Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
File: Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft (raw, json)
Hash identifier: LiZqnJnT+/iMO2Fx4ncuIOc0j1wU8jNAYyiI1wtg2VQ=
Subject key identifier: 4F:0F:82:50:C5:37:C1:B5:EA:AE:DA:CD:8D:5D:CE:F4:BF:56:9C:FB
Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
Certificate issuer: /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Certificate serial: 01A11B999D684707ADECEF698B62D77E41D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
Manifest number: 1A96
Signing time: Thu 08 Oct 2026 13:00:14 +0000
Manifest this update: Thu 08 Oct 2026 13:00:14 +0000
Manifest next update: Fri 09 Oct 2026 13:00:14 +0000
Files and hashes: 1: 7_n1YNS1aUe0Bo_pCtHt0pUhIqw.roa (hash: xzYsTyhKWQal1xfqWksT1weyCxFWFp7bUNSd2LqW3lA=)
2: Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl (hash: Sitwrz8eXO4RhKPHIBeD+ziuLrEao1dWPXavhCTdVq8=)
3: qMmguo9Z2V-BC5t7evoX7K1Fbss.roa (hash: V408yrY8gn/eWE6bGQXHDcnC3POLPttI1BvbFvBLTFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:99:9d:68:47:07:ad:ec:ef:69:8b:62:d7:7e:41:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Validity
Not Before: Oct 8 13:00:14 2026 GMT
Not After : Oct 9 13:00:14 2026 GMT
Subject: CN=4f0f8250c537c1b5eaaedacd8d5dcef4bf569cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c6:e9:05:f1:0d:36:85:51:bb:0c:dd:c2:d3:
4d:80:6d:46:56:15:9c:31:2d:78:ce:29:a0:43:06:
43:f2:c5:36:eb:d5:0f:55:a2:6b:3e:e5:ae:86:dd:
45:37:f0:ef:5c:93:ca:17:92:d2:31:6e:ee:ba:91:
dd:76:e2:8e:4c:24:4b:ed:e9:1d:b1:6f:e5:6e:17:
b6:f5:80:86:1f:e4:5a:71:39:82:fe:1b:68:36:f9:
5d:84:e6:13:3e:39:9e:77:d6:c6:2f:b5:bc:16:8c:
04:73:33:4b:6c:d2:b8:5f:f5:9e:d4:d8:8c:21:ac:
fa:f6:eb:ee:e7:43:9d:86:2a:06:d9:cd:ed:db:51:
ff:29:49:65:e1:e5:53:b1:1b:09:98:fd:48:25:96:
62:08:ac:63:2e:67:c8:80:2e:62:0f:cf:8b:45:2b:
31:d5:eb:89:5e:ab:d2:5e:e3:d5:2b:d5:9b:83:57:
b3:1f:85:d7:54:df:50:fa:56:46:dc:b8:c1:28:87:
87:b2:ac:5e:1e:9b:d2:55:2a:64:10:0b:5c:70:55:
6c:bc:5b:5b:fa:1d:c2:6f:6b:04:73:2e:37:fe:c4:
e3:d3:c5:a1:ce:25:c4:46:c7:c8:99:63:1e:64:8d:
c9:4b:75:93:d6:09:46:18:f3:f6:1a:4f:b8:eb:28:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0F:82:50:C5:37:C1:B5:EA:AE:DA:CD:8D:5D:CE:F4:BF:56:9C:FB
X509v3 Authority Key Identifier:
keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5f:36:4d:98:9e:29:05:27:51:f2:49:2e:64:a9:52:73:99:
64:97:65:15:c1:e7:a8:36:85:a0:6e:94:55:fb:00:54:18:2b:
00:84:c9:52:df:8e:97:fd:8c:c4:ea:fe:4d:32:56:07:fb:70:
58:95:67:89:b2:b7:e7:1f:a5:74:9c:6a:c2:88:fb:51:3e:fc:
db:b8:f8:48:21:d4:31:cc:74:5a:fe:0f:09:c2:67:1e:2b:fc:
35:7d:58:f3:45:da:25:30:77:7c:42:56:d5:3a:70:9f:e0:cb:
56:44:58:c8:75:70:a0:4f:e9:6d:a8:15:9e:42:5a:12:01:8d:
7e:ed:bc:17:0d:51:78:ad:1f:d3:b9:c0:e6:26:9b:01:96:a0:
dc:0e:a4:00:a5:a0:74:33:85:15:f5:7a:1e:24:c3:77:b7:4c:
17:7e:da:6b:20:cb:84:df:3d:19:3c:bb:68:84:0d:99:12:13:
ab:16:ca:cd:a9:45:40:14:7a:f3:03:6d:08:0f:1d:b2:46:67:
e2:74:54:67:08:de:c1:0d:b6:3c:79:b2:9d:de:23:f9:9d:9b:
6e:12:4a:3a:27:96:8d:4b:68:52:51:16:89:da:14:8f:90:7e:
13:df:04:92:6f:61:48:71:a5:f5:73:3e:35:7e:a4:61:08:36:
8b:e5:ec:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:04:53 2026 by rpki-client