Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
File: XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft (raw, json)
Hash identifier: WQAfAYEYOwlW64aGhCl4csckgatXrQR684W3k9EPW4k=
Subject key identifier: 7E:18:6E:94:BD:65:B3:75:0D:C5:2A:2C:26:25:16:D3:9F:E8:9D:18
Authority key identifier: 5C:14:65:0A:6F:9E:C8:C3:85:70:B1:BC:49:97:58:65:86:8A:DE:E0
Certificate issuer: /CN=5c14650a6f9ec8c38570b1bc49975865868adee0
Certificate serial: 01A12C8DBF3688E88287798D205B49388F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
Manifest number: 0115
Signing time: Sun 11 Oct 2026 20:00:49 +0000
Manifest this update: Sun 11 Oct 2026 20:00:49 +0000
Manifest next update: Mon 12 Oct 2026 20:00:49 +0000
Files and hashes: 1: 04Jned94Tm4i1zjB6zNQbqDkj_E.roa (hash: SONtOeyZ10Os/7J4wXL7zFzVJyuJnftLszlFQu+LaN8=)
2: DkfBHadjV5hCivz6mN22vFIwsKo.roa (hash: M3npshua+IYUg+jl7d/CJO6XhinOhlUvR9sQkjh5CFk=)
3: XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl (hash: kVg2dim1XovL6WE8DPQuFJrTpnf9tC5xF4m65Z7YEcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:8d:bf:36:88:e8:82:87:79:8d:20:5b:49:38:8f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c14650a6f9ec8c38570b1bc49975865868adee0
Validity
Not Before: Oct 11 20:00:49 2026 GMT
Not After : Oct 12 20:00:49 2026 GMT
Subject: CN=7e186e94bd65b3750dc52a2c262516d39fe89d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7d:44:e3:54:a7:9f:35:15:81:e1:76:4e:d4:
d6:44:21:19:1a:0b:56:ed:45:9b:68:d0:77:82:f3:
3d:30:37:11:f9:74:6a:a4:c2:1e:e5:bc:1d:18:33:
06:f5:0b:28:c4:b2:98:43:39:bb:00:c7:c9:a6:3f:
df:a9:11:c5:b7:50:ce:fc:45:22:54:20:36:85:69:
46:8a:4f:d8:0d:6f:d0:90:12:f0:49:b3:26:2f:63:
6e:ff:c9:f3:2d:70:97:0f:99:6d:69:42:01:d0:a3:
dd:90:2c:09:a0:38:a4:2e:e4:64:b4:7f:64:80:3e:
08:1e:90:18:de:54:86:be:ee:10:aa:66:ee:f8:a5:
ca:7a:44:86:11:0b:d0:34:01:bb:e7:59:6a:f0:5d:
ce:32:b5:dc:c7:29:df:67:0e:1f:79:ec:5b:a1:5f:
b6:aa:89:3d:33:6e:60:4c:74:a5:ba:5e:7c:d8:66:
7b:2e:1c:30:f8:38:10:9c:c7:51:61:36:f2:56:ff:
dd:0b:90:53:9c:40:2e:2e:a3:5a:31:c0:e3:85:cc:
3e:a0:16:dd:67:4d:f5:59:b5:47:96:cd:37:7a:c4:
4d:65:32:83:ee:08:d8:e7:93:d6:2f:26:1f:5d:12:
dd:d9:82:06:f5:29:13:ca:61:b9:06:4b:04:05:8c:
27:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:18:6E:94:BD:65:B3:75:0D:C5:2A:2C:26:25:16:D3:9F:E8:9D:18
X509v3 Authority Key Identifier:
keyid:5C:14:65:0A:6F:9E:C8:C3:85:70:B1:BC:49:97:58:65:86:8A:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ba:a2:79:75:a6:5a:d7:0b:c5:91:46:99:98:a2:68:ae:27:
a3:77:d6:23:79:51:83:0a:00:5c:5e:2b:91:56:2e:46:1a:76:
41:ba:88:32:38:19:bc:df:83:e6:ff:5e:53:69:97:35:88:d8:
42:da:69:c0:43:1d:b7:30:eb:c3:9b:15:cd:61:76:e1:95:93:
66:73:dc:11:b5:da:b7:23:e2:ad:0f:b7:fa:00:92:71:a8:31:
61:c3:24:fa:7b:67:db:27:64:4a:85:e2:4b:6d:88:48:55:f1:
41:2f:4f:8b:ad:e2:f0:61:18:63:b0:9f:26:9c:f0:65:72:d3:
05:1e:71:73:4c:5a:e5:0e:94:91:24:d2:85:c5:f3:61:6a:04:
a4:6f:7e:8b:94:a3:50:af:da:48:ec:ba:fc:bf:de:00:e1:a9:
ef:bc:33:50:97:5d:d9:50:50:9f:85:af:b9:fb:58:c2:67:ca:
5e:98:9b:05:d2:11:46:21:52:59:8d:6f:cc:b3:df:d5:db:dc:
58:15:d9:70:62:3c:db:c9:f5:11:5b:44:c3:9f:ab:f1:a5:c7:
30:fe:42:e6:49:48:01:9e:b3:3d:01:4d:a5:20:34:7a:5f:02:
b3:82:93:ca:2a:3b:81:6f:01:b3:45:4f:99:31:b2:0d:0e:1e:
1d:51:d2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:14:52 2026 by rpki-client