Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
File: Xff7OeIB66Y00CA8TyjeWuB5Wog.mft (raw, json)
Hash identifier: Wz0ZsDNTGCRFSI6QZqgCk9siqfsV2vSP9JomizxAIig=
Subject key identifier: 5C:B6:2D:0B:07:0C:35:09:3A:7A:67:6C:02:63:7E:46:E2:77:5D:90
Authority key identifier: 5D:F7:FB:39:E2:01:EB:A6:34:D0:20:3C:4F:28:DE:5A:E0:79:5A:88
Certificate issuer: /CN=5df7fb39e201eba634d0203c4f28de5ae0795a88
Certificate serial: 01A1878966748B3665A6C7481E9703023089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
Manifest number: 012D
Signing time: Thu 29 Oct 2026 12:01:30 +0000
Manifest this update: Thu 29 Oct 2026 12:01:30 +0000
Manifest next update: Fri 30 Oct 2026 12:01:30 +0000
Files and hashes: 1: Xff7OeIB66Y00CA8TyjeWuB5Wog.crl (hash: /4+JjyEtyDJ5EJec3fXJ+xr7LeB9j3219r3fdJGgFNI=)
2: __YpSLH2Xqco35XcXMKupV9A4Uk.roa (hash: 5aqzq4DscaIZrphVysDe9rPinFOuHPMH2uHk2M7EKis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:89:66:74:8b:36:65:a6:c7:48:1e:97:03:02:30:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df7fb39e201eba634d0203c4f28de5ae0795a88
Validity
Not Before: Oct 29 12:01:30 2026 GMT
Not After : Oct 30 12:01:30 2026 GMT
Subject: CN=5cb62d0b070c35093a7a676c02637e46e2775d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5e:2b:2e:cf:fa:8d:1e:36:84:cb:05:99:9c:
44:a1:22:36:4c:e5:22:d1:c2:b0:f7:d1:99:94:60:
ac:9d:70:93:05:58:61:5a:e4:09:05:51:ad:97:11:
e2:fc:73:96:41:82:69:f7:77:b7:9d:61:f9:94:bf:
84:89:6d:b4:13:03:4e:50:15:00:27:b3:f1:56:ff:
b0:57:42:0b:c8:72:16:bd:f6:1c:b0:e7:d1:81:59:
20:a2:4d:72:3e:5c:24:35:bb:5e:ad:29:9a:38:b3:
0d:aa:dc:c4:b5:00:fb:6f:fb:ba:30:8c:54:ed:0e:
bf:8f:c9:3c:c9:f1:da:72:a1:d6:30:dd:e8:32:bc:
86:20:1c:0b:7b:a4:9f:e5:d5:31:d9:f3:01:4a:b7:
38:9b:a1:23:86:30:88:f3:59:8e:4c:25:74:58:e2:
2b:62:91:88:3c:17:b1:bd:41:cc:6e:5a:87:aa:72:
0a:c9:4a:05:18:fc:9c:96:5b:4d:a8:0f:69:db:bd:
aa:94:43:ee:46:dc:31:c4:a3:de:e5:6f:a5:d4:83:
b4:79:68:2a:19:39:29:cb:cc:e6:4a:07:e9:42:ed:
4d:31:49:1c:77:c2:ca:39:b6:f5:90:45:3c:71:c8:
c6:60:ac:73:22:c3:dd:8d:08:c9:28:fa:b0:6e:9e:
94:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B6:2D:0B:07:0C:35:09:3A:7A:67:6C:02:63:7E:46:E2:77:5D:90
X509v3 Authority Key Identifier:
keyid:5D:F7:FB:39:E2:01:EB:A6:34:D0:20:3C:4F:28:DE:5A:E0:79:5A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:01:e5:7f:5b:c2:8c:23:0c:03:41:a7:99:06:08:65:a7:37:
72:0e:62:0b:b2:31:7b:8a:82:0a:b4:02:3f:50:c3:b3:da:c9:
e6:29:d4:11:6c:45:66:9a:79:18:d7:34:39:c2:56:a7:10:f3:
d8:c1:ae:e8:d2:4d:3a:1d:8e:c8:72:67:58:03:6d:9b:f0:86:
d6:9a:dd:51:a3:9c:12:7a:90:4d:6a:66:d8:de:22:eb:7b:6b:
55:51:b6:18:30:50:83:0b:fd:4d:29:62:d9:0f:92:a3:3f:7d:
18:07:3c:f0:2e:2f:11:87:14:df:02:72:f8:52:cf:78:10:1f:
ad:21:9d:53:3e:68:42:28:fb:21:7a:14:65:d5:96:e0:ac:c8:
43:9a:ad:0e:d4:fa:ca:ba:79:a3:e8:7c:19:6f:9a:15:ee:86:
8b:c4:cc:d5:f3:38:90:ab:14:b9:67:ca:4f:2a:4e:ba:ac:bc:
ea:54:f7:ff:50:1a:8c:a6:53:ec:1f:a3:7c:7f:df:65:b0:54:
51:91:26:88:43:41:ca:6c:83:e3:97:4f:6b:cd:99:2c:9e:9e:
e5:52:95:2e:b7:ea:c5:f8:08:4f:9a:10:0b:23:b8:3a:95:f7:
8b:02:e7:52:d9:f1:3a:3a:9e:0d:8d:b5:10:28:03:40:3b:e9:
7a:3f:d0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:02:49 2026 by rpki-client