Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: zw7nSH4+/1jskuDQCXbqmrdaimNvKom3C8rfThgZ0SM=
Subject key identifier: CD:C2:70:9A:D8:36:3E:48:23:A2:3A:81:EF:33:23:93:22:62:39:9C
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 01A164214B4F1E2FF659147588E14CD786C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 08B3
Signing time: Thu 22 Oct 2026 15:01:05 +0000
Manifest this update: Thu 22 Oct 2026 15:01:05 +0000
Manifest next update: Fri 23 Oct 2026 15:01:05 +0000
Files and hashes: 1: 1-KmRXcm0EffFQzS72fl1S3DZymg.roa (hash: rN/S5u/23R8Op30IhNEisJnhOq3o+6urpM4nYbYy55k=)
2: 1-p16KxsivgGZD8PXd4e_YHv5IC4.roa (hash: Qyqte6RopFpPPBHjfqe/11Zhs4/QiIF284F5Db6RdbY=)
3: HZjQ8dfa0hWcB-NnpWnYAzaxB-I.roa (hash: LZrOQ/KPSOzENF2jkc9vB3eqHtccVFGCJ8IUIaKPVcQ=)
4: IysZA3MLX2ZvO0KleomY7IPYa0Y.roa (hash: bJ8QUh9i9KG4qjAdJBbyeKXtAo2Wxax62J362DNjcHM=)
5: KVYnG1rasxK0lFwIWs0m90qVCwo.roa (hash: 3EZ/z4Q8VBlWlWq5DaBE242a5qu04Bq4t9H9x0FLAzs=)
6: OpYOp0A5IPKJ7jbcXskpSxQGlaQ.roa (hash: rADmm3meTWoAJpb+yfOPFFjI2xZfTZaGcVmBPuOR9B8=)
7: QlVQHCKLxPDMUT5yzxzLFxcAbhM.roa (hash: z2k4hBGjSObTZ9Cn+8RZ81P7abO/BO6NGKjOJSPjmms=)
8: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: RCnD94ozZK9OSxZWio+LOdV7AFZoePTsECOFi9L6No4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:21:4b:4f:1e:2f:f6:59:14:75:88:e1:4c:d7:86:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Oct 22 15:01:05 2026 GMT
Not After : Oct 23 15:01:05 2026 GMT
Subject: CN=cdc2709ad8363e4823a23a81ef3323932262399c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:b8:33:da:72:54:80:fb:e3:56:21:4a:55:
db:c2:fb:85:7f:2c:75:5d:25:15:2a:45:0e:8a:f6:
39:1f:73:ff:92:03:1d:08:cc:40:41:50:5d:f5:df:
1e:eb:3e:67:14:d1:d0:79:85:08:b7:d4:ac:de:79:
b6:85:83:e9:48:0d:bc:96:ac:e1:4e:7c:6f:a7:da:
9c:f2:a3:23:c0:01:d6:00:5f:c2:7f:9d:c3:89:8e:
16:72:9c:38:21:af:08:94:cd:06:40:72:d1:54:49:
6a:60:c3:f2:46:7c:c5:37:21:11:64:18:b9:88:6d:
93:78:0d:fd:c1:d6:cb:2a:4b:e3:54:c9:86:4e:8d:
47:da:b4:91:77:17:45:d4:ba:4f:10:45:2f:e2:e3:
56:30:89:19:51:52:1f:34:0c:0c:d4:a1:3d:92:fe:
44:cc:d3:c0:66:b5:0c:b2:9f:88:18:92:04:9e:d7:
08:c3:be:3a:f4:37:15:5c:ac:04:fd:14:ef:7b:bd:
e6:ad:2d:43:c1:42:84:27:ca:0e:e2:86:7c:63:8c:
38:6c:ee:ee:46:02:42:92:d8:30:5e:45:ea:d8:2a:
1b:e1:43:c1:38:25:3c:e7:e8:6b:82:c2:82:7d:27:
e6:b0:44:79:34:82:4c:a1:bd:c0:e7:d0:21:0e:61:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C2:70:9A:D8:36:3E:48:23:A2:3A:81:EF:33:23:93:22:62:39:9C
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:19:bc:0f:03:4b:a8:1a:2b:83:37:57:ed:45:e5:d0:53:35:
dd:40:6a:32:b4:d6:56:71:21:0a:b2:e4:33:f4:e8:28:87:b7:
8f:b1:db:15:42:58:f0:cf:8b:05:06:0d:11:16:90:95:8b:e3:
26:34:6e:aa:79:b8:eb:46:7f:97:32:8f:b6:8d:55:8d:3e:b9:
fe:ec:c3:4a:8e:86:69:78:c2:9d:a7:7b:82:da:2c:08:78:5d:
aa:d7:9a:3b:18:6b:31:03:21:10:98:3a:47:58:ce:26:c7:1a:
87:14:e2:ad:f2:02:19:93:57:a4:df:13:46:28:55:58:4a:42:
c6:ba:b5:a7:78:e4:d6:42:7e:b0:b0:74:1f:b2:1d:4c:93:3d:
98:44:0a:0d:58:39:77:0e:71:3c:82:53:0c:c6:30:a3:3d:d0:
d6:cf:91:8a:51:b4:9f:9d:bc:6c:0b:c1:1b:e4:96:dc:51:af:
0e:77:9d:c8:1e:6d:44:6f:ef:1f:f9:1f:44:84:ce:7e:37:d6:
6f:19:17:ce:f9:f1:3d:3c:91:16:b6:62:d5:c1:e0:9e:96:0a:
92:73:b0:6a:92:ad:1d:5f:42:5a:d5:d5:c2:d0:00:da:ba:3c:
34:0c:40:e9:27:2d:4d:a1:35:c0:20:88:52:3c:c8:9a:a1:48:
fa:86:7d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 22:59:34 2026 by rpki-client