Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
File: XTsXLoFhyBzo6VSv01pzsvrQuzo.mft (raw, json)
Hash identifier: HlY8OhUubYLazDzoGhfmXp0/2MYIRiwjH6GClt6p++o=
Subject key identifier: 67:25:E8:8F:9A:E1:39:22:D4:47:6E:60:2E:3A:DE:3D:35:04:3E:4D
Authority key identifier: 5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
Certificate issuer: /CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Certificate serial: 01A17F61D07DF8CA2FAEB85718EB26E60AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
Manifest number: 0D54
Signing time: Tue 27 Oct 2026 22:01:19 +0000
Manifest this update: Tue 27 Oct 2026 22:01:19 +0000
Manifest next update: Wed 28 Oct 2026 22:01:19 +0000
Files and hashes: 1: XTsXLoFhyBzo6VSv01pzsvrQuzo.crl (hash: aAoCayJJ9o2QSaWMyVMkZCJuFZRVm+4APDdETwofjec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:d0:7d:f8:ca:2f:ae:b8:57:18:eb:26:e6:0a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Validity
Not Before: Oct 27 22:01:19 2026 GMT
Not After : Oct 28 22:01:19 2026 GMT
Subject: CN=6725e88f9ae13922d4476e602e3ade3d35043e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:a9:5e:09:7e:01:89:2b:b2:60:21:ba:6c:
7e:1b:2b:c5:a9:af:70:c5:a3:6c:bb:97:86:fc:de:
b3:ec:7c:35:94:a7:7a:be:8d:79:f2:75:44:03:cb:
a0:67:f1:c1:d0:a7:4c:70:fb:9e:65:56:96:2b:bf:
3f:86:b2:51:1b:4b:57:43:7b:01:5d:3d:2e:51:2e:
34:8a:d6:43:0e:38:cc:3c:77:bc:2a:4c:8b:fa:7d:
41:dd:b8:84:7e:64:98:14:7d:3a:6a:d9:e9:eb:06:
68:05:86:b0:14:3b:1b:e3:58:63:29:cc:39:61:01:
2a:0c:a3:4b:d3:a0:5d:49:8a:c6:6f:07:9b:65:54:
f2:33:44:7c:d1:a8:45:ff:5e:d8:92:d8:e9:c3:5a:
5c:77:da:37:ce:a6:ca:be:9a:ec:0b:4e:a6:fb:05:
77:ca:da:ca:6c:27:e6:5f:fe:0d:4e:f9:b4:4d:aa:
5d:d1:4a:0f:38:dc:bc:28:a0:38:f9:6c:65:f1:1d:
6d:d8:d2:e0:b6:c8:c3:cc:40:86:69:6f:53:be:48:
45:cd:13:d6:01:5e:a1:b6:c3:35:d8:72:76:c3:bd:
3c:61:b9:fb:a3:a8:0a:1e:3a:e8:4f:2f:16:a0:c9:
45:70:73:dc:ed:a6:18:a9:3c:21:fa:ca:7a:c4:97:
ea:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:25:E8:8F:9A:E1:39:22:D4:47:6E:60:2E:3A:DE:3D:35:04:3E:4D
X509v3 Authority Key Identifier:
keyid:5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e6:5c:50:77:d6:3c:4a:f2:98:3a:cf:2d:25:13:49:d0:37:
3a:56:c8:68:1a:47:d3:c1:99:d2:6c:d1:05:91:bd:5f:ba:69:
ad:3e:1f:fc:9e:5a:18:69:29:70:f3:76:9c:1b:ac:1b:19:bd:
a2:a8:5c:cd:d5:95:c3:bb:2e:ef:ba:8a:04:53:28:97:1f:a8:
a7:4c:0c:7f:50:91:d4:2a:4f:1f:cd:c4:d5:80:a5:b5:c1:0d:
db:4a:09:f9:6a:0e:79:b8:f4:e9:f6:a6:8b:7d:75:a7:46:b8:
29:69:4c:89:6e:a2:28:43:e7:c2:42:4d:2d:9a:5d:41:31:aa:
57:f8:50:79:d8:90:21:a4:2b:73:a2:1c:d1:91:9f:03:d2:c0:
4a:e2:b1:b6:48:a1:42:82:dc:c4:03:8d:13:90:dc:3f:86:63:
be:05:90:5c:82:fd:51:76:ee:c6:0c:a9:b3:51:4a:b3:8c:81:
24:03:a0:c6:18:5f:c8:13:84:52:7f:30:41:fe:4d:a5:b9:e2:
b2:4a:bb:cb:e9:d0:30:16:82:69:d6:5b:29:ab:b3:7c:a4:ce:
29:cc:eb:89:8c:38:66:be:b7:cf:85:0c:76:2e:3d:a7:89:dc:
7e:0b:a5:2a:2d:32:42:66:12:fd:dd:04:e6:6f:f6:7b:05:7e:
32:55:9a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:18:24 2026 by rpki-client