Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
File: XSP6gsR1KG22BxT2A2Gg8crCPSM.mft (raw, json)
Hash identifier: DcgVHdVR6H1NhPQYaDvGTgEassFKQH9qpKeeaIwS2TE=
Subject key identifier: B8:B5:D8:9D:BA:75:BF:A6:9E:4D:5E:2B:AF:D1:9C:28:5B:E0:E8:F3
Authority key identifier: 5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
Certificate issuer: /CN=5d23fa82c475286db60714f60361a0f1cac23d23
Certificate serial: 01A15EFB1FA0A85968B85978E7069C50D17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
Manifest number: 0264
Signing time: Wed 21 Oct 2026 15:01:18 +0000
Manifest this update: Wed 21 Oct 2026 15:01:18 +0000
Manifest next update: Thu 22 Oct 2026 15:01:18 +0000
Files and hashes: 1: 3Owi7w8XHfa2ETQQJKxPe5_2S3M.roa (hash: WxZPvj4Y/uFWaukPSMrNh1kQZIcODKf/xbXFTKHA6tE=)
2: XSP6gsR1KG22BxT2A2Gg8crCPSM.crl (hash: Hq6X+nZGghawgX7CL8JIqGaJb4kNVsAzljvuz6NCHdk=)
3: kHjyu0leWmEWJz4dGZNRuqPpKu0.roa (hash: xSmyUIXwxdKC/wUH6aKgbqf7oSMgpHlsL1OZu9Jw99Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:fb:1f:a0:a8:59:68:b8:59:78:e7:06:9c:50:d1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d23fa82c475286db60714f60361a0f1cac23d23
Validity
Not Before: Oct 21 15:01:18 2026 GMT
Not After : Oct 22 15:01:18 2026 GMT
Subject: CN=b8b5d89dba75bfa69e4d5e2bafd19c285be0e8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9d:c3:ac:17:7d:eb:04:64:26:3f:58:0c:47:
4c:75:1e:cd:bd:50:4e:2b:40:89:67:eb:22:82:4e:
11:a9:0f:58:43:9c:28:f1:2f:19:23:5c:ba:81:41:
31:a3:1c:fd:ea:53:cb:d5:2b:1c:c7:fa:d9:8b:cf:
ba:17:da:6c:81:ee:1d:75:60:ff:e0:f5:13:83:9b:
18:2b:97:03:d0:50:6f:cd:89:27:05:e1:cc:5a:9e:
99:d9:3b:8c:92:50:1c:3d:ed:89:57:af:42:44:51:
0d:1c:67:65:1d:ec:43:15:04:4a:dc:ae:a2:c6:ae:
35:90:4f:f6:01:06:3b:b3:1e:71:e3:e7:ab:64:c1:
94:94:00:38:46:b7:0b:69:bd:31:03:c1:dd:58:58:
20:d5:3b:ce:6c:7d:5d:cf:47:9b:36:be:ac:7b:c7:
72:c4:d7:de:c4:97:04:e3:ce:54:8f:b5:3c:56:d7:
17:69:d4:89:2e:02:d4:2d:bd:68:df:a9:66:b4:6f:
1b:66:5a:3d:a8:df:17:04:c2:96:e2:b2:2d:1f:45:
98:07:52:41:6f:e1:3c:ee:7a:ee:81:b0:59:f6:18:
8e:4a:9f:0d:a7:96:5a:2e:5f:50:36:bb:70:58:65:
af:e0:86:d0:a8:4f:94:98:61:ef:4d:c1:74:35:b3:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B5:D8:9D:BA:75:BF:A6:9E:4D:5E:2B:AF:D1:9C:28:5B:E0:E8:F3
X509v3 Authority Key Identifier:
keyid:5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:81:1e:be:0c:09:61:a8:57:7b:c1:75:6c:88:f6:a5:99:7b:
cc:0b:95:6f:a0:b0:fa:0c:21:cc:93:15:7b:be:5c:0b:cb:c3:
7c:57:9e:36:f6:21:c5:5e:dd:8b:62:38:14:4d:ea:50:50:7e:
a9:93:02:d5:d6:38:34:59:93:49:ec:47:7c:3a:8d:fc:97:07:
df:df:4a:2f:0c:33:40:91:54:06:55:49:89:28:80:1a:a8:79:
be:ed:be:a8:7d:a2:36:16:b0:aa:0d:d6:d3:32:0a:33:ae:4b:
23:40:72:d2:b0:fe:8a:b8:88:b8:db:72:2c:94:fe:9c:fd:6c:
da:78:44:a8:23:cc:bd:76:a8:a8:ac:ca:7e:d5:cb:31:0f:5a:
a7:56:58:72:c3:d5:79:b5:6e:e1:aa:dd:5d:fa:b0:0e:24:09:
97:78:be:c3:1b:5f:60:62:83:4d:22:e9:46:d6:6e:29:b0:6b:
68:57:5a:4a:94:45:3c:65:71:e7:30:6a:07:d8:72:37:ea:ef:
75:73:aa:68:29:96:38:72:05:03:e2:2a:40:78:73:2c:12:04:
4c:73:6d:b9:9f:54:08:93:5d:4c:32:9b:53:bd:c1:6a:c4:f9:
dc:3a:27:c3:2f:41:0e:63:47:f1:5d:e1:4d:97:c6:a5:ba:82:
0a:05:be:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:51:12 2026 by rpki-client