Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier: 5kXZ/pxlBDFnfViy4i//N7gJAVRBh/nw9aeZcayjgGY=
Subject key identifier: EB:C7:A9:DE:02:23:73:19:4D:4F:E7:99:07:4F:F0:0D:AA:19:00:2A
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 01A17FCFFA550D35299ABB222DB177D9BAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number: 1AE3
Signing time: Wed 28 Oct 2026 00:01:38 +0000
Manifest this update: Wed 28 Oct 2026 00:01:38 +0000
Manifest next update: Thu 29 Oct 2026 00:01:38 +0000
Files and hashes: 1: vvOgIMkDpg0381NKvOJ6xEsVrhU.roa (hash: Ilfe2d/82ILTFX47xfIYllXXNOO6y9+T+nkxBpSb/2g=)
2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: gNG9GV+zkqwP6JElLof/eTD91Bs6k8HTs4DNoWJK+vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:fa:55:0d:35:29:9a:bb:22:2d:b1:77:d9:ba:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Oct 28 00:01:38 2026 GMT
Not After : Oct 29 00:01:38 2026 GMT
Subject: CN=ebc7a9de022373194d4fe799074ff00daa19002a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:53:2a:9f:fe:1b:8b:39:10:94:a9:ed:06:c3:
10:69:73:20:19:18:22:fa:e5:2b:06:4d:7d:81:d0:
41:97:0b:e5:ad:c5:76:84:07:a5:9e:d7:e9:a9:70:
8a:93:8c:7f:69:79:f6:3a:03:15:86:35:47:3c:30:
3e:41:03:1e:cf:7e:0b:be:94:ef:cc:2b:eb:47:a5:
73:33:51:c6:6c:60:f1:27:cd:cd:78:e4:10:33:11:
b7:fd:bf:46:cf:a2:86:11:15:7f:c3:be:3d:71:ee:
06:db:86:a1:99:a4:de:c3:71:cf:24:80:54:43:54:
9b:fd:41:6c:c1:a0:e9:1e:76:8c:66:7c:0c:2e:08:
b6:5c:a8:fe:54:98:21:17:e6:0d:53:9d:d0:e3:ba:
2a:07:4e:49:82:79:3c:6b:3a:ba:f5:4e:fb:20:53:
b4:58:3b:33:b3:1a:65:fa:b1:d8:f2:ad:d6:0f:7f:
a2:b3:92:72:d7:9e:49:16:21:7f:02:c9:2a:20:f1:
cb:d3:9a:ca:66:72:76:33:f4:aa:1e:dc:01:3d:74:
9c:f9:48:ac:d0:cf:8f:f9:e7:29:61:7f:d6:99:08:
73:46:f9:90:1e:64:f8:17:e5:a8:42:04:4d:33:92:
ac:ac:da:33:0f:7d:b1:bb:6d:14:80:0d:de:16:e2:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C7:A9:DE:02:23:73:19:4D:4F:E7:99:07:4F:F0:0D:AA:19:00:2A
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8b:c6:bc:43:14:4b:3f:ee:1a:d5:26:3c:cc:15:1d:d2:e6:
9d:ea:f1:a1:aa:3c:fc:a1:1f:a1:7b:c7:80:b5:ba:a1:54:70:
99:31:48:19:c6:d0:15:d3:7a:8f:9f:1b:e1:46:62:3c:56:0e:
51:3e:dc:ff:29:12:21:d0:22:6f:b2:b9:88:35:52:08:26:31:
d3:f6:05:8c:89:f1:62:2a:2a:50:14:ba:1d:95:08:14:11:e3:
53:d8:25:37:a5:db:f7:50:45:12:d7:e4:02:38:90:36:8b:56:
6d:dc:cb:50:63:16:0d:e1:3a:1f:fa:78:64:c6:b8:15:0d:3f:
ff:41:bc:2b:a3:bb:e1:74:9c:d0:ab:70:fa:7f:e5:72:aa:e8:
c8:d0:5c:87:a6:3a:76:31:7d:f5:06:50:0f:4b:4b:2e:a6:27:
8a:85:53:bb:01:1f:ff:88:9f:8a:43:24:76:9b:21:41:6b:b1:
a7:16:4b:18:7d:3f:8d:98:87:cf:4b:2a:fb:ba:53:83:8a:d7:
53:c3:3e:27:d5:9f:0d:b1:71:1e:5a:89:2d:94:21:50:29:b4:
09:92:57:11:b0:c4:f8:a8:72:6b:95:88:41:24:0b:1f:b4:a0:
5d:f1:89:b1:cc:d9:45:26:ca:78:99:8c:cf:ba:e1:f7:6a:b8:
c5:00:d2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:42:46 2026 by rpki-client