Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: K6ctrBWespwS90mofdbHxrhGX9gC36oS9GWH8N2CP0I=
Subject key identifier: 45:47:97:B5:04:F8:59:C6:99:12:BE:B5:B7:6D:E5:D5:DA:B4:A3:80
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 01A1871B22E29AE3B62B488706AD305E4B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 07E5
Signing time: Thu 29 Oct 2026 10:01:04 +0000
Manifest this update: Thu 29 Oct 2026 10:01:04 +0000
Manifest next update: Fri 30 Oct 2026 10:01:04 +0000
Files and hashes: 1: tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa (hash: 3SzovpialpEoSK1tVIj0K+EFB6CyFsxOHbtKDkoQSb8=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: jTWt7nDlA+Uzf4wbwITQnb0zPKTux6CvWlRGDFWkTTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:1b:22:e2:9a:e3:b6:2b:48:87:06:ad:30:5e:4b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: Oct 29 10:01:04 2026 GMT
Not After : Oct 30 10:01:04 2026 GMT
Subject: CN=454797b504f859c69912beb5b76de5d5dab4a380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e6:28:fb:e9:d0:1b:8f:b7:72:63:8c:ef:2f:
0b:bf:f3:ad:0d:fb:fd:69:58:81:43:b4:8e:bc:6f:
91:db:1d:de:33:f1:f1:41:f5:5e:bb:f8:99:5a:ba:
21:4d:36:12:54:46:3f:72:c7:ca:cc:78:d5:d3:27:
df:bb:d7:37:fa:50:7e:89:cc:48:d2:2c:e6:34:d0:
ad:a8:b7:4d:45:81:98:ee:5f:25:c8:25:16:6f:b0:
e6:3f:80:50:c3:5d:32:a4:cc:36:48:92:cc:4d:aa:
61:75:55:d7:69:4a:9e:b0:8d:79:76:a0:f9:1c:f0:
cf:73:fd:1d:23:38:95:ee:a4:e4:e7:c7:bc:10:26:
a5:6b:01:22:38:7e:c0:ec:e8:3a:b2:db:5e:1c:fc:
55:b1:3a:3d:23:e5:4a:36:4e:4f:f1:4e:74:e4:03:
26:c7:0f:ef:08:5a:21:11:bd:e9:7f:8e:82:b3:e4:
a2:27:b9:f7:c2:0f:80:c3:4c:71:74:4e:ce:91:1f:
22:73:d3:c4:a9:e2:b0:e3:b5:19:f1:19:c6:70:c0:
05:60:1b:1c:42:b7:c4:79:40:5e:ed:98:48:86:eb:
2d:cf:1f:26:ad:ae:43:cc:df:7e:6d:d8:aa:7a:2f:
8f:26:38:c1:8f:c0:e7:d8:09:d3:e2:77:68:83:bf:
63:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:47:97:B5:04:F8:59:C6:99:12:BE:B5:B7:6D:E5:D5:DA:B4:A3:80
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:23:82:2b:82:80:f1:7a:e1:82:f5:56:22:36:6d:81:3c:be:
66:4e:6c:62:a2:29:df:16:b4:f6:c1:d1:5a:6b:df:03:88:c9:
8d:eb:bc:28:6e:8f:f9:97:a8:7a:22:df:27:a6:9f:90:8c:4f:
b3:fe:2f:05:bb:1a:2b:0c:24:c2:9b:ba:41:e9:25:ff:27:09:
67:53:7e:93:7a:b1:e2:b7:11:f1:c0:cd:a2:8d:b3:fc:8b:68:
9c:d9:e7:f9:74:f4:c9:30:c3:0a:f6:90:f2:3a:32:99:d5:19:
f2:16:2b:cb:f1:79:bc:f9:13:f4:2f:8d:c1:d1:77:b4:3a:15:
bc:a5:2f:11:fd:9e:e2:a1:71:be:f2:ed:8d:cb:6f:a3:6a:32:
7c:00:7b:8c:af:e6:8d:70:9b:f1:a5:6b:06:d8:b7:6b:22:13:
d3:24:0b:b8:57:9d:e6:f6:4f:d1:6c:74:83:e0:2d:6e:07:f1:
0c:e5:45:78:6d:17:c6:34:81:bb:aa:3e:ff:f6:33:84:8e:d9:
64:a2:84:68:6b:43:3e:a8:2d:14:fe:51:6b:c0:69:bf:f0:e0:
ec:98:a4:46:37:db:98:17:e1:50:c3:70:8d:ad:8b:1d:06:d3:
40:35:d4:bb:7f:1d:f8:bd:fd:93:c0:43:1b:5d:86:71:6a:ef:
14:83:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:55:51 2026 by rpki-client