Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
File: XWMX9pNua1eLOMPfsZgCVJj8rqE.mft (raw, json)
Hash identifier: JLrupcxy/cXj3e9qACMhxWLKMpSZTfvYLZEL3ce8sg8=
Subject key identifier: FC:01:20:3A:B3:3C:A8:1C:AA:94:AA:0B:0D:B1:10:47:84:66:D9:FC
Authority key identifier: 5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
Certificate issuer: /CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Certificate serial: 01A17C290964BC168FC597DF5C8ADC39D18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
Manifest number: 0A15
Signing time: Tue 27 Oct 2026 07:00:26 +0000
Manifest this update: Tue 27 Oct 2026 07:00:26 +0000
Manifest next update: Wed 28 Oct 2026 07:00:26 +0000
Files and hashes: 1: XWMX9pNua1eLOMPfsZgCVJj8rqE.crl (hash: gIC/IKsWkrqipOC1gWJB/N9MEUnANdu94I7s8Ev+cKg=)
2: ap-hePAObGM0xD9pl1yT2LqZzQg.roa (hash: mxBd1kBKjM1E0LiaQSAHHf7cP2igd3O8Gy2yRTKiPCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:09:64:bc:16:8f:c5:97:df:5c:8a:dc:39:d1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Validity
Not Before: Oct 27 07:00:26 2026 GMT
Not After : Oct 28 07:00:26 2026 GMT
Subject: CN=fc01203ab33ca81caa94aa0b0db110478466d9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:cb:f4:93:d2:88:38:e1:b2:90:89:67:33:
74:40:29:6f:9e:6f:8d:ea:62:0f:48:dd:6d:db:b9:
c4:a2:45:5b:0b:2d:8a:db:1d:f2:1f:b2:1c:95:fa:
89:bc:a0:7b:69:e0:eb:68:e3:f7:ba:06:6e:d8:61:
a8:58:71:e8:2b:a1:d7:68:44:d9:55:fc:03:90:0a:
06:63:8a:6d:14:ae:7f:99:41:64:60:04:6e:da:05:
02:21:0e:de:20:e4:07:04:ab:72:39:19:89:e4:ce:
81:53:d1:e0:bc:55:54:85:f3:7b:06:bf:ea:e6:d0:
81:ee:1f:31:a6:1a:36:fd:c9:e3:8c:a7:71:48:23:
5f:2a:bc:1d:72:b2:f9:b4:f8:88:e0:eb:f6:6f:64:
a4:46:b5:bf:51:67:5f:1e:c5:2f:2b:22:34:85:2d:
6f:6d:3f:d8:45:f0:ff:5c:06:ef:bf:2a:fc:fa:ff:
d0:91:c9:1a:1d:65:a0:ef:6c:84:95:6a:13:0a:64:
49:c0:fa:53:6e:3c:6b:f4:56:00:84:09:70:2e:dc:
5a:31:82:03:29:87:22:b0:07:2c:e5:7a:50:c5:42:
5d:80:7a:2c:0e:75:e6:5e:6b:7c:a2:61:e0:3f:8d:
f8:72:7c:1f:1c:e0:f4:b6:8f:f1:a9:65:0f:1c:8d:
d0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:01:20:3A:B3:3C:A8:1C:AA:94:AA:0B:0D:B1:10:47:84:66:D9:FC
X509v3 Authority Key Identifier:
keyid:5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:64:45:f0:cf:35:c6:d9:fe:55:82:c5:c2:08:8e:32:66:68:
ad:55:3a:78:28:26:f0:0e:bf:8f:16:fd:46:9e:3c:72:c0:b3:
68:d8:44:c8:21:5c:a4:1e:39:77:3b:31:76:d1:86:38:7a:5b:
5d:a9:bb:64:ad:7c:68:88:e3:d5:67:2c:ca:bc:fc:9d:f6:84:
ca:1a:96:1a:13:c0:71:62:d2:b8:c0:f9:a6:44:79:89:3d:5e:
a3:8e:43:d8:f8:aa:8f:c3:c1:c1:9c:cb:5a:02:9b:cc:02:44:
4b:7a:ee:7f:ca:5e:4c:ad:bd:fd:88:cd:62:70:31:9a:8a:bd:
d6:5b:9b:08:31:10:15:ba:d3:93:6c:f1:77:30:14:91:f2:7a:
df:df:6f:0e:9c:ab:cf:bb:22:a0:3e:4f:fc:d0:57:f2:5d:67:
16:4a:73:94:29:cd:3b:ae:e8:9c:f3:b1:58:d5:dc:b9:5a:26:
07:63:bb:44:8a:59:97:a7:9f:e8:28:1c:f3:38:25:e5:39:86:
92:45:9a:a0:9a:a6:e3:b5:53:f6:93:3e:83:39:0a:70:94:76:
2d:b0:4f:16:89:90:dc:75:ad:ec:9f:a8:0e:80:eb:ea:a1:68:
81:a0:cc:21:f2:16:c5:fe:85:0f:2a:6f:0e:c9:d3:1e:c7:a8:
da:ec:db:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:43:39 2026 by rpki-client