Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
File: XhP-KBZzV0iLUE_qxGll0U23upw.mft (raw, json)
Hash identifier: cy2PePyK6G69n0bH7+8S2Bsje/VR0pFxUnZIClKbs60=
Subject key identifier: 93:26:75:F6:1F:0E:95:83:3F:31:E5:25:8C:F7:2E:CA:DF:63:83:C9
Authority key identifier: 5E:13:FE:28:16:73:57:48:8B:50:4F:EA:C4:69:65:D1:4D:B7:BA:9C
Certificate issuer: /CN=5e13fe28167357488b504feac46965d14db7ba9c
Certificate serial: 01A10625BE0A3E597857D8B8B486F2156327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XhP-KBZzV0iLUE_qxGll0U23upw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
Manifest number: 0101
Signing time: Sun 04 Oct 2026 09:01:39 +0000
Manifest this update: Sun 04 Oct 2026 09:01:39 +0000
Manifest next update: Mon 05 Oct 2026 09:01:39 +0000
Files and hashes: 1: OsWqV5kxvLO3zxITMBJcQ1-SzWo.roa (hash: JSe4ZxDgFulyfZ8DBgoN9opn6yDV2vfR5CfVXcGr6vA=)
2: XhP-KBZzV0iLUE_qxGll0U23upw.crl (hash: 7DNeZxTpMcWe2/2Kb2DIZPta4JysT/QB7HJjnUNL0vY=)
3: eZbZTXWIEfvwIX9vrH3W1UJ6wb4.roa (hash: UarGyxZlxuTDN6MQKGhHWE7FjSFEv7rUD+yerIHdN7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XhP-KBZzV0iLUE_qxGll0U23upw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 09:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:25:be:0a:3e:59:78:57:d8:b8:b4:86:f2:15:63:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e13fe28167357488b504feac46965d14db7ba9c
Validity
Not Before: Oct 4 09:01:39 2026 GMT
Not After : Oct 5 09:01:39 2026 GMT
Subject: CN=932675f61f0e95833f31e5258cf72ecadf6383c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:fe:35:90:1c:0b:45:68:6e:c0:4c:1e:9d:
8d:7b:df:1b:db:f4:19:f3:ea:03:26:fb:66:d2:04:
c1:62:9d:a8:bd:81:d0:8e:b0:5f:8b:0f:d7:1d:73:
5f:a3:7c:80:9c:ce:6e:a7:d5:3b:ed:22:b0:ac:9e:
6e:5e:1b:2d:12:97:87:74:27:f8:8d:b5:08:52:cb:
2c:48:16:fb:75:7f:cc:de:50:09:17:25:c4:22:f0:
ba:74:8d:54:1c:6c:ce:e1:6f:a9:e1:5b:a9:f3:b0:
65:0f:07:18:c2:b7:90:f3:30:61:18:b3:ed:9c:fd:
2e:83:4c:8a:a3:ce:f0:29:8a:4a:34:07:2a:eb:24:
f5:24:6e:9f:cb:4a:fd:fa:8d:7d:67:03:74:8e:9c:
0b:d7:c7:e9:98:ec:d6:4d:ab:25:b5:7d:2d:e6:94:
b2:c2:1f:86:ab:2f:54:fa:c9:1f:db:8a:c1:c3:b3:
70:1f:9b:4b:7c:5e:a1:95:ae:c0:05:3a:11:66:4d:
dc:7d:dc:9b:31:f5:d6:a6:90:bd:28:72:67:fe:2e:
22:61:0c:27:80:ab:9a:dd:7b:9b:77:06:71:9f:00:
6d:0a:df:b7:49:9d:5d:cd:0e:50:16:b5:2b:9a:dd:
03:eb:9e:33:4f:11:71:88:10:58:5c:10:18:13:ad:
3f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:26:75:F6:1F:0E:95:83:3F:31:E5:25:8C:F7:2E:CA:DF:63:83:C9
X509v3 Authority Key Identifier:
keyid:5E:13:FE:28:16:73:57:48:8B:50:4F:EA:C4:69:65:D1:4D:B7:BA:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XhP-KBZzV0iLUE_qxGll0U23upw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a3:2d:75:1a:d5:84:08:53:5b:b8:41:72:1d:57:79:e2:5b:
76:64:6d:91:cf:f8:b9:91:f6:a2:c2:9c:c0:48:19:75:e0:ab:
3a:a1:3b:1a:33:08:7d:92:ee:2b:ad:5c:bb:43:15:e9:e2:5b:
a8:80:32:f7:86:4b:66:8e:b4:2e:7c:d3:ef:2c:5c:6a:c4:02:
e3:9c:ab:56:f7:70:26:4e:e1:7a:7c:78:94:b2:f7:19:f2:1c:
f5:08:9b:97:c3:c6:f1:e5:94:7f:6e:ea:d3:31:68:67:83:21:
ed:73:77:0d:4f:b0:a2:ad:16:8f:d3:46:f3:0c:d5:8b:3a:1c:
68:58:45:1d:b4:ba:02:8d:07:e2:26:c8:3b:3e:73:ba:b1:ab:
31:79:5a:9d:53:73:c2:91:7f:95:96:71:3b:95:c0:e9:1d:6d:
a2:61:80:ab:fe:e4:e0:b9:4b:70:cd:6b:2c:86:14:b9:12:fa:
17:38:02:76:74:76:d5:10:53:22:25:5b:51:a2:d1:73:ce:b9:
23:ff:f7:73:b5:c7:52:b5:a7:87:15:23:07:fc:6f:32:2c:f3:
75:39:0a:d8:b4:0d:97:c8:13:50:cb:58:d1:18:b6:3c:cb:13:
91:da:c3:1e:ef:e5:bd:89:3f:c3:2d:1c:0b:0c:66:04:7e:c8:
f9:31:43:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:38:21 2026 by rpki-client