Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier: nfhEbwfSLZ1aFJWLCbsu/kdkUa3hKk7ZV3y1s6REIeg=
Subject key identifier: 59:10:53:63:70:26:BB:1A:DD:E3:DF:00:AC:3F:47:37:AF:A7:70:E4
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer: /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial: 01A17694F49FD750AE30434BC60FA432A33B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number: 1A55
Signing time: Mon 26 Oct 2026 05:00:35 +0000
Manifest this update: Mon 26 Oct 2026 05:00:35 +0000
Manifest next update: Tue 27 Oct 2026 05:00:35 +0000
Files and hashes: 1: a3vqBzTeMihaLI7nX3YXTwT9QXM.roa (hash: YtcSgTlR3L7xs2ulbON7vgzLF5ftnMrGCR+z8FjX7OE=)
2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: a/ZtJIFfxUbsbIc6+WYVVvSYAsq7bc9S2Jzx7vhA35w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:94:f4:9f:d7:50:ae:30:43:4b:c6:0f:a4:32:a3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Validity
Not Before: Oct 26 05:00:35 2026 GMT
Not After : Oct 27 05:00:35 2026 GMT
Subject: CN=591053637026bb1adde3df00ac3f4737afa770e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:dc:e3:91:35:25:a6:18:3c:52:ec:b4:aa:
27:04:0c:94:6e:30:a3:38:08:be:af:98:72:b8:54:
22:6d:3e:36:c7:39:35:2b:b4:af:09:63:33:6c:13:
2e:80:5a:f4:3a:6e:4c:83:00:07:ee:af:20:13:38:
e5:49:f1:c6:90:44:f3:eb:c9:22:af:5b:d5:72:34:
9e:f0:68:50:17:79:84:5c:0f:13:ff:50:95:2b:f1:
59:55:82:54:0b:02:a3:e3:c9:70:ac:d2:16:e0:4b:
81:5d:58:e9:5f:7a:90:90:cd:b2:1c:30:94:35:41:
91:db:a0:d9:ac:dd:de:f3:4f:f2:d7:9b:15:b4:40:
38:b8:1f:01:a0:fa:81:96:67:a6:b9:eb:de:28:96:
12:70:35:d4:61:88:64:22:aa:c5:05:0f:57:29:de:
5b:11:0f:aa:5b:6c:4e:47:12:d0:a9:17:80:e9:1a:
88:93:69:38:a2:d9:2b:12:a5:22:da:ff:aa:be:ac:
c3:7f:31:07:74:62:a5:9f:d1:e7:7f:05:b9:9b:f6:
ef:0b:92:2b:1c:b4:bb:96:39:cf:3c:c8:9c:3a:6c:
ff:b0:c4:42:17:b6:f7:18:b4:89:4f:04:3f:fe:c2:
ba:71:26:31:fd:21:84:d9:ee:30:4f:9a:f6:da:0d:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:10:53:63:70:26:BB:1A:DD:E3:DF:00:AC:3F:47:37:AF:A7:70:E4
X509v3 Authority Key Identifier:
keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:24:28:c6:b8:cc:19:45:1d:d4:61:c4:ad:50:43:19:40:fd:
ff:4c:f8:03:63:70:1a:79:5e:53:50:ca:8b:b2:9a:84:21:5b:
de:c6:fd:62:89:8f:a4:77:9a:80:7a:41:23:ea:67:b8:79:19:
26:77:33:53:43:57:dd:b2:17:b7:a4:fa:65:f6:48:a3:e8:05:
d3:66:da:5a:7e:e5:29:f3:34:ab:66:77:e2:bd:48:dd:4d:4a:
c6:b8:cb:af:5d:12:19:1e:8f:bc:be:68:f0:d2:7d:d0:f3:e7:
67:7b:df:ab:e5:b3:7c:44:67:21:17:51:33:ac:07:37:97:e2:
46:57:80:6c:2c:d7:ed:1a:6f:09:6d:d8:36:bc:24:1e:68:60:
44:db:eb:78:59:16:b4:f0:0e:13:e0:5e:e2:fd:fc:33:12:47:
dd:c5:3e:a3:96:28:3f:57:41:34:88:d3:45:e9:09:28:b6:dc:
03:09:85:9b:e9:c0:7e:d4:8c:46:12:f9:cd:84:dc:f3:99:7c:
0e:d9:c6:39:0e:ef:a1:93:39:31:c2:e7:29:5a:4a:d7:34:46:
d2:62:76:19:12:01:bc:2f:92:ed:dd:88:3c:2d:5d:87:39:6a:
4e:14:ef:7e:4a:f1:8e:90:d3:7b:ee:2e:70:d2:7f:5a:40:4e:
eb:6f:5f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:26:52 2026 by rpki-client