Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.mft
File: XeNpl3lT5b198zgXiKQlpXvBwlQ.mft (raw, json)
Hash identifier: ljay5UDV5jtS6fxZ1SF2EPlXL88OvkLRMvp5nTh5wsA=
Subject key identifier: 20:FD:71:23:68:18:12:A9:CA:49:8A:19:FF:5E:86:DE:10:44:B7:90
Authority key identifier: 5D:E3:69:97:79:53:E5:BD:7D:F3:38:17:88:A4:25:A5:7B:C1:C2:54
Certificate issuer: /CN=5de369977953e5bd7df3381788a425a57bc1c254
Certificate serial: 01A117868386B4D604B8092FB456882FB8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeNpl3lT5b198zgXiKQlpXvBwlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.mft
Manifest number: 010A
Signing time: Wed 07 Oct 2026 18:00:53 +0000
Manifest this update: Wed 07 Oct 2026 18:00:53 +0000
Manifest next update: Thu 08 Oct 2026 18:00:53 +0000
Files and hashes: 1: XeNpl3lT5b198zgXiKQlpXvBwlQ.crl (hash: oFU1tSkOpEXFSHE05tn/EPTG0ojCzvPwowX34Tone1I=)
2: gjzkvOpwo1VRhdor0ibZ6CC1RMY.roa (hash: rl9pYDDMx4wTP/iHtIkLTivkQb2U2V3qvKBigsxkyqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeNpl3lT5b198zgXiKQlpXvBwlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:86:83:86:b4:d6:04:b8:09:2f:b4:56:88:2f:b8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de369977953e5bd7df3381788a425a57bc1c254
Validity
Not Before: Oct 7 18:00:53 2026 GMT
Not After : Oct 8 18:00:53 2026 GMT
Subject: CN=20fd7123681812a9ca498a19ff5e86de1044b790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:69:79:af:02:6b:ac:2c:e4:c1:ac:67:dd:
32:ba:19:7e:2a:8d:21:21:6e:79:8a:0b:5a:d7:c4:
9b:5e:20:a9:d8:26:c7:74:c4:76:78:c5:10:02:61:
07:5d:96:8c:c8:d5:bc:2a:f0:df:9c:c6:f9:08:70:
9d:57:85:97:fd:37:05:04:25:bb:6d:48:bb:ef:36:
f9:50:86:d6:5a:29:5a:e1:b3:4f:1d:1a:4a:5a:9f:
3f:34:b1:26:9d:ec:1e:bf:7e:96:87:29:db:02:29:
de:c5:c6:d1:29:32:f3:ee:c4:d1:b5:cf:55:14:c2:
91:7e:9a:ed:5b:a9:1d:9d:d0:cb:7e:6a:9e:fd:e6:
1b:c2:0d:6c:20:b2:db:86:ac:b6:5a:80:cb:40:35:
0d:cd:f9:35:2c:a6:2a:21:fc:9d:55:2f:12:00:84:
a9:3e:59:da:42:9c:ac:f5:03:0e:eb:bf:54:35:25:
06:7b:8b:8a:aa:29:85:aa:6e:1e:49:59:5a:75:d6:
d0:69:b8:5b:46:98:2e:54:54:53:3a:cc:ad:af:ad:
1e:3c:9b:7f:c6:22:3e:a5:30:9d:fc:c2:0a:79:fd:
4e:02:a6:24:01:af:7a:21:4a:b0:6e:9b:88:67:a5:
69:78:9b:80:4b:65:8d:06:59:5b:62:09:13:7d:5f:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FD:71:23:68:18:12:A9:CA:49:8A:19:FF:5E:86:DE:10:44:B7:90
X509v3 Authority Key Identifier:
keyid:5D:E3:69:97:79:53:E5:BD:7D:F3:38:17:88:A4:25:A5:7B:C1:C2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeNpl3lT5b198zgXiKQlpXvBwlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a8:9b:a1:45:81:02:29:35:d2:27:9e:af:66:a0:94:1b:36:
65:19:0c:07:cf:e9:db:47:b6:bc:ae:60:e3:24:9d:fd:67:57:
42:69:c6:ee:d2:c5:c9:ef:24:b1:4b:be:f8:19:9c:a9:e4:7f:
57:aa:ca:b4:d0:f8:3e:dd:a1:73:34:1f:a7:8d:ed:69:22:ec:
22:ad:3e:52:42:80:b2:b4:86:e6:62:a8:3a:13:22:01:b2:fd:
86:96:ff:f3:7e:2a:89:c1:0e:4b:56:4c:a2:af:0d:fe:4e:f8:
9f:a4:b2:36:71:4b:1c:ae:86:6c:f1:2f:4c:7a:48:c6:f8:56:
37:1c:77:98:d3:13:e9:89:85:d6:fa:b8:4a:1d:ba:a9:37:fe:
e9:b9:3a:89:9d:4e:8c:ef:6b:f6:51:d5:b6:02:a6:0a:80:ab:
45:df:2b:1f:08:b4:12:0f:29:7d:5e:7e:87:ec:b8:b0:df:6f:
6c:cf:b5:18:4e:64:45:1a:ad:69:cd:14:0a:b0:bb:10:78:e9:
c4:b7:57:8a:b8:69:ef:bf:5c:1a:23:2e:9b:a2:20:5c:11:01:
da:72:bc:fc:f6:65:9c:ae:2a:67:33:c1:28:a3:3a:59:bd:2d:
13:58:8d:f9:e7:52:cc:6f:e6:2a:95:8a:51:03:a0:37:ee:3b:
58:77:bc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:56:33 2026 by rpki-client