Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: dFybbzUr7U6I15HmDJp239e//ovPCXxj4EL03U2e8J0=
Subject key identifier: 0E:EF:E5:3E:98:EF:D6:95:04:9C:98:22:68:F1:66:6F:2B:08:51:58
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 01A17514AF7FFF76BA7E59177C64B54CDD0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 19D6
Signing time: Sun 25 Oct 2026 22:00:52 +0000
Manifest this update: Sun 25 Oct 2026 22:00:52 +0000
Manifest next update: Mon 26 Oct 2026 22:00:52 +0000
Files and hashes: 1: QJl8lvaSHlNGb8JURIYsNYcYovY.roa (hash: I+JKQFtr91vMxuc0AW8KZkalXspCXo94jd5tcty9xks=)
2: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: H5zbmAlef2UP5Am0qWz7CJelgAAVzXLZXHE863NNLNY=)
3: YTkSY80BXrrm0yOSSyQ4NcWfFCg.roa (hash: Srwxxn9T4n8eBKaxltWuAJ0FzIn1uI4bI96/Rm2hnBg=)
4: dwJ-g3-3P2MZcMoOR3FNsYKSwoQ.roa (hash: CEw5oFmdA+lmNi9dXoyHwZUkPspjYdU0MaZLaXpgCiU=)
5: nXeUEOivUjA7kz1X4OYQ31n8dd0.roa (hash: wyPbkGzk/5Raofzogtfr898fWXfnQRNDjtkAo2d0BIo=)
6: vtUu18GaHfDLIUCwLS8BAC9ItkM.roa (hash: D3t2yjEtPnj6wvZccxenFD1acdMG9/FFOYFJn6JG2GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:14:af:7f:ff:76:ba:7e:59:17:7c:64:b5:4c:dd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Oct 25 22:00:52 2026 GMT
Not After : Oct 26 22:00:52 2026 GMT
Subject: CN=0eefe53e98efd695049c982268f1666f2b085158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:02:43:b2:e6:d7:ae:e9:0b:5d:40:34:44:a2:
10:36:4d:64:07:7a:52:92:8a:89:5f:b1:4c:2b:0c:
c3:36:6e:12:be:de:b0:03:72:e0:7b:58:ca:76:d5:
a1:a6:99:66:3b:78:b5:06:2d:b3:3e:61:df:b2:1e:
07:54:7c:e6:23:ee:11:99:81:4d:fc:e7:fc:46:ea:
9c:cd:ac:d4:86:4a:3e:ef:eb:31:83:3f:8f:0c:17:
82:62:3e:0b:39:00:ff:82:c1:c4:25:4c:fc:39:c0:
eb:de:b9:79:f2:21:bd:79:3d:1f:0c:a6:b8:c8:4d:
37:b8:98:b7:a7:d5:12:e0:aa:c1:2a:e5:e7:92:8d:
4a:37:2b:2e:07:3c:79:5c:17:62:fc:49:85:b1:79:
9d:ba:97:12:27:8e:34:cd:d8:1f:41:2a:fa:4c:b8:
92:6f:2f:35:68:0a:fd:cb:89:14:28:82:b1:17:0d:
27:82:34:ed:16:b5:fb:13:77:9c:05:53:0e:31:55:
31:aa:26:b8:7b:a5:35:27:4c:97:78:e0:72:d5:11:
d3:7f:65:a3:43:59:2f:e0:9e:2f:eb:44:d1:e9:5a:
88:db:35:e6:0f:11:df:3a:23:3a:fd:fc:f7:0a:61:
77:f9:56:b9:80:9d:f1:dc:f6:95:19:40:2c:0a:63:
b4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EF:E5:3E:98:EF:D6:95:04:9C:98:22:68:F1:66:6F:2B:08:51:58
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:92:49:35:2d:33:ec:e6:5d:70:b1:25:67:64:f3:41:b9:9c:
fe:60:be:da:21:b4:ef:b7:98:b3:de:90:28:a5:19:13:2e:f6:
34:3c:18:ec:b6:3a:5d:49:77:ab:d0:50:ca:f4:7d:39:a5:8b:
4e:c9:3e:5e:00:b1:83:3e:78:0d:63:05:68:84:03:c8:b6:d7:
73:3c:bd:32:31:39:3c:e2:a0:19:ec:a0:3b:51:b6:83:a6:a6:
3e:d5:9a:04:a4:0e:62:0f:06:18:3c:9e:3e:4f:7c:45:f7:db:
b3:f9:94:61:3c:6e:52:59:fd:6c:69:93:63:5e:f5:b3:6d:a9:
10:9e:62:4e:d1:75:4d:15:95:25:35:2e:3a:f8:e2:9a:66:a2:
59:39:4c:2b:76:b7:83:0d:f0:88:1e:17:c9:5f:d6:d5:60:e1:
ce:11:70:ad:2b:98:93:3d:8d:33:76:03:94:39:e4:de:0d:07:
f4:03:92:13:dc:37:b3:e4:9a:8b:e3:ff:b3:cd:b0:44:82:19:
e7:0b:45:3a:3e:4d:4c:50:a0:41:c3:d3:ce:d7:4b:0d:71:8f:
ff:cb:4c:90:3d:e4:cf:b4:c4:d0:29:f7:1a:0b:33:68:6d:64:
b7:51:c2:ca:64:1e:21:9c:c0:e3:2b:5f:51:dc:8b:56:5c:f8:
ee:0a:11:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:57:06 2026 by rpki-client