Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
File: XdDfAq2NzVImXb-cBfOBnyQy3_4.mft (raw, json)
Hash identifier: u+piEgLAIS1fnXTIGKbhfPQ3V6wSBQ7pToI9vjjyBnw=
Subject key identifier: 89:E9:F9:D2:9D:1D:66:7B:EC:F8:17:EA:38:F4:3A:98:47:20:95:28
Authority key identifier: 5D:D0:DF:02:AD:8D:CD:52:26:5D:BF:9C:05:F3:81:9F:24:32:DF:FE
Certificate issuer: /CN=5dd0df02ad8dcd52265dbf9c05f3819f2432dffe
Certificate serial: 01A1005A6F081A2DEC26FA4FD99EA0DE769E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
Manifest number: FE
Signing time: Sat 03 Oct 2026 06:01:28 +0000
Manifest this update: Sat 03 Oct 2026 06:01:28 +0000
Manifest next update: Sun 04 Oct 2026 06:01:28 +0000
Files and hashes: 1: 9gJWQkxGs5Qy5W0SDW1Rj7nGQoI.roa (hash: 4pm0cu3JawKPkvnVafLyIQWg1jaUXk/k+2XMfkJDsyU=)
2: XdDfAq2NzVImXb-cBfOBnyQy3_4.crl (hash: QqIoXEkb+w3SOK1UoA9giThmk+GhX45AF9ERN07czmk=)
3: jxsYluW7L-VesUMEEAjwwcE99j4.roa (hash: nwnLEM1dFL1lWHtpYNqY2hUoyqHLs3XF/ua5I+nhIX8=)
4: sJdr2Fb_Swcmno7YhJernLivV-4.roa (hash: UR6r+/nWVWtQENnrssjpLZJ3r+hXsPHUdwQ2sgMSnus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:5a:6f:08:1a:2d:ec:26:fa:4f:d9:9e:a0:de:76:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd0df02ad8dcd52265dbf9c05f3819f2432dffe
Validity
Not Before: Oct 3 06:01:28 2026 GMT
Not After : Oct 4 06:01:28 2026 GMT
Subject: CN=89e9f9d29d1d667becf817ea38f43a9847209528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:5d:1d:95:73:95:b5:e2:82:45:43:4c:1f:
61:2f:a7:4d:09:67:87:39:1a:53:1d:24:bc:5b:8b:
97:89:44:8b:59:b0:9c:7b:e6:e6:e6:a0:14:48:a5:
f6:75:ef:f7:5e:58:04:7a:37:84:11:bf:14:53:ae:
09:3b:80:30:59:c2:68:47:a4:0f:1f:2c:a7:fb:0c:
92:ef:31:e4:3a:32:15:ee:be:8a:24:6c:fe:9b:58:
4b:c0:a6:fc:83:97:08:3e:40:c0:4a:e9:e4:44:08:
3e:70:1b:30:9f:79:dd:23:e6:70:82:71:f3:6b:71:
f0:e1:1f:c6:da:96:f3:99:a4:f3:40:bc:47:54:ce:
ba:64:ce:12:c6:ce:41:30:54:38:da:52:17:17:81:
18:a7:d7:9e:da:cf:69:18:e7:7b:d1:ad:ae:25:d5:
b4:2a:a8:f5:7d:9e:e8:fa:68:71:e9:75:bc:42:27:
cc:16:db:ee:9e:37:0b:b3:f1:88:32:30:d7:91:70:
22:94:7c:2e:a5:c5:d0:12:92:fe:31:37:6e:59:2a:
33:78:f1:73:48:5b:4d:c0:ec:49:99:33:f0:4e:2c:
d8:cd:ad:5d:f6:16:de:20:e7:c2:f4:66:0d:04:3f:
df:1d:ec:1e:b4:2b:27:85:93:54:34:1e:4d:6a:bc:
31:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E9:F9:D2:9D:1D:66:7B:EC:F8:17:EA:38:F4:3A:98:47:20:95:28
X509v3 Authority Key Identifier:
keyid:5D:D0:DF:02:AD:8D:CD:52:26:5D:BF:9C:05:F3:81:9F:24:32:DF:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3a:52:39:f0:38:41:60:e8:c5:59:8e:46:b7:31:17:ef:2d:
3f:2d:6d:6a:9c:73:8e:39:ce:5d:e7:32:f9:59:1e:86:64:29:
df:2c:8e:6e:9c:47:d8:79:69:e5:51:4e:50:98:bb:8b:36:85:
70:a2:4f:81:2e:30:85:96:e7:f2:af:04:4a:84:43:e1:c4:6f:
11:e5:9e:30:c1:06:26:85:39:92:db:ca:a1:b5:68:35:da:37:
76:8c:a7:f8:df:4a:83:31:46:49:e4:dc:43:57:a4:08:f2:0a:
bc:20:ce:3b:e7:ef:86:00:38:41:e4:95:44:fd:29:44:32:38:
e4:b5:c1:d4:8d:66:75:34:87:15:33:8b:d0:3b:51:77:40:6b:
59:b1:6f:5f:f2:b5:b7:38:d4:98:51:34:a4:f7:9e:d4:c2:74:
7c:56:2e:de:ae:48:b6:4c:4c:ab:d9:e9:4d:de:eb:4d:f4:41:
36:36:1f:51:3a:d0:9a:cd:ee:70:66:53:6e:20:2e:91:c8:44:
d2:05:8e:e4:b5:c7:f1:53:5d:f2:32:19:7b:28:79:fe:39:50:
6f:e3:b5:25:35:98:79:16:8e:a0:fd:8c:28:9e:0c:59:94:8e:
07:a2:ee:3c:50:be:7c:a2:26:1f:61:b9:d8:8e:fc:d1:0f:6b:
e8:b1:8a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:06:05 2026 by rpki-client