Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: trowqcHaO//WQ8xEN8evfzratkCpZsgnyWjQVi5qh7c=
Subject key identifier: F3:0B:CD:3F:E6:E3:8A:8E:F5:60:1D:54:04:13:7A:D9:58:00:92:5C
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 01A183071CAEDF918686F985AB08CDC1190A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 18A2
Signing time: Wed 28 Oct 2026 15:00:43 +0000
Manifest this update: Wed 28 Oct 2026 15:00:43 +0000
Manifest next update: Thu 29 Oct 2026 15:00:43 +0000
Files and hashes: 1: PzMpMCVPdUDUUH8GTuka9keIPNQ.roa (hash: IKEP0LVD3JdV2nQIZoc3FzX3XZlJgMd0mFQnJDaVjxI=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: uSEzHwmD4/JIO/j3mSCU+4SXg81tNUxJMs+VyiorlEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:1c:ae:df:91:86:86:f9:85:ab:08:cd:c1:19:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Oct 28 15:00:43 2026 GMT
Not After : Oct 29 15:00:43 2026 GMT
Subject: CN=f30bcd3fe6e38a8ef5601d5404137ad95800925c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cf:a1:2f:a3:76:b5:da:b0:27:72:0f:b4:99:
60:c4:9a:6d:6f:3c:c7:d1:18:98:dd:f1:1f:eb:de:
c4:09:9a:45:bb:13:0a:63:a9:24:91:ce:74:79:02:
58:2a:a0:12:2d:81:df:31:f8:ee:21:cd:7b:dc:76:
d8:dd:b2:be:3c:a5:b2:d5:43:a3:0a:67:f7:e6:4f:
ae:1e:4f:a6:ef:02:68:86:ee:2d:72:a4:f4:f0:f2:
4c:bc:02:f4:99:04:73:51:ba:d5:2b:13:05:62:1e:
06:8f:b9:16:b4:c7:49:85:6c:6e:e1:6d:8d:dd:47:
16:a3:1d:26:c0:f6:d1:57:10:4d:b8:44:65:15:41:
af:7e:b8:c9:2f:dc:8f:74:da:c9:11:a9:31:45:95:
6b:20:f0:0b:e8:37:71:06:56:5a:0e:98:8d:25:7e:
8e:6b:b9:be:78:1e:dc:cf:80:f6:2a:c4:cc:e2:51:
d9:31:22:a9:e8:55:5c:16:05:f4:8f:bf:cf:d6:50:
a5:b4:63:7f:25:0d:21:24:02:d2:cd:9d:bc:92:a1:
29:a4:0b:5e:be:5f:0d:59:0d:99:6b:81:d4:73:b1:
38:f4:bb:70:aa:a2:50:b4:ab:8f:eb:64:7e:4b:11:
c9:24:16:ec:8f:26:43:2c:ef:f0:a9:4b:25:b0:99:
a8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0B:CD:3F:E6:E3:8A:8E:F5:60:1D:54:04:13:7A:D9:58:00:92:5C
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:93:7a:1c:73:21:3e:8f:c5:9f:9e:83:8c:23:4d:20:f5:a3:
47:e6:16:1f:bd:45:b1:80:f1:0e:f2:48:02:60:a9:da:f6:ed:
73:a4:80:1e:ae:07:8e:93:d6:6c:a0:b9:6b:d9:3a:d7:09:c8:
d8:de:1b:25:95:29:3a:3a:1b:8b:20:78:de:a9:db:45:b8:e0:
7e:00:51:a1:db:58:ee:dc:cb:ec:3e:44:4e:fd:b1:bc:2b:dc:
23:cd:39:5b:90:ca:85:e4:57:f0:a7:4c:c2:19:a6:a8:11:fa:
9f:25:0c:a5:b6:dc:a8:2d:4d:c1:2a:3d:8f:63:74:ec:aa:90:
69:1f:04:f3:65:a0:4c:ec:fe:f1:e0:43:bc:46:64:4a:c4:b4:
e3:7e:7c:37:35:e1:15:58:be:2f:d9:75:81:eb:49:41:d5:10:
1a:88:cc:aa:93:9d:ad:7e:40:f8:fb:5b:bb:cf:c2:aa:a2:20:
f9:a1:05:cd:3f:4a:69:07:fd:8d:90:1b:ee:39:38:81:5c:b0:
92:25:a8:d3:2f:7e:57:23:13:09:fb:d0:4c:7c:34:d3:95:d7:
18:73:a8:44:61:31:1e:cb:50:2e:85:93:c2:dd:4f:91:75:a0:
84:73:c0:d6:93:9d:38:51:8c:22:3b:c2:c9:38:4a:9c:b1:a4:
ab:72:fa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:23:43 2026 by rpki-client