Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
File: XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json)
Hash identifier: k7+tSYl3Jz4l7fq5IWq9jBg4AXueCS28U3kUpQlNOto=
Subject key identifier: F2:05:87:8B:09:04:C7:22:0E:8A:2B:91:41:80:3F:E1:5E:9B:6E:91
Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Certificate serial: 01A18BD313A5DC21DF09895AE685F78CD67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
Manifest number: 1639
Signing time: Fri 30 Oct 2026 08:00:28 +0000
Manifest this update: Fri 30 Oct 2026 08:00:28 +0000
Manifest next update: Sat 31 Oct 2026 08:00:28 +0000
Files and hashes: 1: NrZRCuerFzj4EhFGKoh_NKbZNxM.roa (hash: 5QAUpIfqv2CVCHxJDOL189fybpsclOVK/PxPIJsB8Xs=)
2: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: j7I7AHR4e1/5CY0wRmppT24UJ3f6kZ6mCb5DVE236F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:d3:13:a5:dc:21:df:09:89:5a:e6:85:f7:8c:d6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Validity
Not Before: Oct 30 08:00:28 2026 GMT
Not After : Oct 31 08:00:28 2026 GMT
Subject: CN=f205878b0904c7220e8a2b9141803fe15e9b6e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ee:d0:17:8f:f8:30:c6:83:a5:3b:8c:02:3d:
28:6e:e0:c6:f2:05:b6:49:cd:d4:19:f9:b0:7b:ed:
3a:38:b9:28:99:d5:20:14:0c:91:22:13:70:6b:92:
65:07:24:97:f2:48:10:20:3c:06:8e:58:80:75:88:
c5:f5:3b:a9:7e:f8:0c:50:07:b7:31:9f:c8:3d:47:
ce:f5:64:0c:15:e6:de:92:b9:e8:6f:d6:df:b3:03:
a9:d2:a5:e0:28:4f:b5:08:6e:0b:d9:89:ec:55:5a:
3d:54:85:d7:c5:91:60:68:cb:f0:b0:55:4d:77:25:
30:ba:95:8b:35:46:c2:81:f3:18:be:09:0b:24:91:
48:1b:4a:a1:ff:ad:56:97:b6:70:5b:98:5f:58:2c:
83:ea:f0:28:83:a7:8e:43:02:e4:95:5c:de:f7:63:
06:ca:04:c4:d5:84:c2:6d:4f:07:6e:b2:05:e3:7c:
13:d3:75:a0:db:8a:97:8c:00:bb:a5:0e:a8:4d:09:
6a:02:e7:6f:b4:ee:2f:0c:d8:71:a2:f6:c7:fe:6e:
d1:f1:7f:4a:7f:44:a6:e0:c2:ca:78:64:95:60:55:
b6:1c:db:8e:1a:e0:bd:94:5b:f5:fa:2c:49:c8:94:
5a:fa:21:ef:82:58:13:0c:36:6a:ef:96:bf:68:f4:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:05:87:8B:09:04:C7:22:0E:8A:2B:91:41:80:3F:E1:5E:9B:6E:91
X509v3 Authority Key Identifier:
keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:15:fb:02:09:51:fc:b0:5f:54:6d:8f:98:22:b7:22:b7:74:
55:af:f2:03:66:8a:56:6f:17:59:4e:9b:1b:e7:1c:63:3a:56:
ad:38:af:22:c2:e0:7c:8f:9a:0e:f1:aa:a9:d7:36:94:7a:66:
70:ee:93:35:10:ea:c3:2c:07:f8:f3:3d:0d:22:a6:dd:bb:cb:
61:a6:4e:f3:65:c2:46:06:49:d2:42:03:2c:c1:19:44:85:00:
fa:ed:2a:8a:ce:13:ac:13:a8:3c:c7:65:ce:3b:43:88:17:a5:
80:27:b2:01:90:0c:b4:af:99:d0:26:8d:ef:2e:98:e7:01:fb:
55:4a:1d:be:4e:05:82:af:6c:b8:a0:a4:86:b7:9f:86:72:ae:
d5:fc:2e:1d:0b:a8:bb:45:44:09:62:c9:0f:74:ec:21:5d:cb:
ba:bf:a7:19:35:b7:8b:7e:e1:34:3f:8e:52:7e:64:6e:1b:27:
d0:b8:25:6d:27:a8:12:75:45:93:cc:52:18:0b:83:72:b2:b7:
8c:49:fb:09:10:bc:32:07:d7:09:37:0c:0a:3f:26:25:2f:39:
ed:e2:28:fc:62:0c:26:cf:ce:cf:85:a7:c9:ea:7e:5f:1e:a4:
7f:44:bc:87:5e:a7:58:b3:d1:57:5c:7d:98:d4:0e:0a:db:97:
56:48:ae:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:22:12 2026 by rpki-client