Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
File: XNhYOyEXQQSea7GalG2DGqvxGtM.mft (raw, json)
Hash identifier: 0kBArQNWmzm7IxDSJcBdiCI08n8Dl/a5P8ALKxNfshc=
Subject key identifier: F5:E7:0E:7E:D9:72:EA:C4:29:BC:F0:4A:61:B5:7B:C1:B4:01:77:6D
Authority key identifier: 5C:D8:58:3B:21:17:41:04:9E:6B:B1:9A:94:6D:83:1A:AB:F1:1A:D3
Certificate issuer: /CN=5cd8583b211741049e6bb19a946d831aabf11ad3
Certificate serial: 01A17BF24C2B77F49951D4A6C7A3E53A1C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
Manifest number: 1A06
Signing time: Tue 27 Oct 2026 06:00:39 +0000
Manifest this update: Tue 27 Oct 2026 06:00:39 +0000
Manifest next update: Wed 28 Oct 2026 06:00:39 +0000
Files and hashes: 1: S2GzX7bjyNfk8zuc_J7yDO8r8_A.roa (hash: 9cgwTQAZVGZH9VKGn5dJT7UJ2jaArnzhzVtmHDdrHjU=)
2: XNhYOyEXQQSea7GalG2DGqvxGtM.crl (hash: rrz4q3r2ACtF0itl9oO+1oCGHG3kKDpFBvjc+H11ND4=)
3: rSchH_WpkAQtklBw4R5ArVw7Etg.roa (hash: FQrYCtK1inx5vQ38kiI4C/z5+zK3xo4th9Fjypdt9nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:4c:2b:77:f4:99:51:d4:a6:c7:a3:e5:3a:1c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd8583b211741049e6bb19a946d831aabf11ad3
Validity
Not Before: Oct 27 06:00:39 2026 GMT
Not After : Oct 28 06:00:39 2026 GMT
Subject: CN=f5e70e7ed972eac429bcf04a61b57bc1b401776d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:59:b4:ee:d8:0d:53:e7:2b:0e:02:cb:ff:af:
06:d4:79:61:94:d0:31:9e:82:cc:e6:30:e4:e5:cd:
2e:51:32:9d:f8:5e:2e:da:eb:6a:c4:16:07:bd:cc:
f6:ac:0d:f3:22:88:19:9d:7a:ed:e7:e0:be:3b:f5:
3c:8d:03:8b:5f:ff:3b:e8:cc:69:a6:be:66:eb:97:
4b:f8:0d:4b:00:bb:2a:83:58:ac:cf:77:87:be:9b:
1b:6f:17:70:0a:e0:a6:80:16:ea:08:77:05:06:93:
5a:d1:e1:a9:7e:3a:d0:46:79:43:a4:b6:e1:e0:a8:
7e:c9:f2:75:3d:d0:ee:4a:04:e9:b9:bf:b7:34:fb:
05:00:2b:a5:49:0f:39:68:2a:47:33:79:f5:27:15:
e3:88:47:2e:ed:62:bd:26:57:4f:e4:8e:c9:ce:b4:
c3:9f:e2:2c:3e:61:9d:b4:80:cd:89:3f:46:ae:17:
34:7f:9e:5b:b8:4e:10:c7:67:6c:ff:0e:33:7c:1c:
10:f0:c0:36:57:12:38:84:88:a1:c3:b2:5a:b3:9e:
96:f7:b7:e3:1d:92:ee:db:d1:df:26:d2:a9:20:28:
da:ec:28:7e:ff:5d:ad:6f:43:d4:d8:6c:9f:35:6a:
ec:6e:0d:57:7b:12:bf:66:82:86:1a:15:08:89:65:
67:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E7:0E:7E:D9:72:EA:C4:29:BC:F0:4A:61:B5:7B:C1:B4:01:77:6D
X509v3 Authority Key Identifier:
keyid:5C:D8:58:3B:21:17:41:04:9E:6B:B1:9A:94:6D:83:1A:AB:F1:1A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:53:ad:59:e5:7b:67:1f:13:c4:a3:04:cc:df:60:41:1c:9b:
ce:15:6f:40:48:bb:74:b1:f4:23:12:44:0b:96:cd:78:27:6c:
13:87:39:4a:e5:7f:cb:8c:91:0a:6f:71:b5:07:30:2d:1d:83:
55:95:7e:ea:d5:9c:9a:82:a7:44:54:6d:ab:2e:e5:e6:81:bd:
37:9e:ca:31:f4:6b:63:e7:68:40:d4:5c:79:fc:24:d9:f7:13:
ea:1e:53:ad:46:8a:76:88:c5:b5:0a:20:29:19:21:d7:12:b2:
ff:7c:fa:94:f4:b3:b1:02:b9:45:44:d5:73:bf:2e:ba:67:df:
90:d7:6a:3d:b2:c6:e4:ad:df:0c:95:9b:33:a8:51:8f:c0:d8:
61:b1:58:ff:fc:11:d9:0e:b5:d8:7f:b9:0e:a7:1b:3f:7b:af:
be:7a:7b:d7:ee:b1:76:52:b4:62:e4:ea:ae:3b:ea:0a:5e:58:
18:73:c2:27:d1:ab:b7:4a:9e:2a:3a:98:7a:51:1d:d3:61:9c:
6e:36:e0:84:c6:c3:33:39:f7:9a:fa:9a:64:40:26:3d:7d:65:
ff:44:d6:a4:1a:06:d1:3b:3a:51:2a:16:a5:08:09:53:82:63:
33:79:e9:b0:2e:4e:d7:05:ff:28:8e:91:6b:60:1a:e1:f6:53:
0e:63:4a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:20:56 2026 by rpki-client