Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: 9u2NN3T7UlqFJB02nXR1A25V5uvi18JbkK/O0sudtLY=
Subject key identifier: 5D:69:21:7C:74:69:BC:C9:1D:45:C5:C1:EF:89:A7:CD:CC:50:CF:07
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 01A12AD72AEC2268DB30913D99421BCC1908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 0D65
Signing time: Sun 11 Oct 2026 12:01:46 +0000
Manifest this update: Sun 11 Oct 2026 12:01:46 +0000
Manifest next update: Mon 12 Oct 2026 12:01:46 +0000
Files and hashes: 1: MXmi4elQgkZloOXKc5KxZJXFILw.roa (hash: 4eGKiA6fp/86boDwfJeXXyGqjfCWRwxGmH0ShZjDAuQ=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: rsphGm4WDjhUDVy5AMV4YwbXDhbAfvVP1cD3y5X+bCg=)
3: taZbUsGibT55ZZu6Th_Go_ILjiU.roa (hash: d/WlzB5v4feaToE5n6krRnONbSIkTydQjlb9UBErHJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d7:2a:ec:22:68:db:30:91:3d:99:42:1b:cc:19:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Oct 11 12:01:46 2026 GMT
Not After : Oct 12 12:01:46 2026 GMT
Subject: CN=5d69217c7469bcc91d45c5c1ef89a7cdcc50cf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:29:48:d9:d2:27:a1:88:67:c4:71:af:f6:
c3:34:29:ad:68:13:55:23:a7:b4:f2:77:4a:5b:5f:
9d:75:67:2b:e0:f0:a1:19:12:ff:19:e1:5b:c5:42:
6c:0a:07:8c:ce:2b:de:ee:3d:b3:dc:25:cc:76:5b:
cb:a8:44:33:58:6c:4b:e9:f8:62:1f:92:cc:64:53:
08:2f:a1:42:76:a3:cd:4c:7d:85:db:7d:4b:b7:d2:
34:22:35:67:e2:01:2f:15:01:55:7b:02:d2:2e:5d:
08:c9:7f:fd:78:e4:13:98:f1:d7:aa:90:39:1b:e9:
6c:ff:ee:a1:c1:20:d2:4f:94:bf:29:69:00:93:1c:
66:0e:d9:76:8d:76:55:60:07:9a:79:d3:04:a1:99:
b9:4e:a7:e4:42:30:ef:f0:b3:1b:22:ab:bf:c4:eb:
26:c9:fc:6d:54:cf:b3:c2:df:74:94:ec:7c:7a:e2:
ba:df:44:99:bc:9d:91:76:68:01:27:ae:09:57:b5:
08:bd:1e:0b:b9:f7:e1:00:9e:72:f3:d6:ff:09:f1:
2a:84:29:e4:4e:87:d9:25:9c:ee:63:79:63:96:a8:
5d:0a:0c:b2:31:d7:af:d5:12:8e:ad:f2:2b:24:cb:
0d:5d:4e:78:ac:32:28:45:eb:42:22:73:00:5f:14:
32:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:69:21:7C:74:69:BC:C9:1D:45:C5:C1:EF:89:A7:CD:CC:50:CF:07
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:31:b6:d7:1b:1d:0d:ee:76:17:a4:97:a1:4a:22:24:cf:75:
b5:bf:99:0e:3c:34:e1:35:0d:c2:70:c9:8a:af:e3:6c:96:c2:
8e:d8:33:92:a9:eb:76:34:45:b9:0d:42:d2:68:b3:2b:aa:e0:
46:ae:6b:5a:8e:8d:a8:af:27:bf:e9:76:76:75:1d:f6:15:ec:
dd:df:65:74:ab:a6:c6:04:f7:d5:93:c0:c2:5b:03:e1:76:1c:
2e:d4:76:c9:92:69:c3:45:cd:a4:d1:f6:6b:17:75:fe:04:5c:
53:ba:d4:8a:d5:29:26:96:11:40:8a:98:5d:df:ee:8f:d0:f3:
01:f5:f9:92:10:3c:9c:a7:ca:2d:10:0c:e8:40:a3:7c:f8:2f:
99:62:51:78:34:a4:7a:ee:55:e7:90:b5:2d:e8:c9:f3:46:55:
b6:37:00:3d:92:ca:a2:cd:53:0d:b0:94:c0:52:86:6e:ae:c8:
c8:65:4d:a2:54:5c:61:60:34:ab:78:79:2d:58:47:ed:47:14:
60:1a:c1:63:82:71:18:02:ad:80:2a:29:74:d7:f0:43:ec:70:
54:c5:6e:1c:78:37:f5:32:e6:55:18:89:2d:26:d4:03:99:77:
3f:33:7f:db:82:38:53:6a:be:9d:16:0f:66:1f:b0:7f:85:c2:
ec:f2:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:14:11 2026 by rpki-client