Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
File: XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json)
Hash identifier: oWhypTiFK+ZbjaeLkoYBlQ6vAJBtnFue9UuDtm0T+Fw=
Subject key identifier: 99:0E:3F:94:07:A3:A6:A8:6E:D1:69:E8:74:F5:C2:40:A0:6D:45:58
Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
Certificate issuer: /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Certificate serial: 01A184879BB80CD30A516FFA6221858F37C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
Manifest number: 08F9
Signing time: Wed 28 Oct 2026 22:00:42 +0000
Manifest this update: Wed 28 Oct 2026 22:00:42 +0000
Manifest next update: Thu 29 Oct 2026 22:00:42 +0000
Files and hashes: 1: IrwpzwNbD7ixeqg3vbCTik-T_Lc.roa (hash: HyILMqlsRAkiSlovY1KbO4nirms1nXEWPqExv/4Zspw=)
2: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: i2DpEDULfenAyQP01GYOodj/QL2uffDqN28858nIdL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:87:9b:b8:0c:d3:0a:51:6f:fa:62:21:85:8f:37:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Validity
Not Before: Oct 28 22:00:42 2026 GMT
Not After : Oct 29 22:00:42 2026 GMT
Subject: CN=990e3f9407a3a6a86ed169e874f5c240a06d4558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c2:d3:4a:14:99:dc:cd:ed:92:ff:a9:3e:22:
8d:35:5a:6d:17:70:05:16:b4:07:ec:64:13:34:09:
c3:45:d4:28:ff:46:f5:73:01:e5:d3:e0:7b:f0:55:
95:c3:fa:f4:09:e0:b8:33:62:ea:05:7c:a0:19:59:
3c:57:01:90:fc:a8:cf:ee:b8:a0:03:24:be:d5:32:
0a:a6:31:a1:7f:55:eb:00:95:a8:64:d3:0d:2e:55:
b5:07:b2:03:20:a1:9a:8b:b5:6b:ba:d4:44:d8:39:
9c:ff:38:cc:d0:8f:6b:3a:f9:b9:60:14:9b:1f:c1:
23:aa:d2:4c:10:0b:d5:8c:d5:73:a9:1d:ac:55:85:
46:67:e3:fe:03:c8:12:01:11:30:2f:20:59:3b:58:
9b:a5:67:d4:b4:0d:60:2a:9b:dd:62:25:4c:13:3c:
7a:06:3c:9f:39:71:1f:d3:ce:d0:f1:f4:d4:b3:56:
61:ae:d6:e7:c5:bc:43:4e:79:68:04:a0:f3:1b:0c:
54:62:a4:1f:6b:5c:0e:4d:d3:89:9d:19:4a:e4:43:
7c:26:f3:4d:7a:cd:0d:c7:75:f5:71:c3:40:e4:76:
1a:df:8d:02:b6:1e:2c:8f:d9:67:0d:65:ca:ff:81:
55:81:91:2d:a0:e8:23:a1:5d:00:b8:e7:ec:cf:02:
10:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0E:3F:94:07:A3:A6:A8:6E:D1:69:E8:74:F5:C2:40:A0:6D:45:58
X509v3 Authority Key Identifier:
keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2c:25:54:7c:77:40:83:9b:ed:63:2f:f9:dd:9b:36:74:56:
09:3b:b2:c8:71:75:66:97:db:9a:7c:9a:f1:c5:c0:55:6c:a2:
64:ba:be:a4:fb:fb:4b:da:2e:5c:3d:34:c9:84:b1:33:35:24:
91:d1:07:8c:cb:0d:9c:39:0e:a7:be:b2:86:4e:15:4a:9d:fe:
4f:c4:c4:ad:2b:4a:75:83:b1:37:19:aa:ad:c3:0a:1b:48:bd:
84:e0:5a:9c:5b:1b:5c:40:58:c8:bc:ac:86:86:24:c0:34:83:
ac:5e:36:60:8f:77:45:da:e3:c4:53:c9:29:61:55:28:09:e0:
04:fa:93:f8:92:4e:a7:cb:b1:aa:a7:17:0e:22:b1:22:1e:a2:
c4:3c:a8:c0:15:9a:fd:60:27:24:6a:fc:a5:47:27:7c:df:04:
d4:5f:ce:75:cd:3a:b7:aa:69:1e:62:a6:8d:4f:a8:ad:e8:f9:
cf:3d:32:e8:40:25:bc:a5:83:fd:62:e3:93:c9:53:3d:d7:97:
bb:85:d8:5e:ae:f7:ee:77:a3:34:2d:32:59:a4:33:e7:1c:f6:
e0:c3:59:bd:4d:b7:db:99:76:a4:89:8c:58:e1:62:2e:ae:55:
d0:07:d9:a6:9b:af:42:63:e4:59:8c:68:ea:93:82:f4:c5:4d:
7f:90:93:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 06:10:23 2026 by rpki-client