Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
File: XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft (raw, json)
Hash identifier: 7SkD+RiRm0gxg8U2QtW+2Ei1mEF23v2k6W8SM9X1RtY=
Subject key identifier: 55:96:41:88:4E:0B:78:BC:8E:4A:77:A9:2B:38:D0:18:14:20:63:C1
Authority key identifier: 5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
Certificate issuer: /CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Certificate serial: 01A15D0C61FAC43BFC52ED1B85FD54EEE077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
Manifest number: 0692
Signing time: Wed 21 Oct 2026 06:00:54 +0000
Manifest this update: Wed 21 Oct 2026 06:00:54 +0000
Manifest next update: Thu 22 Oct 2026 06:00:54 +0000
Files and hashes: 1: XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl (hash: p4KNbAvlF+0Y0jleEeVTtPL/zpF1APCdic52vxVUPcA=)
2: ua_e8PovLDNf56za3RBEa7cuuaQ.roa (hash: AeMBv+klAL3WpkSagPgkjuVi+j0J2ixa7AC/uv/cJ9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:0c:61:fa:c4:3b:fc:52:ed:1b:85:fd:54:ee:e0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Validity
Not Before: Oct 21 06:00:54 2026 GMT
Not After : Oct 22 06:00:54 2026 GMT
Subject: CN=559641884e0b78bc8e4a77a92b38d018142063c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:f4:b6:a8:c0:66:fc:0f:d8:d3:85:76:c7:
fb:4a:8a:c9:95:0d:8c:6b:b6:82:ca:58:7e:eb:db:
12:8d:3c:72:16:5f:3f:0e:89:61:f7:6a:6c:7e:e1:
01:ae:88:a3:1f:67:f0:74:40:93:1d:32:10:94:00:
3a:62:ec:83:27:5f:1b:f8:b0:45:b3:30:df:dc:90:
00:42:d2:e4:96:eb:ce:11:d9:ec:8d:68:47:78:30:
d6:28:3b:c7:76:a3:fd:47:f3:a5:6f:f5:85:4e:19:
37:31:29:12:7b:97:b7:12:27:0d:2c:c4:3b:d8:bf:
47:2f:86:6a:71:c5:8d:69:89:a7:f0:5b:84:5e:c2:
5f:34:e1:43:aa:60:df:4b:85:05:5b:4a:c7:b1:b0:
2c:e6:60:30:de:fc:ef:63:48:c6:00:09:be:55:b3:
80:5d:e5:53:00:8d:0c:49:3b:29:26:29:ec:7a:e1:
a5:7c:d4:7a:05:91:9f:e1:e1:2e:b5:c0:93:fe:79:
0b:60:66:39:89:c6:d2:f4:0e:f6:5c:88:2c:c3:75:
bc:02:65:79:09:88:3b:81:85:19:df:bf:d7:16:e6:
3f:82:db:09:30:52:bc:66:24:90:fa:89:f5:dd:3b:
0f:f9:06:92:bc:96:d1:d3:4c:9e:7b:b2:64:a9:c1:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:96:41:88:4E:0B:78:BC:8E:4A:77:A9:2B:38:D0:18:14:20:63:C1
X509v3 Authority Key Identifier:
keyid:5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6e:70:6e:48:05:36:aa:e4:db:39:8f:46:f3:f5:d6:cd:5c:
6f:ab:49:f9:09:c2:43:ac:5c:34:b0:cc:f7:06:3a:21:27:ec:
04:91:60:3d:c8:8a:d2:5a:6c:5f:68:84:4a:d7:01:87:0f:59:
82:5b:3b:30:8a:00:3b:0b:66:8f:98:9a:2a:f8:b0:de:1a:e9:
80:82:75:97:a3:2f:5c:95:ff:40:20:c4:50:98:bc:18:06:14:
35:f0:1f:c9:34:f0:c2:64:f3:8b:ad:c6:75:09:03:c2:15:2d:
5c:74:2e:d4:fa:b3:5e:c2:2f:24:69:74:b9:0a:f6:fd:d6:7b:
ca:76:b2:17:fd:99:e6:23:a5:9f:69:a6:e0:66:c4:47:6b:4a:
7a:9b:79:ca:a4:3f:ef:15:d0:cd:4d:0d:5f:25:c1:47:5e:ac:
aa:4e:22:94:94:4a:4d:50:57:0e:e2:e9:b5:3c:46:9c:d8:ed:
b0:cf:9d:f6:04:62:31:e3:e8:d6:6b:d2:88:ee:f3:6f:1a:ea:
c9:54:cc:52:3f:96:cf:5e:5e:8d:a9:a6:85:34:92:4e:e4:03:
38:88:82:39:f5:e9:da:f5:f3:b3:f7:94:5b:c4:52:79:7e:4f:
be:91:e8:ec:32:c8:b9:04:90:3a:3b:85:7d:59:fe:dd:5a:09:
a2:31:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 18:19:55 2026 by rpki-client