Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
File: Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft (raw, json)
Hash identifier: +EsSXU1tg39rNAwJK960q/wlj/Ky+BqrpLXCIVVcqQw=
Subject key identifier: 0D:40:76:E9:BC:8B:28:13:88:8A:DD:31:7D:FB:C6:FF:7F:25:5F:1A
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 01A1AB956257087F1D2113D3206C14911593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
Manifest number: 1AFA
Signing time: Thu 05 Nov 2026 12:00:56 +0000
Manifest this update: Thu 05 Nov 2026 12:00:56 +0000
Manifest next update: Fri 06 Nov 2026 12:00:56 +0000
Files and hashes: 1: 3M28JHI7FacsIOAJQWmxce2Slr8.roa (hash: YkTIvgr/OPBfSq7cSMGcukiH55SIyz1JhUaAuApclZY=)
2: 7MeHuOHX_t0Y7M3OkiYTIbrWBmE.roa (hash: Odl4gnozu+3MVceJoIMFZfxLwPzuPyHk73z9Oo2EcD0=)
3: Gk3x3dMvMywr2S8J1gmXYe0hnoU.roa (hash: /bwOAvbGES0zjJv2PTCP3py4NDDoCXEMIJubC3y4gDQ=)
4: IK5t8ZtR9FmBC9B2Oc1q_FzsZ60.roa (hash: 99eWXzzKhZzYTyaPK2nn6KPekh7aMTWJKB401rZwNvg=)
5: Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl (hash: 62uJ2Ek6nvTGoL+uWGON7fgENeLC03n8LPyLbEhjn+M=)
6: aqoU9zJ3XearIjlOINJlmfcvvuw.roa (hash: Sz6yVgzziCuFuMg8Vphcvorcn0t0kQDujyZ/W1bGUWw=)
7: kl3oy-dFL14cqnAqsoTUT2p-gAs.roa (hash: 2IH7sBJVtOHKhrFUONXV2aGCQkjnVLJ+vB9vvY8IEzA=)
8: kyQ4JI7k9YbINgfhHLT6m28Lt5g.roa (hash: k6gw+9YpfRZ8fBPrWOAfF6dmY/qo7leQ3UVRA8om9+s=)
9: qH5fLLWJkV1VZnXKxFAToZGD4BA.roa (hash: gujwjiPUnMht5bxbQJ8geZbpehgQ8vnJKIXcFg1nhbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:95:62:57:08:7f:1d:21:13:d3:20:6c:14:91:15:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Nov 5 12:00:56 2026 GMT
Not After : Nov 6 12:00:56 2026 GMT
Subject: CN=0d4076e9bc8b2813888add317dfbc6ff7f255f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:69:ad:2f:36:36:c6:3b:47:9a:1c:e4:7c:
2f:8f:4b:df:cf:7d:89:11:f4:fa:f7:d6:e1:0d:39:
bd:cd:25:9e:b4:1c:c2:cf:69:d1:f9:22:b3:37:55:
46:2a:2d:6f:2b:17:f2:32:92:63:29:ce:49:39:c3:
1f:54:99:3d:af:a1:f4:32:9a:90:68:d8:50:21:b5:
cc:15:76:49:29:35:64:b5:67:c6:10:0c:0d:b6:36:
b3:51:41:36:c4:96:a6:34:ec:c8:8c:be:37:03:75:
c9:65:70:eb:27:6d:22:7c:7b:12:4a:21:e0:96:e1:
99:67:76:fb:ee:85:d9:a7:77:a8:bf:1c:e7:bc:45:
70:a5:ae:9c:0c:c8:71:69:46:69:cf:49:85:c6:e5:
5a:94:54:d0:35:99:8a:11:29:3e:10:52:9f:99:7a:
91:53:c5:05:38:f5:51:65:9d:b6:0c:fd:d2:32:f6:
58:fa:d5:da:8b:10:96:0d:a3:61:e1:c7:96:ac:f2:
37:9b:c5:b1:8f:28:a7:f2:51:09:c5:7c:e7:ce:0c:
66:8a:c5:58:33:69:6a:67:cf:18:f5:26:eb:ae:9c:
a7:c0:48:de:bf:bf:21:25:48:38:2e:6b:55:2b:3c:
66:7e:a7:6b:b0:a6:ce:d4:62:cd:88:c1:67:ef:43:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:40:76:E9:BC:8B:28:13:88:8A:DD:31:7D:FB:C6:FF:7F:25:5F:1A
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a3:42:ac:92:98:3e:ce:dd:80:1c:e6:09:76:8e:8f:63:91:
f3:64:11:40:3f:88:f4:c1:69:03:18:61:93:a4:14:ca:e0:c4:
98:eb:12:8f:ff:0d:fc:31:fd:c3:1c:93:a2:91:4e:72:70:f3:
53:50:0e:bc:d9:45:1f:b4:b4:0f:be:27:6c:9c:56:c9:c5:b9:
54:4e:a2:d9:f1:f9:a9:6f:01:1d:4b:d0:0e:5a:0b:ad:e9:e5:
c5:e5:6e:49:d0:34:81:25:9b:fa:8f:45:f2:34:f1:27:89:3d:
6c:66:b9:73:7a:cd:a5:39:1e:97:ef:6a:6d:d1:33:b2:ad:53:
c0:7b:cc:34:a4:02:d6:42:a3:8a:23:a2:b9:fd:e1:d0:ee:4e:
2d:d1:42:be:c8:da:e3:36:f7:da:09:e1:84:6d:8f:14:f5:fb:
db:13:4d:10:54:6d:0a:79:14:98:ca:87:ca:fa:5d:5a:a3:50:
98:2d:47:8d:0e:e3:18:4f:2b:58:16:2c:d6:58:ce:64:e3:0b:
b8:2b:fe:fe:ee:9c:9c:84:f0:1c:01:d0:3b:4d:ff:80:dc:a4:
1b:5f:4b:d4:ae:0d:e1:c3:3f:25:c5:d4:19:1d:b3:d6:da:30:
00:86:84:ae:f4:fa:06:09:41:15:ee:11:46:37:02:5c:19:86:
50:e2:a9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:39:00 2026 by rpki-client