Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: Aascff9uZXaozQGE+T6Cj72A4MnfAvfWXlwRVHQwVtU=
Subject key identifier: 51:DC:55:06:C2:0D:B1:44:CB:DE:90:5E:46:FB:80:0D:C2:B0:BE:82
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 01A167FD89EEE253D1DC0AA6D1352415B6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 08B5
Signing time: Fri 23 Oct 2026 09:00:31 +0000
Manifest this update: Fri 23 Oct 2026 09:00:31 +0000
Manifest next update: Sat 24 Oct 2026 09:00:31 +0000
Files and hashes: 1: 1-KmRXcm0EffFQzS72fl1S3DZymg.roa (hash: rN/S5u/23R8Op30IhNEisJnhOq3o+6urpM4nYbYy55k=)
2: 1-p16KxsivgGZD8PXd4e_YHv5IC4.roa (hash: Qyqte6RopFpPPBHjfqe/11Zhs4/QiIF284F5Db6RdbY=)
3: HZjQ8dfa0hWcB-NnpWnYAzaxB-I.roa (hash: LZrOQ/KPSOzENF2jkc9vB3eqHtccVFGCJ8IUIaKPVcQ=)
4: IysZA3MLX2ZvO0KleomY7IPYa0Y.roa (hash: bJ8QUh9i9KG4qjAdJBbyeKXtAo2Wxax62J362DNjcHM=)
5: KVYnG1rasxK0lFwIWs0m90qVCwo.roa (hash: 3EZ/z4Q8VBlWlWq5DaBE242a5qu04Bq4t9H9x0FLAzs=)
6: OpYOp0A5IPKJ7jbcXskpSxQGlaQ.roa (hash: rADmm3meTWoAJpb+yfOPFFjI2xZfTZaGcVmBPuOR9B8=)
7: QlVQHCKLxPDMUT5yzxzLFxcAbhM.roa (hash: z2k4hBGjSObTZ9Cn+8RZ81P7abO/BO6NGKjOJSPjmms=)
8: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: dNROl48YsdXRz/gJuEbLg/EthOdEFWmAuJvFgqIJsEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:fd:89:ee:e2:53:d1:dc:0a:a6:d1:35:24:15:b6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Oct 23 09:00:31 2026 GMT
Not After : Oct 24 09:00:31 2026 GMT
Subject: CN=51dc5506c20db144cbde905e46fb800dc2b0be82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:57:95:47:f2:4a:a6:02:2d:29:8a:a6:2c:
7e:57:f1:06:26:39:7d:1f:c3:c1:e1:59:f8:47:b0:
b3:41:80:f5:5b:95:97:6d:79:b2:dc:63:23:d7:4d:
a1:e5:06:e6:02:8e:c2:eb:6c:53:3a:41:c1:43:8f:
11:06:35:96:0a:7e:28:f6:45:da:c8:7f:e1:8b:0e:
6a:02:37:6f:fd:b6:7d:73:67:0d:4b:c1:17:4c:c9:
f5:d9:8d:40:af:1c:27:13:67:82:36:1a:14:5c:55:
69:23:b0:b7:11:ab:22:67:71:d2:b7:b6:c5:d4:61:
f1:06:a9:96:10:81:70:d6:ac:da:e5:41:3d:b2:30:
04:8b:e8:b2:52:84:c3:74:12:5a:21:57:6b:5b:c2:
95:b3:fb:78:a7:32:b0:e4:44:69:a9:64:81:73:91:
11:e0:f3:ff:a1:33:0f:96:69:87:7d:a4:72:3f:ed:
b4:c1:b4:64:92:9f:1c:4f:f0:07:00:0c:21:b5:6d:
a6:b8:fa:be:cc:9b:1f:6e:8b:24:b2:63:a0:2a:df:
7c:fa:5c:82:63:c9:f4:bb:1e:54:a1:9e:18:d8:08:
87:cf:49:d8:c8:be:35:54:f4:50:48:7a:fa:56:78:
28:b9:fe:99:b0:56:6f:ea:fb:8b:4b:5a:6b:55:ab:
4c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DC:55:06:C2:0D:B1:44:CB:DE:90:5E:46:FB:80:0D:C2:B0:BE:82
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c9:bf:a0:f8:2a:c2:fb:a3:fe:c3:aa:3f:99:4d:3e:3d:45:
90:ba:a6:25:b4:27:8e:08:ca:df:34:50:83:7b:47:5e:4a:3d:
22:cb:66:d7:30:f8:25:4a:79:fc:04:ba:52:36:86:a2:67:02:
2f:9e:e4:58:23:d2:78:e4:e6:62:8b:6c:d6:cb:3d:63:ae:de:
42:2e:e8:86:d8:21:e3:69:32:80:01:26:d3:38:8a:7c:7b:ae:
6d:42:77:2f:f1:60:3d:b9:30:61:28:fa:0d:0c:b4:d2:a2:95:
ed:8c:d2:26:1b:98:32:c3:bd:eb:4b:a9:22:1a:f0:a3:32:18:
be:9e:46:0d:8d:96:9f:a9:c3:49:fa:3f:d7:0b:bc:a5:06:c2:
b3:53:5b:f7:f2:af:14:78:6b:6a:33:a7:b8:8a:55:8c:2b:6f:
73:b3:bb:3f:0f:eb:81:f9:f1:8b:8e:d2:8e:67:77:29:75:e4:
45:ca:f2:c7:d9:7b:21:21:06:b8:81:13:5d:5c:7e:fa:ca:9e:
04:ab:52:9d:57:47:f0:6e:bb:0a:6b:84:ab:10:8c:a1:45:ef:
4d:47:e1:6d:6e:b3:8b:be:f8:f9:e6:b8:fb:7f:9b:c4:70:8d:
09:20:00:49:b6:80:79:44:5a:fe:93:f4:e8:ca:ba:f2:a0:17:
54:db:c3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 13:05:07 2026 by rpki-client