Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
File: Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft (raw, json)
Hash identifier: 6v3NkN49YQqaVCG17/FIMd3l5EI2N7pGUsb8dr1k41E=
Subject key identifier: 48:04:0F:66:50:08:F7:B8:D2:7E:DE:BA:26:BF:04:70:7E:3B:C3:9D
Authority key identifier: 5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
Certificate issuer: /CN=5e79acd4ee40fda43022a2c9642b071da649526c
Certificate serial: 01A17B84BDAE13BC2CCEBA4F5393E235CC50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
Manifest number: 12F6
Signing time: Tue 27 Oct 2026 04:00:59 +0000
Manifest this update: Tue 27 Oct 2026 04:00:59 +0000
Manifest next update: Wed 28 Oct 2026 04:00:59 +0000
Files and hashes: 1: KFfWDSyefK-MQgLPQX4mXrxUP9w.roa (hash: xg8GFoXkHuiLiC0QA69V1kKQ1AiTwnUuPNFXkPnRjTY=)
2: Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl (hash: L8ks+kqSyXKaV7zb8o0kOIMe7o2kasFCvs3+8IDsbaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:bd:ae:13:bc:2c:ce:ba:4f:53:93:e2:35:cc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e79acd4ee40fda43022a2c9642b071da649526c
Validity
Not Before: Oct 27 04:00:59 2026 GMT
Not After : Oct 28 04:00:59 2026 GMT
Subject: CN=48040f665008f7b8d27edeba26bf04707e3bc39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:28:20:04:d0:42:ff:82:22:d5:d0:4e:b4:
7f:39:86:65:0b:82:d1:fd:78:ec:76:0b:29:24:0b:
f4:01:ac:cc:ee:7a:f1:60:ac:ca:df:1e:6c:ea:36:
c1:14:e9:ee:75:23:c2:f4:53:8d:e5:99:14:5b:c6:
80:d3:d2:09:88:9f:34:77:d8:54:90:ab:13:c0:f5:
07:7c:2b:b1:1e:1a:8a:52:06:bc:60:bc:90:45:d2:
30:76:9a:7e:a9:13:ec:c3:11:67:56:3b:c8:54:37:
76:b0:15:0a:56:8d:aa:5d:3b:78:27:c5:1a:0b:32:
f2:80:30:ca:04:ce:8c:68:5d:59:9b:bb:40:a4:6c:
2d:44:67:a0:37:8a:75:a9:26:f2:27:2a:f5:9b:76:
15:d8:47:75:f1:be:14:96:e4:a3:f2:e5:07:96:f4:
26:fd:1f:f3:26:ff:61:ca:ba:03:41:2b:29:05:f9:
c8:79:a9:2c:28:8a:66:69:63:fc:cb:05:d1:97:a2:
e5:df:25:0c:c6:9e:04:06:6f:07:0d:34:47:4f:66:
a3:20:c8:9f:0e:a4:99:40:e8:8e:b6:14:d5:0b:38:
df:eb:b0:61:e7:ff:5e:ef:4e:14:11:f1:56:7c:73:
e7:e1:9a:15:d6:7a:50:64:6d:c1:35:2d:09:34:28:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:04:0F:66:50:08:F7:B8:D2:7E:DE:BA:26:BF:04:70:7E:3B:C3:9D
X509v3 Authority Key Identifier:
keyid:5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d1:e6:b7:4d:4e:76:63:a0:e8:b9:37:e7:88:0e:60:76:6c:
e5:0d:fe:d8:7f:35:f4:9d:bb:fc:33:5d:9e:2d:a2:a8:de:04:
41:92:8a:d6:72:36:0c:b8:4e:50:ac:0b:3a:7e:96:7f:c2:5a:
e8:95:c0:c9:a9:cb:d0:9f:79:9d:9f:1d:59:47:55:65:be:83:
12:c3:65:43:70:7b:32:42:b6:d1:8f:8b:ca:54:bb:ec:a5:db:
e5:76:a6:be:2a:ac:11:51:3c:24:15:62:03:3d:94:95:b4:c1:
77:f9:3d:34:fb:74:ba:be:90:cf:60:f4:95:bb:0d:9a:3c:e7:
04:28:c7:fe:41:77:60:4f:6f:bd:39:25:b8:63:cb:82:e8:93:
5b:94:81:9f:a0:45:fa:ca:52:8e:30:2e:0e:50:ef:8c:82:6a:
79:1e:2a:1e:b2:83:b8:e5:c6:38:43:70:c9:0f:22:98:64:51:
64:e0:e8:a5:75:ba:2e:f0:7f:3e:c0:39:af:6e:3e:fd:83:3f:
16:98:24:46:a5:1f:c1:c9:eb:ec:7b:10:39:7f:e0:e2:af:c3:
0f:9e:e1:c0:7a:db:ec:e6:f3:e2:c0:0f:c9:69:0b:fe:aa:be:
d2:07:79:73:7c:22:ac:20:53:68:b9:7f:bb:fc:0f:44:f8:c1:
a5:07:67:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:38:08 2026 by rpki-client