Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier: pwJr9AM3eEBIh5JwWv8I/peoG2yNiNgYLcjDlMcP650=
Subject key identifier: 0D:52:79:C4:F6:D1:23:95:FC:DE:51:7A:C9:DB:EE:50:DF:9D:06:D0
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 01A17D7362C73CE234DD7A180F3A4463D60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number: 1AE4
Signing time: Tue 27 Oct 2026 13:01:16 +0000
Manifest this update: Tue 27 Oct 2026 13:01:16 +0000
Manifest next update: Wed 28 Oct 2026 13:01:16 +0000
Files and hashes: 1: 1szsUB0VoXuxvDb6acgrvBLYEZY.roa (hash: CAu6oABCOITiB7RP9yG7K6+swFKVut89RRzUhC0wUAY=)
2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: /jbNSBtDjgcpwyr81DC8i3h4ZYxwp0inSQ11HuX3Chc=)
3: Yz6zMQTWF_oPlBis3JkHJwwBpxQ.roa (hash: fw38Poz9RGtWDLhkzBj9EkYC4z3B0EbYl1M6n6QZV4c=)
4: ucieseCn4X1qSKWwEPn_oNVbz1k.roa (hash: LmFDFIu8DGDRUsQfXjI1zzyrnPH0LF4bgVgWF7ntgHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:62:c7:3c:e2:34:dd:7a:18:0f:3a:44:63:d6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: Oct 27 13:01:16 2026 GMT
Not After : Oct 28 13:01:16 2026 GMT
Subject: CN=0d5279c4f6d12395fcde517ac9dbee50df9d06d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c8:c4:85:d3:55:25:27:60:ba:1a:d7:ce:0b:
5b:a1:65:f5:08:ce:d9:97:5b:ad:5f:1e:81:bc:d3:
cf:44:86:b3:4b:4d:2c:42:f4:7c:ec:1d:b5:72:58:
da:02:d3:69:fe:f0:e3:fb:08:5c:5d:2a:3d:23:2f:
81:45:12:05:95:dd:3c:23:0f:5d:66:0e:dc:0a:91:
18:2b:09:97:2e:da:6f:65:40:d6:84:d9:97:2a:53:
a0:84:25:d4:d0:b5:fe:2c:68:c6:88:47:cb:aa:b1:
02:ff:cf:5b:3e:56:54:1c:41:49:57:1c:2f:80:03:
d7:f1:f5:fc:ca:cb:46:e6:52:c3:af:42:37:5b:69:
9a:00:8a:83:5a:02:7c:8b:73:29:f2:f6:a4:2f:63:
ad:4a:9e:b8:ca:dc:1b:40:36:78:f3:ed:f5:b3:84:
25:9a:b2:e5:96:44:72:76:86:f6:bc:7d:c1:52:3f:
3a:f0:41:09:2e:65:61:5e:c5:bf:21:41:16:37:49:
14:ed:b9:46:f1:ad:9d:f8:2a:be:8e:41:ac:2c:ca:
dd:c1:3b:e6:a9:f4:36:70:a7:ff:1b:05:80:9d:80:
c7:86:c4:46:62:10:c0:4b:7f:6d:f6:ef:3b:3b:94:
6f:f1:f2:03:b4:6d:3d:6f:da:ff:ca:95:c8:b6:40:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:52:79:C4:F6:D1:23:95:FC:DE:51:7A:C9:DB:EE:50:DF:9D:06:D0
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a1:51:e9:28:b0:79:aa:2c:80:c6:7c:69:1b:0a:ff:c3:00:
73:29:9d:68:6c:b6:18:15:5d:a4:af:ec:f1:7e:09:c6:18:29:
7e:8d:ed:23:75:e3:98:16:49:8d:b9:fd:9f:d7:f1:79:2f:ea:
05:d1:53:c6:2e:a2:d0:85:54:2e:87:34:44:3a:d9:40:fd:c8:
9e:17:aa:56:e6:29:91:db:d1:30:a4:65:67:42:71:62:a4:0f:
8b:3b:2e:bb:4b:7a:e2:b6:00:89:eb:f7:f9:18:45:c9:69:35:
d8:9c:f2:51:44:f1:19:89:a1:56:1a:d9:1b:c8:08:1f:b3:86:
0e:1d:0e:dc:3e:25:22:71:10:6b:f1:d5:48:93:17:9c:06:7b:
0f:74:f4:2d:f7:cd:64:5a:e4:10:04:4b:8c:13:53:1f:91:7c:
63:ce:a3:b0:15:13:3b:cb:1e:a0:4c:ac:bb:d8:1b:05:8e:03:
a5:15:c0:bd:0e:36:a0:90:cf:6c:bd:fa:97:ab:74:39:53:ec:
3b:c1:d3:e7:4e:a4:7c:2b:58:13:45:91:d5:e3:2c:79:c8:9f:
38:69:04:c6:3c:16:21:a4:43:c5:93:1e:dc:06:5a:97:ef:0d:
a0:af:6e:7f:91:b5:f7:be:fe:35:c2:bf:18:c2:b7:aa:7f:27:
3d:49:0d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:44:37 2026 by rpki-client