
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
File: Xjp4NTd7noSf58M_n8pFctkCZz8.mft (raw, json)
Hash identifier: rdVfD7/Y8NIYY6xBiTB3icNiNJKIOEgDBZZi18ebweo=
Subject key identifier: 67:5C:DB:34:77:C7:88:2A:37:B1:7C:2D:03:35:F8:31:1D:39:9D:B1
Authority key identifier: 5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F
Certificate issuer: /CN=5e3a7835377b9e849fe7c33f9fca4572d902673f
Certificate serial: 01A1833E9177D0CD0F069A013BD59627800F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
Manifest number: 127D
Signing time: Wed 28 Oct 2026 16:01:18 +0000
Manifest this update: Wed 28 Oct 2026 16:01:18 +0000
Manifest next update: Thu 29 Oct 2026 16:01:18 +0000
Files and hashes: 1: WH-_bI4WqJ-kwzMckP87FDKHAKg.roa (hash: DQHUcfKPCyAX+Y0cqgfiiasXSEVfuHlMXkVoiKeaPC0=)
2: Xjp4NTd7noSf58M_n8pFctkCZz8.crl (hash: AnrBT4nIHOwzA/o72yoJCoUTikeTWvyaaV+iXMuGACs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:91:77:d0:cd:0f:06:9a:01:3b:d5:96:27:80:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a7835377b9e849fe7c33f9fca4572d902673f
Validity
Not Before: Oct 28 16:01:18 2026 GMT
Not After : Oct 29 16:01:18 2026 GMT
Subject: CN=675cdb3477c7882a37b17c2d0335f8311d399db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:61:1f:91:26:75:79:20:df:8d:29:a8:5f:
d9:15:29:0f:0f:f6:91:00:b8:7a:2f:d6:cd:3b:e5:
74:48:52:7e:6a:5b:b2:6c:cc:73:27:90:97:58:38:
53:bb:30:d7:a1:95:08:fa:14:91:ac:5e:a2:74:98:
fc:6f:60:bc:ab:24:40:9f:af:76:97:38:28:56:48:
36:3a:c9:c1:c5:71:9a:fa:75:c3:eb:09:87:7f:50:
9f:53:ef:47:18:35:e9:8d:ab:2b:ba:d6:39:59:a1:
72:6a:a7:1b:90:51:0b:d4:e3:ca:a4:9c:ad:37:96:
81:27:53:2c:ea:3f:f6:ab:1c:ec:93:f7:77:b9:60:
13:93:27:45:52:c6:f2:9c:4e:1b:1b:56:6c:56:0d:
45:a6:6a:2b:27:0f:ae:5c:bf:58:52:9f:ec:02:98:
a7:dd:b8:aa:ad:4c:7f:fd:2a:b7:21:bd:a2:9b:e6:
ec:b7:a5:ab:39:d7:23:46:19:c7:3e:6a:7a:2f:6b:
42:66:ca:51:0d:68:a8:49:ff:08:ca:30:0f:17:2c:
45:cc:d8:c2:08:11:63:60:e8:58:cc:24:70:bb:4f:
c5:ac:80:6e:76:c2:34:a8:62:11:74:51:de:b4:ee:
e5:38:d2:a0:9d:71:bb:f7:2b:c2:0a:93:c0:44:f8:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5C:DB:34:77:C7:88:2A:37:B1:7C:2D:03:35:F8:31:1D:39:9D:B1
X509v3 Authority Key Identifier:
keyid:5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:58:2c:f5:76:2e:c2:44:17:40:a5:fd:4e:74:ed:0c:a9:02:
18:ed:ae:7e:47:d3:e4:c0:13:ee:db:77:4d:f9:a0:12:76:d4:
c8:34:17:d8:e5:cf:0d:b8:12:71:a3:cf:bf:07:9a:b3:6f:79:
c0:3f:6d:db:a9:2d:e0:e1:44:39:de:48:e5:29:7a:9e:5e:1d:
af:3e:61:3d:d9:70:81:cd:08:b0:cd:88:79:c3:12:9b:2f:66:
ea:80:b0:a3:e7:43:31:45:51:e1:39:9b:07:3c:40:f9:85:74:
6c:08:bc:0a:29:e1:80:44:06:e0:f4:71:cd:cf:ab:4a:5b:29:
21:14:42:3f:ff:7c:58:56:93:ea:1e:64:dc:cb:05:0b:0e:f6:
c7:2d:5a:b4:1d:a6:fb:b0:c9:ae:22:15:3b:2a:f1:f7:9a:21:
36:9c:f9:22:37:f7:0e:20:39:23:6a:97:6e:8e:af:83:df:30:
12:c2:49:be:5b:93:48:2e:11:18:83:d5:a5:d7:ff:05:c8:59:
40:2c:b8:3b:99:23:e4:de:05:2b:07:bd:09:48:e9:41:7a:c4:
38:0c:d1:8c:5a:37:7b:d1:b7:09:3a:b5:d6:a5:65:c6:95:98:
9f:94:c9:66:15:06:e5:6d:b1:18:55:41:36:08:f5:ee:6d:90:
ae:2d:26:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:23:10 2026 by rpki-client