Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier: w9iRJQ684cx6yhwuHopEEEi9qz6sIxYH4pKb+W42UxE=
Subject key identifier: E4:31:8E:A2:F4:29:FB:F5:E1:B2:C3:61:6F:7A:39:0A:BD:6B:8D:BA
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 01A178161D08832B95DDD13ED3C921FFA32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number: 16FE
Signing time: Mon 26 Oct 2026 12:01:17 +0000
Manifest this update: Mon 26 Oct 2026 12:01:17 +0000
Manifest next update: Tue 27 Oct 2026 12:01:17 +0000
Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: 2NaEg+TXLzxR0E8y57SRE+3XUtosMbtLhTMX5ieCwMs=)
2: fDzIkCC4HQZF8d8gvy277WuuRYM.roa (hash: TzMFdxwnyUIL4oJ9MUVrNEjKX81ekLEZoq92hFxo3V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:16:1d:08:83:2b:95:dd:d1:3e:d3:c9:21:ff:a3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: Oct 26 12:01:17 2026 GMT
Not After : Oct 27 12:01:17 2026 GMT
Subject: CN=e4318ea2f429fbf5e1b2c3616f7a390abd6b8dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dc:a9:4e:e3:63:1d:39:80:ef:e2:ca:81:01:
b5:7c:09:a6:bb:66:26:31:61:4c:95:dc:64:dc:8f:
ab:ff:19:ab:12:10:68:f6:ca:b3:8b:2a:f9:f1:61:
4e:b7:12:eb:60:78:9a:32:24:4d:a3:1e:39:bf:4f:
37:d8:50:e5:46:69:8a:13:cb:42:de:e1:1d:c5:11:
ea:28:86:de:b8:57:80:01:54:5e:1e:da:e0:92:c8:
89:53:fd:4d:ba:35:fd:8f:e7:91:9c:cb:12:45:e2:
47:86:b6:90:87:bd:1a:90:2b:b9:2d:65:94:86:ab:
f5:d9:66:e5:37:2d:e8:d3:82:c5:51:a1:2c:6c:c5:
68:9f:ec:66:8f:06:71:31:8e:b7:83:1e:06:21:41:
3b:ab:a1:aa:e1:0a:cc:04:75:dd:21:6d:ee:c1:39:
03:43:39:23:ad:f7:8f:1d:41:f9:2d:30:ad:f6:07:
cf:46:c0:96:2b:08:79:be:06:91:28:58:d7:bc:3c:
a5:b3:4a:ea:c8:62:42:f9:3d:d7:0d:49:db:09:2d:
3d:c1:9a:37:47:36:93:a0:a5:6a:b7:7f:b6:e5:30:
8d:fd:74:b0:d6:b8:e5:d3:6c:65:dd:15:67:50:bb:
ac:29:30:39:51:75:5d:a5:57:3f:8c:51:29:65:2d:
ab:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:31:8E:A2:F4:29:FB:F5:E1:B2:C3:61:6F:7A:39:0A:BD:6B:8D:BA
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:74:bd:49:c4:3c:c0:b1:cb:a5:d2:28:57:73:f8:96:68:ab:
91:9b:ac:56:21:f0:9d:9a:0e:ec:c6:67:a1:3c:ba:ec:07:a5:
db:c4:6e:10:d1:c5:72:a0:75:0a:b4:c4:bb:f2:b5:30:70:f9:
cb:e6:07:61:a7:80:e1:c3:02:d7:8a:c4:57:9c:cc:aa:37:d4:
30:5b:b3:91:63:f8:79:b1:c5:aa:ef:d9:74:c1:79:75:9c:75:
72:6c:de:09:d1:35:2c:a2:eb:e9:e1:8c:f4:01:21:54:a4:37:
25:44:ce:ca:2c:57:08:99:b4:b4:fd:23:7a:47:40:79:36:32:
ac:16:a8:75:f9:0d:2f:b1:73:6b:df:b1:b7:84:da:12:c9:3b:
12:f8:a7:32:88:92:c5:4a:8a:c6:67:9d:a8:1c:d3:8d:e3:fb:
06:44:0e:ed:78:85:1c:f2:35:dc:b7:68:fe:00:49:22:ff:b4:
75:34:f8:0c:2b:04:36:7a:29:be:25:3f:e9:e7:8e:3e:3e:3d:
96:14:3d:2b:e5:c4:d0:1d:49:4a:29:86:c2:6d:46:cb:9f:43:
0d:6b:ad:71:66:ed:b0:d5:75:42:2f:b9:c2:e5:4a:19:b4:3d:
91:ea:11:5d:56:f7:d3:c2:ae:85:e0:a6:b2:18:71:fa:b5:f2:
5f:85:e7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:31:25 2026 by rpki-client