Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
File: XxpCcHKzHUR4TDdd-uQieOcfqDY.mft (raw, json)
Hash identifier: t7yIJcx6zs2Lm6Ql2K8p78RCcIj5gJBqlASHg7zABd4=
Subject key identifier: 71:7C:0D:38:65:D0:60:15:4C:8C:87:E0:A5:DF:0F:7C:07:53:DE:80
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Certificate issuer: /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial: 01A17D73329657ED9085DC2291608E1C3217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
Manifest number: 143D
Signing time: Tue 27 Oct 2026 13:01:03 +0000
Manifest this update: Tue 27 Oct 2026 13:01:03 +0000
Manifest next update: Wed 28 Oct 2026 13:01:03 +0000
Files and hashes: 1: KceNOn_bCzlpYzkGAtSH71ZEniE.roa (hash: ghG8vlvVhPRN/q5ENiLGfWe2Rdz70LqNWlKQluJ96vs=)
2: TnLGleLWbF6Xbip1RIdiru4lzlk.roa (hash: TwgWk/EYTVXEiwe/Z9ywXVNMqxvlSEZDhUOiWjsfVSk=)
3: WMhIoor7Hyuy0wOxrEP3KE2ZBT8.roa (hash: wF/mTYNEBbK6LQa44t3Ab29Zi1DQ3lUoIwP6+TkkiBA=)
4: XxpCcHKzHUR4TDdd-uQieOcfqDY.crl (hash: TuGHtP+XHwpNZaYUQZF9UASIgMX7Qh70gZEd0v1NO3w=)
5: gXCR-cLYMaojwmIaH2ky7eyIf5g.roa (hash: I8h0Z2ywnH4bteSn3QmarASyoNf+QDRHyu/nb8W4GNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:32:96:57:ed:90:85:dc:22:91:60:8e:1c:32:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
Validity
Not Before: Oct 27 13:01:03 2026 GMT
Not After : Oct 28 13:01:03 2026 GMT
Subject: CN=717c0d3865d060154c8c87e0a5df0f7c0753de80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:77:aa:da:a1:99:ac:b9:44:e3:74:d1:43:
da:78:77:22:f2:f3:26:32:1a:d9:6c:68:f7:87:fd:
06:b1:f5:65:5a:8a:c9:03:77:1a:32:de:09:f6:e5:
af:91:fc:e6:48:8b:53:7a:b3:b6:94:db:18:d1:54:
99:23:2e:50:07:ad:66:ff:11:02:30:97:3f:8b:67:
1f:10:83:b8:9c:f9:66:76:27:28:8b:49:78:6a:46:
b6:f1:53:81:0d:dd:e6:82:f2:8f:be:64:8b:02:1f:
63:2c:90:89:84:4c:a5:d3:62:52:cb:93:79:d2:ec:
d0:9f:07:f9:53:9d:f3:82:94:be:7d:89:01:a5:10:
71:68:36:55:c0:b7:c8:bb:b7:d4:2d:4c:9f:23:16:
6b:76:e7:fc:c5:6d:ad:0d:c1:a3:92:49:98:21:3c:
66:cf:57:41:9f:e7:c1:16:82:d2:67:2d:fb:f0:a8:
ff:5d:46:8a:7e:58:47:5b:89:97:f7:0e:fe:26:7d:
bd:e2:bb:d2:8e:21:fc:63:05:de:b9:5c:9c:ee:05:
13:7b:ee:18:69:e3:87:c9:23:27:52:a0:87:2c:31:
59:62:36:65:87:21:22:ba:7a:af:56:55:55:0d:64:
53:b8:f1:2c:77:ea:d4:f8:ed:c6:10:e1:42:07:b2:
27:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7C:0D:38:65:D0:60:15:4C:8C:87:E0:A5:DF:0F:7C:07:53:DE:80
X509v3 Authority Key Identifier:
keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:de:6c:b5:62:84:c9:7f:b8:2e:6b:d5:dc:00:77:30:af:4f:
c5:1a:db:44:09:e3:4e:e4:b3:63:c9:95:04:b7:fd:68:c2:ce:
b3:3d:8d:0e:da:4e:5c:ca:6d:5f:f7:8b:cb:05:4a:ac:07:a7:
bb:49:b6:70:01:d5:29:19:7d:24:64:3e:b8:c7:61:ce:45:50:
1d:40:59:22:4c:0f:05:c0:cd:73:d2:4e:e9:98:e6:12:de:13:
ac:97:15:ba:c7:5e:d7:38:83:2a:dc:7b:73:e9:79:9e:e6:d4:
03:e2:ab:3e:f5:68:22:03:f6:e4:1e:3b:3f:98:b8:b6:7b:17:
e6:41:66:b8:89:75:54:39:e0:60:ff:5f:3d:0c:52:04:e9:b4:
d2:a0:03:a0:c5:d0:6c:35:6e:ab:05:69:2f:a5:20:7a:0b:36:
f8:d2:38:d2:00:1d:41:99:bb:97:74:d6:f4:14:dc:6d:70:98:
20:14:3d:44:3c:7e:76:d2:bb:85:18:30:54:5e:91:65:fd:05:
3b:e1:61:a4:0b:6e:e3:28:c5:d3:58:76:63:f9:49:38:03:cb:
98:54:54:bb:cd:82:f6:62:50:26:1b:6f:08:17:ec:64:a5:86:
b3:97:e7:f3:5d:39:7e:f4:8e:fe:4d:1e:97:87:5d:6c:56:2f:
d8:9e:9e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:49:41 2026 by rpki-client