902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:40:54:6f:3e:61:63:51:05:77:35:5b:b4:
0a:85:85:6c:40:c6:12:b3:e1:a6:4a:a9:53:5a:64:
16:d2:75:da:72:51:d9:07:7b:f7:ed:1c:97:ff:ea:
39:0a:53:5b:38:15:fe:f9:42:fa:f1:56:b6:50:d4:
57:b2:a9:49:90:d3:89:1f:6b:8d:77:94:7b:33:3e:
27:94:b7:8b:09:6f:31:4b:c8:67:fa:70:ba:9b:02:
3a:7b:ab:de:f1:ca:63:50:04:e4:79:f0:bb:8d:9b:
6a:da:b5:8a:a3:ab:a7:39:25:74:70:79:ca:04:59:
4e:1b:2c:87:fc:07:cc:d1:95:17:b5:85:51:91:cb:
1d:1f:51:63:d6:f7:87:64:b9:d6:1b:28:02:41:62:
d6:2b:97:82:2b:21:07:59:9d:fd:80:70:62:7f:cb:
e2:12:4e:9c:31:5c:c5:8a:b3:90:71:69:65:10:93:
3c:8e:fb:55:5e:ad:46:f6:1d:16:b4:c1:da:cd:fa:
6d:61:cc:b4:c7:9f:03:6b:21:13:46:55:ad:ab:cd:
8c:e1:00:69:26:4f:69:1f:50:0d:43:fd:2c:c0:ff:
d3:e5:6e:99:11:6d:0c:06:4d:1d:30:1f:8c:2a:a8:
88:ea:0a:a6:ce:8c:80:74:95:f8:09:aa:bb:56:ba:
91:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:92:FF:66:49:3C:63:4D:21:F7:FB:2C:49:C9:1D:FA:1C:7F:09:02
X509v3 Authority Key Identifier:
keyid:C5:39:4F:B1:C2:58:00:FA:09:00:56:4C:12:26:2D:B1:EB:F5:1D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTlPscJYAPoJAFZMEiYtsev1Hbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48b327-737d-4928-bb0c-186682b8f8df/1/xTlPscJYAPoJAFZMEiYtsev1Hbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48b327-737d-4928-bb0c-186682b8f8df/1/xTlPscJYAPoJAFZMEiYtsev1Hbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e5:e8:ee:52:4f:eb:54:28:02:9a:98:a0:be:1a:c5:10:55:
e4:c2:70:4d:a4:9d:0f:02:db:68:fc:24:7a:d2:d8:1f:81:d2:
38:a6:e9:7b:03:c5:1d:8c:5c:a3:87:cf:87:fe:82:c5:4c:d3:
51:cd:c5:3b:67:b5:c7:42:a5:1d:94:11:77:ef:50:73:e8:3d:
65:ae:89:83:bc:7d:74:23:90:54:4c:54:f0:ec:db:c9:28:15:
e9:4b:e0:88:11:f1:42:28:ff:d9:f1:b1:03:28:f3:c6:dd:f5:
18:e9:83:26:7e:97:9d:9d:0e:37:65:ca:7a:79:7c:dd:85:4d:
9e:86:50:5a:13:a1:4c:0e:c5:d7:24:c7:64:e9:87:bb:d7:e0:
0e:96:77:28:b4:84:71:ab:87:cd:ce:56:21:51:e6:6f:74:88:
9c:db:70:61:7c:55:8d:8a:70:13:35:6e:a7:51:d5:3a:b8:a1:
14:b2:08:33:40:9e:69:0c:03:34:d9:b6:0d:42:99:66:14:17:
30:f3:03:51:bc:79:dd:34:49:8c:89:15:36:87:98:0e:77:24:
ea:78:46:a8:6d:d9:7e:ef:f4:cf:85:01:14:be:66:dd:a5:97:
1d:55:71:49:d9:3c:59:ff:87:2c:4f:a6:f4:65:a6:fb:2c:94:
3c:32:3a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:00:24 2026 by rpki-client