Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/XgXHZOtNisoxRESNA6F25Dz60IE.mft
File: XgXHZOtNisoxRESNA6F25Dz60IE.mft (raw, json)
Hash identifier: v05kyfgz3YpSv9qR1tfINDJ+2JPlyS7vLx2L1G9iZuU=
Subject key identifier: F2:23:F2:45:DA:F2:97:EF:68:13:D2:60:FC:D5:7B:7A:CE:C1:82:5B
Authority key identifier: 5E:05:C7:64:EB:4D:8A:CA:31:44:44:8D:03:A1:76:E4:3C:FA:D0:81
Certificate issuer: /CN=5e05c764eb4d8aca3144448d03a176e43cfad081
Certificate serial: 01A159308118D77175D7EF943705C58F1392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXHZOtNisoxRESNA6F25Dz60IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/XgXHZOtNisoxRESNA6F25Dz60IE.mft
Manifest number: 012C
Signing time: Tue 20 Oct 2026 12:01:53 +0000
Manifest this update: Tue 20 Oct 2026 12:01:53 +0000
Manifest next update: Wed 21 Oct 2026 12:01:53 +0000
Files and hashes: 1: UyxB4_M6sfLG7FUJYdTy2gzBU_c.roa (hash: ce81QlXDcblfIJgkC0ymWfJ2jbMOr7bfYQ/rPixgIFg=)
2: XgXHZOtNisoxRESNA6F25Dz60IE.crl (hash: yVwFaaUIkDe+3jO2gNYohmFB8wv9SC4Qx4kax/pYcvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/XgXHZOtNisoxRESNA6F25Dz60IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/XgXHZOtNisoxRESNA6F25Dz60IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXHZOtNisoxRESNA6F25Dz60IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:30:81:18:d7:71:75:d7:ef:94:37:05:c5:8f:13:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05c764eb4d8aca3144448d03a176e43cfad081
Validity
Not Before: Oct 20 12:01:53 2026 GMT
Not After : Oct 21 12:01:53 2026 GMT
Subject: CN=f223f245daf297ef6813d260fcd57b7acec1825b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:40:5a:50:3c:a4:67:39:93:8d:9b:fa:ca:
78:69:4b:0e:d6:30:cd:07:3f:ee:5f:4a:7a:ee:5c:
58:c9:b1:a7:54:31:a2:27:a7:ca:8d:60:c5:82:0d:
3a:aa:02:b1:b7:a5:2d:bc:30:b7:3c:bd:53:0c:6c:
f2:3d:e5:aa:eb:7e:08:1a:8d:ce:94:95:8a:cc:e1:
a8:09:e7:55:a4:35:bf:2a:6c:62:b5:cf:eb:db:11:
20:13:e5:82:3a:16:45:39:6f:26:51:fe:a9:11:aa:
fd:35:af:24:9a:89:cf:39:59:3f:52:e3:15:3b:7e:
9b:13:cd:ca:f0:bf:58:95:19:06:84:92:12:08:c5:
c7:cd:d0:73:97:c5:7c:f1:07:96:ee:0e:d2:e2:9b:
a7:d2:f9:46:03:1e:f9:94:d5:b5:4d:0e:1b:de:29:
71:8b:f0:6b:fb:22:ae:9e:24:94:6c:8c:d3:5f:17:
46:f5:71:23:2f:85:6f:62:93:8f:7a:f1:4c:69:8b:
e3:03:ca:4b:94:69:2d:13:fa:fa:26:22:1e:66:08:
f8:fc:18:13:58:39:34:ea:78:cf:f7:a1:7c:03:fd:
03:f9:99:43:36:99:4c:32:f3:44:c9:72:76:f2:d4:
bc:d4:e7:70:72:bb:60:43:5d:38:f4:e4:aa:66:ab:
40:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:23:F2:45:DA:F2:97:EF:68:13:D2:60:FC:D5:7B:7A:CE:C1:82:5B
X509v3 Authority Key Identifier:
keyid:5E:05:C7:64:EB:4D:8A:CA:31:44:44:8D:03:A1:76:E4:3C:FA:D0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXHZOtNisoxRESNA6F25Dz60IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/XgXHZOtNisoxRESNA6F25Dz60IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/XgXHZOtNisoxRESNA6F25Dz60IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2d:ba:c9:97:e9:a9:3b:96:dc:7d:af:b1:01:ba:d1:87:a0:
8e:c5:48:04:eb:29:9c:bb:5e:e9:22:be:41:17:bd:85:c4:56:
6a:ef:89:58:94:c7:3d:79:15:59:d6:95:be:30:e7:6f:39:f4:
23:2e:05:85:35:71:58:49:70:68:f8:b7:c9:90:5c:a8:b6:7f:
82:15:c2:b8:f6:e6:62:5f:44:93:b1:fd:50:82:7d:b1:7d:36:
cb:34:4f:28:5b:ee:2c:af:df:e7:ac:c5:9b:d3:72:f2:33:b0:
ab:e3:9a:71:cc:48:b2:d7:15:85:e1:ff:4e:0b:25:4c:81:c6:
10:80:84:03:41:3b:a1:a0:87:e3:ce:5b:82:05:d4:e0:23:e3:
41:77:0e:de:6e:d6:05:ce:43:c5:c7:21:69:cd:a1:8f:69:ca:
da:0f:e2:36:50:3d:f7:a5:a3:8b:45:68:ba:06:16:74:57:2d:
e4:82:15:13:71:e1:99:9a:bc:b7:2f:a2:88:3b:93:b2:ce:bb:
94:46:d9:70:2e:cc:05:9d:91:9d:a6:e2:93:4c:a1:58:9d:b8:
21:41:b3:b6:06:ab:ca:e2:f7:dc:be:b5:b6:1f:f1:c4:8e:6a:
f7:a3:78:40:77:45:d2:75:b7:29:57:29:25:d2:c3:1f:89:3e:
ce:bd:7a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:02:44 2026 by rpki-client