Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
File: XGGrSm35u5XP3orwdmaKWVs0HeE.mft (raw, json)
Hash identifier: G/E2Lxjn3EmVhFM56go+9/4cxk63aicp+ROtzz/rdOk=
Subject key identifier: BA:A2:56:4C:B7:2E:33:90:35:FF:34:EB:17:09:46:D7:42:61:CC:25
Authority key identifier: 5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
Certificate issuer: /CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Certificate serial: 01A17C296CEE147354D089AC9F43F1CC6BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
Manifest number: 07AC
Signing time: Tue 27 Oct 2026 07:00:51 +0000
Manifest this update: Tue 27 Oct 2026 07:00:51 +0000
Manifest next update: Wed 28 Oct 2026 07:00:51 +0000
Files and hashes: 1: XGGrSm35u5XP3orwdmaKWVs0HeE.crl (hash: 5ieTCXYEIBFdwH0voZfB/H9jyjW/hpL3rwOdur1/7sw=)
2: d9ad6eSfGOCAtJCyfx5T80LXc84.roa (hash: l8TnxH7nYsbi9OkxC5kgX4fiX1lQ108inFjyeEj/BH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:6c:ee:14:73:54:d0:89:ac:9f:43:f1:cc:6b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Validity
Not Before: Oct 27 07:00:51 2026 GMT
Not After : Oct 28 07:00:51 2026 GMT
Subject: CN=baa2564cb72e339035ff34eb170946d74261cc25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:8a:a0:7e:67:0e:05:24:81:b1:09:8a:a6:
67:84:29:f0:1b:2a:d8:99:de:f9:3d:3e:8d:0c:1b:
7d:e7:35:e5:b3:22:5c:f2:d4:a9:0d:87:0a:e1:ec:
55:2b:a2:56:08:2d:49:8e:55:7b:23:b4:64:2f:ed:
d5:8c:e8:5f:f7:4c:09:1c:28:46:5d:ac:17:26:d4:
aa:6b:d3:fe:7e:dc:b8:18:ca:a7:dc:5c:ca:12:d4:
67:c9:30:7a:e7:a8:fc:8f:57:62:d0:19:92:8a:32:
d4:06:d3:5b:9f:1d:8d:43:ab:9e:e6:6a:ce:70:2f:
13:1f:4e:78:77:af:33:47:bb:20:f3:0d:13:9f:d2:
56:ee:1e:66:ea:5c:56:e6:22:00:3a:80:f8:75:5a:
7c:01:2a:4e:65:e5:58:27:77:f1:aa:04:68:85:48:
91:02:a7:2a:43:19:20:45:e4:d9:8f:89:99:dd:e2:
89:54:fa:cb:30:bd:46:90:be:4b:10:ab:7e:26:69:
f7:bb:7c:9b:42:8d:41:a7:46:37:63:63:55:8a:02:
95:8c:61:9f:86:54:2e:ee:0e:d9:35:d8:76:e5:67:
fb:10:1f:93:58:78:0e:03:60:26:14:79:66:29:c3:
75:00:66:17:52:3e:60:1e:e4:b7:89:f0:7e:54:b2:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A2:56:4C:B7:2E:33:90:35:FF:34:EB:17:09:46:D7:42:61:CC:25
X509v3 Authority Key Identifier:
keyid:5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fe:26:0f:60:10:50:32:7d:e1:6c:a0:fc:71:e1:e2:1d:cc:
30:da:35:20:2b:bc:3f:a6:a1:75:0d:d9:fc:ef:6c:4f:9d:a3:
56:42:e0:20:74:f6:6b:95:02:62:00:27:54:fb:0c:bc:c8:1a:
de:14:9f:9a:0c:47:94:4d:49:2a:16:11:d9:98:7f:12:f9:72:
b0:ef:09:41:34:78:78:b9:3e:e7:fc:fc:83:33:8a:b1:d8:99:
48:d6:1c:ae:4b:95:41:f1:5b:9d:ea:5f:6d:12:9e:a4:6b:30:
b0:1d:74:58:89:3b:55:fa:3e:9a:a7:55:6e:d9:4f:3e:b2:69:
10:be:b4:44:e7:04:62:c4:bc:39:a4:66:f3:21:13:4e:f9:d6:
1b:37:1e:8a:bd:3b:1e:4f:63:63:42:72:1e:50:7f:b3:97:14:
6d:41:2e:d2:0b:b5:6d:2b:90:f3:bc:e0:0b:fd:fa:ef:bf:10:
93:d6:78:06:87:37:da:24:24:5c:5a:8b:13:14:9b:9c:8e:5d:
22:44:56:cb:0e:fd:75:10:9b:d4:27:f1:e2:04:52:24:ef:ae:
f2:f8:27:4c:02:36:33:5f:9e:01:3f:ca:f6:dd:31:08:2d:5b:
ec:ef:99:ca:f5:be:72:09:47:18:1c:e2:75:04:42:6a:7a:6b:
df:4e:3f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:03:19 2026 by rpki-client