Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
File: XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft (raw, json)
Hash identifier: mudqJ6habG3YE1Fe5Ub/Zb6hXsXw4XPS0YulMTIhg34=
Subject key identifier: F6:96:45:7E:53:AD:77:F3:D6:3A:40:17:DE:03:F9:F0:41:4B:89:B1
Authority key identifier: 5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A
Certificate issuer: /CN=5e5214158af310ffa9c315298343f4c3e66aec9a
Certificate serial: 01A18ED4BEF9B420C9C1A9389FF0ADC1AE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
Manifest number: 0B1A
Signing time: Fri 30 Oct 2026 22:01:09 +0000
Manifest this update: Fri 30 Oct 2026 22:01:09 +0000
Manifest next update: Sat 31 Oct 2026 22:01:09 +0000
Files and hashes: 1: 8PWFbs4AIdR1B4HqhCIMxTTO61A.roa (hash: KnuKEGt5rr/A//D18rWYCvEAK3yzh9aH2tXIMp8420U=)
2: XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl (hash: gZZwr/Pr6Dj0PhtTWSSTtZZaGA44liRn8GhUfZ5jA00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:d4:be:f9:b4:20:c9:c1:a9:38:9f:f0:ad:c1:ae:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5214158af310ffa9c315298343f4c3e66aec9a
Validity
Not Before: Oct 30 22:01:09 2026 GMT
Not After : Oct 31 22:01:09 2026 GMT
Subject: CN=f696457e53ad77f3d63a4017de03f9f0414b89b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:08:a9:0d:ff:43:4d:12:d4:b5:0b:68:7a:
0d:46:78:af:06:09:fe:e9:06:02:fb:fb:9b:78:66:
0a:38:0c:3e:b6:98:c9:68:6a:14:0d:51:11:d4:e4:
bc:35:e4:f6:f0:ae:1a:47:cc:9d:22:13:7b:f9:70:
cd:1e:8d:2c:73:2f:6a:b2:13:5a:61:a3:60:26:0a:
62:36:a4:fc:ec:58:6a:21:61:e1:e7:7d:7b:4e:00:
c2:78:2e:f7:a4:25:9d:24:ad:01:b1:54:81:d1:86:
71:32:16:2a:95:2d:a8:70:45:0b:84:33:a9:75:09:
ef:93:df:ab:7a:49:d8:7e:b2:3f:b8:da:fa:e6:5a:
3d:33:2e:8b:69:65:46:bc:5c:48:82:19:7b:10:ae:
9d:d7:a8:b2:24:a9:16:13:49:e5:75:f0:41:72:8e:
b2:7c:7b:e0:d9:fa:d2:8b:07:73:d8:57:4a:ea:25:
4e:38:f8:40:6e:92:d9:1d:36:78:c6:2f:7d:00:d5:
9d:d3:75:07:be:de:9e:b3:c9:78:ce:00:58:5b:7f:
58:06:16:f2:60:a3:8c:05:6b:ef:ab:69:de:73:04:
bc:9c:97:ec:58:9a:c7:04:e7:54:64:cb:6d:e1:28:
29:2e:03:71:eb:d7:e4:66:c3:c2:1c:9b:c0:91:2b:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:96:45:7E:53:AD:77:F3:D6:3A:40:17:DE:03:F9:F0:41:4B:89:B1
X509v3 Authority Key Identifier:
keyid:5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e4:2d:61:ff:43:77:0b:e9:bc:fd:92:8c:70:e3:71:cb:8a:
1b:86:f0:7f:20:07:d8:ce:09:dc:96:60:40:44:63:1e:13:86:
ed:9e:fa:12:61:e3:db:ed:57:33:46:9a:f7:72:21:d9:49:04:
bd:34:ed:28:b0:90:0c:0c:35:25:37:f6:b7:d2:b1:79:59:5f:
ce:98:df:25:f9:c9:12:66:b3:d3:2e:eb:89:89:29:f4:de:ad:
94:08:05:11:83:c2:2e:ad:bd:1c:84:79:c1:34:da:e7:78:11:
c1:0d:d3:5c:60:14:4e:e1:32:98:9e:00:71:ab:44:6e:80:ff:
1c:e8:37:2e:92:e6:aa:5e:15:4a:a8:93:5c:63:3f:ae:7a:f9:
5c:9b:82:d2:81:aa:89:10:79:b9:48:2d:74:28:ab:fd:10:60:
fb:33:70:c1:34:fe:a8:0a:60:6e:7c:49:9a:37:b9:7b:88:06:
f3:30:3c:67:71:1d:08:6c:75:da:cc:a6:c2:e6:56:06:4d:bd:
21:03:ca:34:25:8b:c7:97:34:57:5e:7b:e9:73:01:36:9b:5f:
39:23:06:d1:49:fe:b2:d3:ab:18:a0:4a:51:61:ec:01:77:21:
07:ac:c5:93:a1:d7:e1:7e:13:0d:3f:df:68:40:2c:6e:42:c6:
80:6e:54:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:21:49 2026 by rpki-client