Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: KXEWBSahlCM38BKIbNwmg0gw53Go+szKIvdrQCCOlFY=
Subject key identifier: DD:29:6D:BE:BF:B9:A0:AE:F0:64:41:26:6D:5C:B2:DA:94:E5:C4:58
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 01A1427109A67D43BAB57CFE88CD323EA02F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 0DC9
Signing time: Fri 16 Oct 2026 02:01:06 +0000
Manifest this update: Fri 16 Oct 2026 02:01:06 +0000
Manifest next update: Sat 17 Oct 2026 02:01:06 +0000
Files and hashes: 1: 6KBg76wO49ZTNeUZLEQvdfuAEnc.roa (hash: C78F4tRrcjaUZ0tkRMKZ6DDDl8hmlq6D1hHs1hdNls0=)
2: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: Pb4nYADY4A1RjfmzO+HZSKfvYlcv4VuiGRpbd6PMyh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:71:09:a6:7d:43:ba:b5:7c:fe:88:cd:32:3e:a0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Oct 16 02:01:06 2026 GMT
Not After : Oct 17 02:01:06 2026 GMT
Subject: CN=dd296dbebfb9a0aef06441266d5cb2da94e5c458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:00:96:7c:57:67:b5:c7:0e:01:57:57:ca:
d0:13:1c:6e:15:e4:22:7f:f2:59:e8:98:25:8e:97:
de:9a:ba:32:61:d1:81:ae:f6:26:f0:f3:b9:4e:62:
24:bc:d6:8e:a5:f4:e4:ec:8f:ff:9d:58:36:a0:f3:
cc:7d:80:1f:67:9b:83:96:26:b5:eb:a7:35:a0:2b:
6c:e2:4e:20:87:91:09:ed:2b:f6:27:aa:4a:4c:79:
f9:67:de:05:b7:28:2f:33:e3:d4:94:71:c9:51:9d:
9b:68:8c:0e:14:b4:6b:fb:8c:c9:e6:1c:7b:12:de:
3d:8d:07:4c:60:3c:2d:30:2d:02:f4:92:ba:a2:43:
21:63:6f:ac:e2:56:f1:34:4d:4b:43:a1:d5:b0:dc:
c1:27:1b:3d:3d:ee:cc:69:16:ed:09:12:33:08:26:
ae:b1:e5:ce:41:b2:2d:6b:dc:02:cd:e4:0f:3f:2b:
5c:3e:79:a0:ca:62:14:d8:35:b2:42:92:72:c0:ad:
1d:48:fb:d9:88:1e:46:13:e2:02:b5:f2:5d:8f:aa:
de:13:0e:4b:55:7b:40:a9:6d:37:8e:0e:86:18:3f:
73:d1:0f:7b:d8:f1:9a:02:fc:29:d5:61:78:2a:19:
b2:e6:1d:d4:a2:57:83:8a:ef:f7:d9:82:3b:4e:ae:
ef:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:29:6D:BE:BF:B9:A0:AE:F0:64:41:26:6D:5C:B2:DA:94:E5:C4:58
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:33:4d:59:a4:65:41:e0:b5:4e:33:82:ff:e7:bb:13:5b:16:
e2:b9:84:34:48:52:14:74:0e:48:33:ed:c8:cd:f8:9e:89:81:
c1:20:d8:de:73:aa:9e:6f:73:6a:9e:eb:46:c0:42:ac:da:43:
b4:68:43:0a:cd:9a:80:43:78:72:96:c9:a0:27:db:30:f1:c5:
07:e8:70:1e:4a:ec:24:a1:9d:b8:da:e6:03:cd:ce:0b:04:0e:
1a:6f:57:fb:48:71:dc:e4:b7:72:98:c8:ec:f5:1a:8a:75:dd:
ad:75:13:0d:00:a9:44:e4:e8:25:f3:e6:57:37:2b:52:42:ed:
9f:82:a0:ca:52:70:51:81:5f:5c:d4:6c:b1:f9:c6:d8:d8:59:
24:a5:69:55:1b:84:5f:74:bf:da:c1:0a:2a:a8:63:ba:7d:03:
ee:7c:32:a5:55:ea:92:30:c1:71:cd:6c:a6:37:a3:2d:be:95:
2c:9b:0e:ad:42:a1:70:8d:19:a0:79:c0:ca:39:67:f0:9c:66:
1e:d6:78:b9:eb:65:13:79:88:22:27:e0:18:b2:01:bf:c7:a8:
7f:9d:79:1f:ba:46:de:cf:b3:68:27:cd:14:e2:43:d1:b8:a8:
7b:70:37:90:a5:b2:a7:48:7b:60:2e:7f:f7:55:86:40:a8:e9:
27:42:09:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 11:51:59 2026 by rpki-client