Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier: 7Zef90XRuWWLCvyl5aS80r7wMpnRyIW8LAjfqgdCey8=
Subject key identifier: DD:76:82:04:2C:BB:E6:17:EB:F1:60:64:F9:73:BB:D2:8E:14:DD:B3
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 01A131EB419E20479E87762F3DC0346A3A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number: 1AAD
Signing time: Mon 12 Oct 2026 21:01:03 +0000
Manifest this update: Mon 12 Oct 2026 21:01:03 +0000
Manifest next update: Tue 13 Oct 2026 21:01:03 +0000
Files and hashes: 1: JU90aQ8JffWPKUNs4WRBmjC5fmg.roa (hash: RTDjP0CmxRz9mg1HQcbaHVAmbmYErR/CAHIxD2kjR7M=)
2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: taCikTjFiZkGDXQgCUB7rMEnZh2BlNmY8eTDsDx4euM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:eb:41:9e:20:47:9e:87:76:2f:3d:c0:34:6a:3a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Oct 12 21:01:03 2026 GMT
Not After : Oct 13 21:01:03 2026 GMT
Subject: CN=dd7682042cbbe617ebf16064f973bbd28e14ddb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:10:06:8f:71:7f:90:e7:43:71:48:7f:26:
78:44:88:45:21:87:f2:79:54:af:58:f6:98:b6:59:
af:33:fa:fa:1a:df:ed:df:15:c8:be:62:c5:55:c8:
0b:5f:fe:05:40:47:77:68:5f:b4:9c:2f:04:b9:87:
e4:a9:85:cf:18:1b:e7:51:c2:2c:a5:d1:b4:f2:40:
f3:85:66:8a:17:fd:dc:f9:ea:cd:9c:e3:a7:8a:a5:
83:57:fd:48:3d:bf:49:22:d9:a8:b5:73:25:93:e8:
e5:1e:a2:24:d2:f5:5b:58:6e:41:e1:20:12:31:3e:
39:c4:74:2d:87:cf:22:65:bb:85:44:33:6c:fa:27:
2c:0e:28:4a:02:a3:c9:46:e8:43:56:53:58:be:2f:
4d:73:00:95:8b:d9:d9:e8:3a:ff:4a:94:c6:f1:8c:
bb:b5:2d:e7:93:61:62:b0:55:bf:8e:83:6e:2b:0f:
7f:bb:a6:c1:8f:c1:43:96:72:bf:ba:7e:67:08:45:
da:83:1b:b5:fb:65:7a:f4:9c:2c:71:33:7b:b0:05:
04:af:84:72:19:ee:d3:46:c2:a0:fe:4b:2d:6a:a1:
3c:62:7e:e7:79:55:98:80:71:3a:94:35:67:35:26:
e1:67:50:9c:79:4a:40:95:bd:b8:38:a4:e6:cd:30:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:76:82:04:2C:BB:E6:17:EB:F1:60:64:F9:73:BB:D2:8E:14:DD:B3
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:4a:38:31:3c:f6:e4:9e:93:b4:12:9d:60:7a:53:27:23:2e:
fc:04:26:bf:16:6a:6d:6f:0a:fc:cd:67:ab:9f:69:94:cc:e0:
a5:54:9c:e9:14:27:1b:6c:0a:20:2c:df:8a:d9:c5:c0:09:b3:
b0:4c:fe:54:7c:6d:fb:b1:38:83:6d:f5:50:2d:bb:0c:eb:2d:
eb:84:6d:10:52:de:b1:77:9b:ff:65:97:32:6b:cf:af:da:db:
aa:43:ca:31:44:de:3d:93:8d:de:b2:1b:c6:09:89:fe:26:e9:
1a:57:e0:af:f3:d0:a3:a7:90:58:57:7d:43:8a:0e:df:f9:6c:
90:8d:d2:1a:1b:f3:9b:95:54:12:37:ba:73:d0:4c:c5:e0:65:
37:76:62:a3:6d:8b:9c:7f:44:5a:1a:cc:34:4c:99:d9:16:5e:
da:22:c9:05:eb:da:0a:f4:9a:8a:c9:5d:fc:a4:73:1d:ed:79:
c7:db:be:b4:26:60:d7:14:c1:02:96:ba:fa:03:b0:6c:c8:2f:
79:9c:09:a0:81:eb:38:85:7c:96:81:83:43:d4:4e:fb:a7:2c:
53:02:7f:33:d5:9b:db:b7:bd:2c:3a:92:41:dd:4a:b7:ae:49:
43:11:ae:b3:02:46:8d:cf:b1:cf:72:0d:a0:9d:0c:40:d7:a8:
8a:7b:30:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:56:22 2026 by rpki-client