Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: xMxDedx3htd4rbO55/9KUlhyN4VVQ6R09IjtUPYaUaE=
Subject key identifier: 74:1A:86:81:D8:60:FC:AE:BD:E0:7B:1A:72:7C:28:C1:2D:B9:8D:0F
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 01A17BBB23839D15BA6C4C313B0B4ACB2015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 1ACA
Signing time: Tue 27 Oct 2026 05:00:24 +0000
Manifest this update: Tue 27 Oct 2026 05:00:24 +0000
Manifest next update: Wed 28 Oct 2026 05:00:24 +0000
Files and hashes: 1: BVjAALpJvxuQy2GyePspuTkr6KE.roa (hash: n2Oqqyn+P3DE0EdI3BsAkGnYPcIXpRm9D9/3qqS3Klw=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: 1KTahGLayU5iDIIsNIfc5JnItSFE0mFsx7tw4i2erqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:23:83:9d:15:ba:6c:4c:31:3b:0b:4a:cb:20:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Oct 27 05:00:24 2026 GMT
Not After : Oct 28 05:00:24 2026 GMT
Subject: CN=741a8681d860fcaebde07b1a727c28c12db98d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6c:dc:ef:28:c2:ad:69:fd:59:ae:03:8b:6f:
83:d0:51:04:74:9b:e6:b8:7d:c9:18:08:b5:fb:04:
81:0f:e4:bc:0d:d4:24:2a:10:ec:cb:34:11:e7:65:
19:d2:5a:00:0a:25:28:01:a1:bc:38:64:dc:7b:8a:
42:0f:ee:b0:a7:ae:2a:1f:9a:23:b3:20:32:25:e5:
7a:71:ee:7d:f4:cd:3b:26:e8:1a:4a:29:56:c1:7d:
be:49:fe:43:a0:88:db:2f:21:59:05:e0:4a:9d:cb:
29:be:e2:b8:24:e7:c3:fc:27:5f:a9:9d:8c:fc:cd:
44:b7:14:0b:27:d1:0c:b2:ed:60:05:b7:2a:23:35:
36:33:58:ff:71:20:c5:80:a3:fc:67:2b:78:37:13:
e3:78:a7:25:10:c9:de:a4:ac:02:50:24:4c:4a:c9:
f8:a9:9a:86:f0:99:34:77:77:fc:6d:ad:06:89:b5:
49:c8:07:fc:ab:1c:08:fa:6f:56:bc:12:51:b9:64:
75:05:2e:a6:a0:11:a1:7c:67:8a:ef:f9:c0:64:64:
08:d9:46:d6:dd:b9:cb:d4:31:1a:d5:7a:22:bd:a0:
76:7a:88:e9:4a:62:7c:92:f3:84:e9:2f:7f:f2:db:
a2:c3:d0:5e:ec:ed:b5:37:29:fa:ac:bf:07:65:1f:
17:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1A:86:81:D8:60:FC:AE:BD:E0:7B:1A:72:7C:28:C1:2D:B9:8D:0F
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fa:78:22:6b:52:ae:f9:d7:de:d1:00:3f:05:72:3f:4a:87:
96:42:b6:d1:02:9c:16:f6:fe:7d:9c:5c:85:85:da:c0:60:18:
ea:d8:dd:62:e7:b9:f6:97:30:d6:6b:c9:a9:29:85:05:e6:eb:
49:a8:b4:83:59:02:36:46:49:24:c5:47:f6:98:36:eb:5f:43:
9f:66:a1:c8:47:09:3f:11:9d:66:e0:d1:82:74:33:1b:36:c1:
49:17:fb:f3:5d:1f:38:b5:37:9d:75:f1:43:2c:ab:c0:9f:b5:
dc:9a:4e:c0:05:d2:d7:24:44:1c:fe:6e:70:de:59:28:22:e4:
6d:e3:56:5d:fd:4a:35:49:f9:8c:13:62:34:66:c3:69:72:4f:
14:d7:4c:e0:e0:61:b4:fd:67:73:90:2e:0c:b1:eb:c8:29:82:
8a:a5:6a:db:01:f9:c0:01:70:49:46:05:20:c9:56:5f:80:bb:
1a:ab:33:35:72:0a:4c:b9:81:ba:07:18:62:a8:12:7c:28:4d:
a0:1b:44:db:0f:80:8f:b9:3a:8f:ad:c9:d5:29:0c:2c:11:fc:
2a:cf:7f:f0:d5:bc:28:75:b6:ab:1c:99:d6:4b:a1:eb:3e:59:
76:77:3d:e8:70:3f:54:f7:f8:9e:17:12:93:c2:82:21:ac:4d:
b2:df:20:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:47:38 2026 by rpki-client