Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: rLsg6zy3SFJ8/BR8eldACR13FPuzDtLMtl24ZmlwXck=
Subject key identifier: CF:AA:5B:C4:A7:1B:2A:F4:10:D4:81:4B:DD:18:2A:AB:4F:3F:76:8B
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 01A18D8AC1BF3FE75563AB70568508D8687E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 11AF
Signing time: Fri 30 Oct 2026 16:00:43 +0000
Manifest this update: Fri 30 Oct 2026 16:00:43 +0000
Manifest next update: Sat 31 Oct 2026 16:00:43 +0000
Files and hashes: 1: 1-nsaGOYJDQs8nE83JBsjbwYRoPA.roa (hash: ZorqeuTKQ8BzMES+IbO5PhiAMx62C25+2z4OV8xpzBs=)
2: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: dOUuZXnXirJyA71Dk5lC5la5SecZ21x57+T7TTQyooY=)
3: fYv6u6ZqsaaVuf2RxvvaolhNBjk.roa (hash: jVk92j+q/o1dRJaAKw+eFCSe6j9s2E6quPaItwZl0/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:8a:c1:bf:3f:e7:55:63:ab:70:56:85:08:d8:68:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Oct 30 16:00:43 2026 GMT
Not After : Oct 31 16:00:43 2026 GMT
Subject: CN=cfaa5bc4a71b2af410d4814bdd182aab4f3f768b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:02:36:02:34:07:f1:16:7d:c8:97:ce:9c:
2b:81:c5:62:ab:df:c2:f6:fa:61:d5:82:9e:e6:b8:
3d:62:28:2b:c2:e0:d1:30:e5:da:d7:fb:a3:dc:db:
d9:4f:65:19:5d:07:40:fc:af:88:1c:c6:cd:17:ba:
f8:ad:ea:98:4d:3c:03:64:94:20:47:78:ef:a4:f9:
5d:a1:83:3c:6a:7a:45:63:1a:32:91:43:2f:f0:e2:
ff:fc:ed:4c:63:90:db:f7:eb:06:a5:f1:ab:91:0f:
d6:41:b5:18:b8:da:3f:ce:79:bc:6a:b8:ed:22:85:
41:49:98:9b:57:10:4f:59:53:83:e7:b3:53:7a:ff:
67:85:b8:19:41:5b:bc:d7:af:54:30:d4:22:59:f1:
2d:39:6f:f6:7e:05:37:85:f8:6b:34:2d:b6:33:a0:
84:ad:af:ea:fc:ff:59:df:a4:8e:bb:0b:0d:56:37:
8b:a1:e4:9c:c0:7b:d1:59:ec:0c:8d:c8:33:16:fd:
60:23:ab:5f:11:9b:a9:91:35:bf:7b:37:3c:68:ba:
69:0c:ec:82:43:17:90:cd:1b:41:52:d0:2f:bf:49:
75:95:ca:ad:8e:df:d6:5f:09:d1:6b:96:51:d0:e6:
e2:5e:fd:05:57:7f:1f:3f:df:88:62:d0:6f:b3:08:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AA:5B:C4:A7:1B:2A:F4:10:D4:81:4B:DD:18:2A:AB:4F:3F:76:8B
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4a:6c:51:7a:06:4d:ea:67:db:6d:91:6b:1b:d7:d8:ac:46:
9e:c2:c3:e2:29:4b:8a:60:aa:ff:3f:39:c3:c2:ea:e6:ec:5e:
67:9f:61:f7:77:f5:61:6c:9c:2c:2e:02:95:f7:00:d2:59:94:
85:45:28:ee:b8:67:20:b9:9b:f2:b1:8e:2d:d0:13:51:d2:f8:
ba:bc:9e:8f:a9:8c:b0:ea:02:b8:47:ad:e6:6d:47:37:98:11:
2f:35:7b:e2:34:e3:c6:b3:a3:48:2f:03:c8:4e:5d:c1:6f:91:
e7:88:cd:03:71:0e:48:07:9b:ae:fb:ee:52:60:b7:c9:2c:e0:
c7:ef:18:75:b7:1e:6e:e0:62:94:2a:dc:78:dc:34:7c:17:ce:
88:60:76:3c:07:cd:68:98:16:d5:d9:61:11:c1:ed:ca:7a:34:
10:52:a2:1e:30:d4:14:f6:b9:07:11:04:ca:f2:d3:be:f6:5c:
ac:2e:6e:58:4b:26:d3:70:71:23:6b:7b:28:20:c8:4e:17:d4:
2f:69:34:9f:9e:66:a2:7c:19:4e:14:1c:d1:e2:42:83:07:a2:
66:0b:30:39:10:b2:62:3d:5c:e2:38:f8:eb:d7:d8:2d:b8:04:
8f:9a:9d:49:eb:88:d4:5f:88:cb:db:0e:99:e7:bc:7d:c0:cc:
6f:bd:21:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:05:29 2026 by rpki-client