Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
File: XlFUwaEL4eJaptT4rvpGrTH5uW4.mft (raw, json)
Hash identifier: W4JfKNqbOI4KB+msNT5mXl2RbJPO15NA5XEs2yk5SoQ=
Subject key identifier: 64:73:32:9C:C5:5B:CF:F2:0F:25:7D:FD:53:EF:78:D1:98:F0:16:E8
Authority key identifier: 5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
Certificate issuer: /CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Certificate serial: 01A16A23C9322D2249D2FA38372E828F207B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
Manifest number: 028C
Signing time: Fri 23 Oct 2026 19:01:32 +0000
Manifest this update: Fri 23 Oct 2026 19:01:32 +0000
Manifest next update: Sat 24 Oct 2026 19:01:32 +0000
Files and hashes: 1: XlFUwaEL4eJaptT4rvpGrTH5uW4.crl (hash: 2TZDsBHYFy9yH0YfXZpYnzCOFfeaAEeEwF3q0NEbHyc=)
2: y9CLGthskm4bnZl6iRpadOOvcw0.asa (hash: 4oKFMMI1txxJcbOTwatF9YPUQxB0wLl2gg3DiiRkr5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:23:c9:32:2d:22:49:d2:fa:38:37:2e:82:8f:20:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Validity
Not Before: Oct 23 19:01:32 2026 GMT
Not After : Oct 24 19:01:32 2026 GMT
Subject: CN=6473329cc55bcff20f257dfd53ef78d198f016e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:43:77:a1:3e:6e:59:ec:38:4e:d7:ce:8d:
40:f4:5c:cd:90:47:af:61:e9:d8:81:c1:2b:8f:33:
a6:8c:c7:07:ec:78:2b:b6:20:ef:73:55:7b:00:70:
5c:71:02:b4:a4:9f:9f:a4:77:25:58:23:1d:cf:49:
14:81:ed:1f:fb:e7:1f:6c:01:a6:6f:fe:f1:86:e3:
22:78:1e:6b:38:28:10:5e:48:ee:42:cb:76:e4:42:
15:6f:01:db:d8:25:64:ef:6a:c2:37:32:40:08:54:
d7:23:d8:04:6b:3a:27:0b:13:52:38:42:9c:27:fe:
10:f1:0c:b6:5a:a4:d0:93:09:9d:af:a7:f5:2e:87:
6f:49:4a:e1:98:74:dc:3d:1a:df:2a:e8:7d:eb:df:
25:fc:17:6f:42:9e:5e:94:43:4a:cb:ab:50:0a:47:
5a:16:c9:0d:fd:f7:0a:3b:34:eb:42:ce:c2:17:cf:
8f:25:f9:28:99:c7:88:ad:b2:f8:43:fa:bf:c5:e4:
d0:49:8b:ac:c0:0d:7e:bd:87:7b:92:ad:ff:31:aa:
10:4e:a3:c6:22:58:88:92:19:40:83:63:df:cb:c2:
0c:59:6e:7b:49:9e:f1:06:ec:71:97:b8:8c:ec:e3:
6d:85:3e:c4:21:2d:ae:e6:ed:aa:e2:d8:24:9d:8e:
ab:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:73:32:9C:C5:5B:CF:F2:0F:25:7D:FD:53:EF:78:D1:98:F0:16:E8
X509v3 Authority Key Identifier:
keyid:5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:74:ed:f9:6d:fc:40:68:b3:80:1f:e8:e2:90:dd:fc:58:0d:
c6:c2:19:28:6a:c2:59:a4:31:1c:e7:98:bf:80:cd:69:ee:f5:
c6:74:bc:6d:49:a8:73:ae:05:dc:ef:26:1b:62:71:73:93:04:
bf:f3:a9:a6:c4:a6:f7:1b:c3:a3:96:01:eb:ba:1a:af:5b:66:
7c:a4:b7:13:aa:37:9e:8a:79:57:34:5e:9a:ef:5a:67:8b:93:
c2:ee:e0:9d:63:8f:f9:d8:76:cb:28:9f:27:2c:44:a0:94:05:
5c:87:3b:4a:3c:01:43:48:d1:65:b9:84:b0:99:65:fd:23:21:
6b:3a:c2:65:07:ec:5f:8a:63:3a:63:85:be:c0:33:23:96:bc:
d3:bd:59:52:7b:bb:42:77:05:6b:95:c1:80:5a:ce:23:c0:6c:
e1:10:9d:ae:91:2d:1c:fb:45:70:87:a4:8a:bb:da:7a:17:07:
4b:e3:ce:0d:75:dc:64:0b:67:b0:8e:d7:1d:9b:31:e9:08:93:
82:f0:29:30:f2:5b:71:32:af:b2:ec:b3:b4:c0:cc:c1:de:10:
be:e6:c3:4e:d2:35:18:08:43:1f:b5:a8:e1:78:95:b3:49:b7:
fd:db:97:dc:a2:6c:b7:ae:0a:49:f2:cd:14:fb:b6:01:82:6b:
05:71:41:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:23:37 2026 by rpki-client