Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
File: XQwn-FWB4ue94MmPvVS-HUlnBRc.mft (raw, json)
Hash identifier: 3lGICB83O4/hWuIm3hTgcrY7lddwoZNBnpKmXhHZGb8=
Subject key identifier: 0C:73:E7:CD:55:36:4E:A3:40:D5:7F:A9:E8:3F:D1:DA:88:89:93:43
Authority key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
Certificate issuer: /CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Certificate serial: 01A181191C847D07F29702718651FEFDDB9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
Manifest number: 1AC8
Signing time: Wed 28 Oct 2026 06:01:08 +0000
Manifest this update: Wed 28 Oct 2026 06:01:08 +0000
Manifest next update: Thu 29 Oct 2026 06:01:08 +0000
Files and hashes: 1: XQwn-FWB4ue94MmPvVS-HUlnBRc.crl (hash: pDEJ9Ka7Fw+uDf/K+/eyHsWLcHPX16bxk2Lvtsjg7yk=)
2: vnF9EvcfI-7kYq34-IY7bnUdmlo.roa (hash: W8m5Gh0nOl5EVAy+/ig/+nvn/Z9/xuqglmDOFhR3bg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:19:1c:84:7d:07:f2:97:02:71:86:51:fe:fd:db:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Validity
Not Before: Oct 28 06:01:08 2026 GMT
Not After : Oct 29 06:01:08 2026 GMT
Subject: CN=0c73e7cd55364ea340d57fa9e83fd1da88899343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5f:c8:95:32:f9:bb:9f:f5:f5:d0:ab:7d:ca:
24:9d:ba:28:8f:a7:13:11:a2:75:3c:68:e4:79:f6:
38:0d:38:cd:4d:b2:7a:34:63:f3:f5:46:d3:dc:67:
c0:49:8c:da:f9:e4:d1:f6:d0:00:95:3f:d5:b4:ab:
99:3f:df:9e:b6:bf:d0:62:25:d5:93:aa:24:7a:73:
0f:6c:b6:e8:cf:19:f4:89:97:61:34:df:37:38:4c:
45:90:4a:af:12:76:b3:f4:5a:64:7b:cc:dd:73:a2:
f0:db:8f:1f:50:a5:33:ec:0c:5b:c1:53:9f:a9:9c:
5c:d0:cf:21:0b:da:89:59:62:b3:3b:5d:6c:f4:c0:
8e:e1:60:ce:5e:ee:c0:eb:60:70:55:54:d9:ae:04:
1d:7f:44:34:33:8f:da:ce:02:13:8d:06:e3:1a:e3:
1a:67:00:29:e4:39:0c:8a:73:fa:b9:99:ea:bd:86:
db:14:e2:3f:cd:1e:b5:6c:60:9d:a6:6f:57:10:2d:
b4:99:53:9a:02:0f:4c:06:a1:19:c3:0c:7a:b9:2e:
0d:d5:10:75:cc:53:19:e9:cf:e0:1d:bf:2c:ad:12:
78:05:86:98:bc:64:8a:4e:4b:04:37:71:9e:a2:bb:
8c:4f:b4:67:bd:f1:11:1a:11:c1:ac:26:24:43:d4:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:73:E7:CD:55:36:4E:A3:40:D5:7F:A9:E8:3F:D1:DA:88:89:93:43
X509v3 Authority Key Identifier:
keyid:5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:31:90:92:c5:97:42:d9:0f:ce:69:78:02:3a:d8:98:e9:7a:
c4:e4:d9:73:c1:8c:60:4b:b2:c0:4d:23:b4:cd:e6:17:33:0b:
6e:48:25:d3:9d:25:08:59:6e:45:61:94:3f:21:47:90:74:e2:
68:d5:49:3d:06:e4:0c:15:ea:9c:7d:5e:d1:60:2a:4f:19:cb:
4b:c8:5c:0e:23:43:d0:d0:e9:7b:8c:26:58:91:7f:ad:4d:68:
28:a0:a2:6d:f4:52:73:ac:c9:d8:c9:2e:f1:7e:fb:2b:d4:d1:
e0:3e:40:8e:8d:3b:7c:f5:39:20:ab:4f:37:a0:16:e7:27:6c:
5f:c0:ef:c5:92:77:d9:33:d6:d6:7b:09:d9:13:6c:bd:97:7d:
99:f4:5d:a0:d7:ef:ea:00:92:10:55:fd:13:f3:24:e8:ca:77:
7c:b6:c8:e9:76:49:7d:00:7a:77:dc:83:53:b7:df:27:10:75:
8d:a1:f3:c5:08:bf:f2:da:a5:29:e7:19:32:55:85:e7:f8:ed:
db:61:90:7c:3c:51:c7:f8:7c:4c:00:3e:7c:41:79:44:3e:f7:
97:71:65:c2:96:a0:a4:0f:c4:38:98:c3:2d:15:c5:dc:96:01:
b3:1a:35:38:e0:2c:e6:64:f3:08:7c:2a:df:0f:40:c6:f7:52:
34:10:c5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:40:35 2026 by rpki-client