Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier: 9gFVYX5AbJvqgSCo7ruTDdkvIdbqu6rA1EonjMvHUeo=
Subject key identifier: 8D:D6:5B:5D:6C:D2:9B:23:D7:0C:EC:E8:30:9E:6B:FF:3A:C3:83:70
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 01A17CCF27161B31FA1003804F30B036CE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number: 1286
Signing time: Tue 27 Oct 2026 10:01:53 +0000
Manifest this update: Tue 27 Oct 2026 10:01:53 +0000
Manifest next update: Wed 28 Oct 2026 10:01:53 +0000
Files and hashes: 1: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: iyQIoHNc6kJN63YSM/k7xkgkcqc5gcEKvf/KUKg7dhQ=)
2: jr0yuNLqeK_xhbuJCsSNuRbhB6M.roa (hash: iEdWiLEjiAZO/NJAgyr1vdLHg3AlGR9Y7mg3YwAaB/Q=)
3: txhV4jAB0u0krXb4kFMl_-o4obY.roa (hash: s+N5nLT8dkenkTXD8VPGodvyzkSe6kSpR2hC6MCplu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:cf:27:16:1b:31:fa:10:03:80:4f:30:b0:36:ce:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Oct 27 10:01:53 2026 GMT
Not After : Oct 28 10:01:53 2026 GMT
Subject: CN=8dd65b5d6cd29b23d70cece8309e6bff3ac38370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:d1:b6:7d:3a:d1:c4:0d:4b:39:61:46:d9:
29:e1:c6:70:4b:9d:80:64:f6:40:01:3c:49:da:ad:
63:57:c7:5f:be:af:68:e7:5b:95:26:40:05:d3:17:
dd:87:97:29:be:88:12:60:d2:33:c6:61:10:25:2f:
ef:cb:dd:98:40:da:97:af:31:38:25:91:09:cc:5b:
cb:60:5e:f4:d3:e2:ea:c2:34:15:79:8c:5d:0f:4c:
a7:a5:9a:f5:1e:c9:22:64:14:33:d1:4d:e2:21:ca:
79:f7:2c:99:67:25:10:0c:67:72:01:ad:dd:60:c2:
e2:79:82:51:27:4a:a1:e2:ad:61:d4:52:29:b4:0a:
d5:b3:dc:c5:11:64:2f:d0:fc:6a:37:81:12:c8:04:
47:dc:9b:5b:6e:80:73:84:53:ac:5b:74:4a:90:88:
9b:f6:f9:9e:75:d7:6f:37:a5:72:d6:81:e9:e0:bb:
f9:d8:9c:9c:49:39:1d:59:f5:79:24:d8:dd:e5:a0:
f5:5f:7b:b6:96:4d:0c:bb:c7:fd:a6:16:be:7a:f5:
01:d8:4f:16:e7:84:36:92:60:73:91:cd:ac:b0:b0:
76:de:14:24:db:29:7b:99:2b:b4:01:8f:d0:fb:f6:
99:4c:88:ab:a3:40:a8:c2:43:df:6e:ac:a4:f5:4c:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D6:5B:5D:6C:D2:9B:23:D7:0C:EC:E8:30:9E:6B:FF:3A:C3:83:70
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b8:dc:55:2e:4b:e2:f9:ea:8b:d2:32:f0:01:05:14:74:eb:
d1:c0:e7:17:4d:06:ff:c8:78:77:4b:2a:b1:93:d2:36:16:4b:
80:d8:93:de:33:1d:2d:46:1c:c8:37:c9:c8:5c:bb:0d:cf:61:
06:aa:9f:46:3f:ed:1f:25:1f:90:5f:59:c3:09:c2:6f:80:7e:
ed:7e:ee:43:74:37:1f:0a:b7:fd:2c:bf:91:70:5b:68:a5:c1:
61:32:80:5a:fa:cf:8a:d6:dc:8a:80:88:61:44:4d:a9:54:e9:
cb:f0:9c:09:29:fb:00:d8:ab:c2:68:e3:fd:b2:8f:c8:a8:bf:
cd:a2:50:38:3c:b3:82:de:78:58:b3:fb:08:1f:3c:6f:ff:95:
91:7e:d9:37:25:fb:f5:d2:a9:81:90:e8:b0:0d:87:7a:99:90:
8b:28:b7:d2:d9:87:95:bb:cf:da:2b:a1:fb:18:a8:7d:04:37:
76:cd:dd:1d:eb:30:8c:32:4b:67:80:f1:54:85:11:09:91:e9:
0d:13:3c:6b:01:bf:55:15:ed:dc:17:f3:0c:12:3e:5b:2d:cd:
a8:09:ce:43:09:39:0d:a2:94:4c:2e:d4:8d:fa:88:9c:3b:0b:
0e:93:01:0d:2d:ee:04:e2:36:2b:8e:3e:2c:e4:3b:f5:9b:24:
6a:de:41:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:23:39 2026 by rpki-client