Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
File: XvExXDySOejh9KoMWwdDw9pdd-M.mft (raw, json)
Hash identifier: TWjEai8YppMDjcx0DQPFjQU2gHKTL7UKfQpIMlY6fKw=
Subject key identifier: C5:A1:F8:38:80:A9:FE:8A:A6:52:78:B1:C3:E7:99:A0:6B:0D:46:2E
Authority key identifier: 5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
Certificate issuer: /CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Certificate serial: 01A181BEB62734ED79613AEA3F10FA3AF86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
Manifest number: 0946
Signing time: Wed 28 Oct 2026 09:02:01 +0000
Manifest this update: Wed 28 Oct 2026 09:02:01 +0000
Manifest next update: Thu 29 Oct 2026 09:02:01 +0000
Files and hashes: 1: XvExXDySOejh9KoMWwdDw9pdd-M.crl (hash: UqI73leEB9LULr6n3aXioRaY8jEv6Xc9gwo09SOUWJ8=)
2: uhPXDNK9DwvaVzBP6prWtUmbJDw.roa (hash: DW1tiuzv/wvBgNUqtlXS5C2dFHnxlOJB3QKVHksHsN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:b6:27:34:ed:79:61:3a:ea:3f:10:fa:3a:f8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Validity
Not Before: Oct 28 09:02:01 2026 GMT
Not After : Oct 29 09:02:01 2026 GMT
Subject: CN=c5a1f83880a9fe8aa65278b1c3e799a06b0d462e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:a4:3a:a0:fe:cc:8e:07:ed:55:c4:92:ec:
06:39:55:75:f0:da:bb:93:68:38:48:2f:0a:c2:50:
49:0e:83:77:ad:db:e3:b4:8f:0d:91:47:38:d4:a0:
7f:47:db:0a:4c:c1:08:5c:20:98:f7:df:49:26:17:
c5:a2:54:7c:73:ce:1e:b2:46:c8:9e:dd:24:d5:ef:
ed:54:87:24:f1:1b:a0:06:ae:8a:77:79:6b:3c:27:
ac:e2:56:49:dd:78:2a:01:ec:17:ba:de:3f:13:54:
40:28:43:53:4e:2c:05:75:23:0c:a6:26:84:61:ac:
af:6f:14:28:1a:e3:2a:36:c2:e7:9d:32:98:c6:b5:
07:c4:56:32:72:38:0d:d8:ca:71:86:3b:7d:72:14:
f8:b2:8d:b5:97:af:bc:e6:45:09:76:84:07:80:37:
06:73:49:1d:8d:67:e9:45:c1:dd:db:01:17:98:2e:
bb:d4:02:02:1e:ea:ef:73:cf:84:75:5a:a7:9a:fe:
e1:89:b3:62:8f:7b:5e:8a:a5:4f:1f:31:75:19:5f:
8e:a7:fb:66:c1:9e:c7:37:45:9f:cc:c8:34:d1:31:
c1:70:85:9c:1d:db:b1:88:d2:fe:8d:50:26:47:64:
b9:56:76:84:24:0f:09:40:e3:78:8f:fb:a3:f0:4d:
ee:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A1:F8:38:80:A9:FE:8A:A6:52:78:B1:C3:E7:99:A0:6B:0D:46:2E
X509v3 Authority Key Identifier:
keyid:5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:39:5c:93:e8:6e:1f:09:8a:a5:e9:a4:67:8a:c8:f8:13:74:
a7:0e:7c:41:60:27:5e:14:ec:05:58:7b:78:7f:79:f1:a5:0d:
08:81:10:7b:e4:c9:90:a0:7d:b9:ca:b9:f3:71:29:90:5d:00:
05:3e:a1:4f:01:03:1e:56:69:72:6c:fa:1e:0b:3d:48:39:3b:
f2:c4:aa:1c:32:e4:4f:b5:83:4b:54:c7:d4:a2:e9:0c:8a:fe:
74:8e:c6:02:d1:d9:bd:4c:b2:8d:98:d3:e3:4e:47:78:4d:3d:
d4:d4:79:4e:e5:54:5c:51:df:2c:e0:af:c3:6b:6d:13:0e:77:
8b:2b:b0:b1:38:45:ff:a1:48:3a:3d:65:c7:f8:b0:45:29:fe:
77:f6:49:00:51:38:ac:83:48:aa:79:0f:2c:a3:f2:1d:63:9f:
c8:1a:1b:8f:1c:83:c6:dd:09:bf:91:8e:5f:a2:08:f2:54:e0:
a0:42:be:75:33:30:a3:d9:72:b9:f4:32:17:0c:3c:51:40:4a:
fb:b8:10:ac:a5:aa:20:7a:07:1c:88:67:48:b6:ef:38:4f:57:
0b:10:d4:9f:4b:86:bb:2a:96:81:29:60:0f:b6:57:fd:8a:6c:
d1:89:60:d5:7c:7d:99:ca:c0:15:88:11:02:f1:cf:a2:82:f1:
fb:62:89:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:45:30 2026 by rpki-client