Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: rT0dkDPWSp2/HeMMLX8QMK+XtmzoeVu41xqhhcWxIwk=
Subject key identifier: 54:21:D8:60:4A:E2:A8:B9:12:12:45:BD:79:E8:88:48:CF:8C:34:A7
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 01A10701853EB6CD8DB14104211AA62B8C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 08A8
Signing time: Sun 04 Oct 2026 13:01:42 +0000
Manifest this update: Sun 04 Oct 2026 13:01:42 +0000
Manifest next update: Mon 05 Oct 2026 13:01:42 +0000
Files and hashes: 1: 1yTxuvJTgzp3vueVNPtMM4HSlnE.roa (hash: C3mQ9ASRyTlSwgnHvOngoGQirohvWMvEni68YFNubqo=)
2: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: Q5MtrK1z0rlmrHVettVlBhXCNf0gYC1V8z3F2acpglY=)
3: xweu5qCO47VIbmMKNVD40EQTVOU.roa (hash: 2Ggr+oJ9NSlt1DGrtrpkA0zHBUc5XOHY+zg99GvfTiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:85:3e:b6:cd:8d:b1:41:04:21:1a:a6:2b:8c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Oct 4 13:01:42 2026 GMT
Not After : Oct 5 13:01:42 2026 GMT
Subject: CN=5421d8604ae2a8b9121245bd79e88848cf8c34a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:5e:b6:4e:3e:bd:04:32:33:86:05:f9:94:
ba:3e:e5:46:64:1d:5d:bd:f2:81:64:bc:e1:55:d2:
cd:4c:e1:20:b5:cc:11:26:a2:18:10:06:a7:d9:8a:
54:fc:3e:0a:5c:9c:ab:04:4e:b5:25:9b:de:e8:38:
42:27:2d:db:8a:b5:df:13:b2:2e:03:dc:16:0e:a9:
ce:38:fa:54:60:19:0a:c4:9e:8b:44:67:d4:46:2f:
b7:bb:81:94:58:11:53:a3:34:80:67:a8:45:71:bd:
0e:16:31:d7:85:9f:8d:65:4a:1e:12:b6:4b:7f:b3:
05:f6:75:8b:88:ff:50:50:cc:26:7f:69:45:03:17:
73:8a:1a:6c:b7:87:9a:6b:6e:4e:b3:06:60:d9:35:
f2:5e:a1:dd:c5:12:47:f6:9a:1b:53:08:52:4b:30:
11:ca:f7:a5:00:69:ef:05:3b:c2:b9:0c:d5:14:2a:
35:ca:3c:41:cd:7b:52:7d:9c:7d:72:61:8d:28:99:
af:11:87:04:4a:95:88:68:3e:86:f8:0a:7c:b5:99:
46:03:4d:cc:62:50:36:37:7f:22:3a:f8:cf:6d:01:
90:85:e8:47:7f:87:33:0f:69:c6:61:84:bd:f4:81:
c2:b0:90:e0:b7:b9:6c:c6:19:69:12:c9:92:af:de:
bc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:21:D8:60:4A:E2:A8:B9:12:12:45:BD:79:E8:88:48:CF:8C:34:A7
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1f:ac:b3:84:57:91:26:10:eb:fc:9a:d4:ab:48:be:b2:b9:
f6:03:df:cf:97:d5:ef:6a:54:2f:5d:4f:cf:fd:32:cc:4d:0e:
4b:14:55:f5:1c:4a:01:c6:0d:52:f3:47:b2:af:1d:4b:61:93:
e0:27:ca:a7:f9:15:e4:06:40:4e:fd:27:26:b8:90:94:bd:44:
18:41:a4:1b:92:bc:ce:e8:c2:85:c8:7a:5f:ed:d2:19:fb:e2:
e1:c2:9a:3e:4d:50:85:62:40:28:fc:ea:1a:50:e1:f3:4c:c2:
4b:db:b2:50:c0:06:fd:1e:33:ce:4e:1f:ac:f6:15:21:a0:59:
c7:25:8f:14:1c:4a:40:a0:c4:e0:b0:96:06:6d:7d:61:6d:e2:
be:20:86:01:32:f2:b2:78:30:96:82:18:82:72:e0:79:b2:8f:
97:8c:93:4b:7b:e9:c7:51:d8:5a:1b:99:20:78:a8:b6:94:e8:
c9:6d:88:67:ed:da:58:5e:62:c3:45:05:9c:26:60:77:6e:2e:
ce:d2:7b:06:b6:29:ba:25:86:62:61:13:ae:1e:2a:c5:44:eb:
ea:90:ff:e2:96:f1:ac:f3:5f:8a:a7:77:3b:8e:36:a7:1d:bb:
16:84:c9:c5:bb:74:0f:89:98:f2:a2:85:ed:74:63:bf:4a:b9:
22:81:6e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:24:56 2026 by rpki-client