Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: 7pu3biWQZbw4X6sHmPHLIx18sAnX/a7idiSDyYPTxxM=
Subject key identifier: EE:48:6E:0B:F9:0F:BB:1E:C5:89:27:64:56:90:66:B6:BF:27:82:9E
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 01A17F2A6A29AAA43D4DC9186557218C7C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 18A0
Signing time: Tue 27 Oct 2026 21:00:47 +0000
Manifest this update: Tue 27 Oct 2026 21:00:47 +0000
Manifest next update: Wed 28 Oct 2026 21:00:47 +0000
Files and hashes: 1: PzMpMCVPdUDUUH8GTuka9keIPNQ.roa (hash: IKEP0LVD3JdV2nQIZoc3FzX3XZlJgMd0mFQnJDaVjxI=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: m0Lr7iL0nxJu428qwJxOti0wxkZEEHm3G7SRxn/FPRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:6a:29:aa:a4:3d:4d:c9:18:65:57:21:8c:7c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Oct 27 21:00:47 2026 GMT
Not After : Oct 28 21:00:47 2026 GMT
Subject: CN=ee486e0bf90fbb1ec5892764569066b6bf27829e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:cd:9a:75:43:6c:24:da:22:c8:eb:68:83:
b4:ce:9f:a7:27:d1:1b:34:9e:70:d5:d8:8a:73:65:
87:e2:c6:ec:28:fd:70:f7:f3:6c:9c:c9:11:c0:e6:
e2:5d:e3:83:dc:3f:9b:f3:0a:08:c3:02:b7:16:73:
76:fd:e5:15:7d:97:19:15:d5:c4:51:67:72:0c:89:
bd:2f:02:ff:20:fa:3b:38:dd:04:ed:c9:fc:02:29:
24:d5:90:03:c6:5a:a9:cc:61:e4:f0:bf:30:17:eb:
61:f1:04:55:3c:4b:68:9b:55:a8:fd:57:c1:13:34:
df:75:85:6c:8b:6e:e0:37:5b:ff:1d:d8:c0:27:3d:
c7:93:da:47:dc:67:4b:c2:8c:ed:36:0c:26:40:31:
54:3d:66:43:e6:2a:63:1f:0e:d8:a5:ef:b5:2f:e6:
79:a6:58:d9:90:35:14:e4:cc:c5:87:00:fb:5e:68:
8a:f4:9a:77:f9:8a:b1:d3:ff:ac:45:6b:ea:93:5a:
f2:a9:c6:c5:2d:c4:83:ed:47:4e:66:93:d2:6c:23:
18:22:13:62:8b:63:c2:d4:46:ba:7e:b3:19:ae:f8:
49:5e:83:6b:f6:b9:04:71:8f:62:e8:46:64:ce:b5:
6b:7e:c3:90:e6:a4:2e:43:16:1d:64:98:03:2c:cc:
68:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:48:6E:0B:F9:0F:BB:1E:C5:89:27:64:56:90:66:B6:BF:27:82:9E
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e9:8c:ce:be:11:24:ab:ed:e3:ff:9e:ae:90:78:8f:0c:38:
c7:f5:66:cc:89:1f:9c:16:f5:2c:1c:14:43:d4:7d:b2:95:fb:
e3:81:80:50:42:ca:bb:d2:dc:55:b1:77:2a:2b:29:92:24:09:
a8:75:91:16:e0:be:02:74:d3:cf:54:76:c9:a2:f5:7e:7d:63:
4a:e6:cf:a4:e5:e0:48:a7:66:9a:45:94:32:07:7c:b6:93:2a:
d6:16:af:86:c9:56:c0:3b:6d:dd:af:0d:62:5d:f8:27:a7:be:
9b:25:1a:40:c5:3d:52:d7:c0:61:03:26:c6:9b:9f:11:51:5e:
e7:70:35:4e:b0:91:6c:c8:60:a2:50:44:05:68:bb:d5:2e:a2:
69:6a:66:59:d7:73:85:d1:65:5d:83:36:47:70:d7:32:52:c9:
d4:a6:94:63:59:75:a9:dc:0a:b2:fc:32:2d:7d:06:89:1b:d9:
16:c0:7b:dd:17:84:de:a1:0c:e4:13:6a:4c:a2:a9:5d:88:79:
db:65:e1:11:5d:45:53:c2:bb:4c:c1:86:51:11:0f:01:23:7a:
37:5d:a7:a2:0a:ea:b7:8f:75:c6:9b:dc:c7:a9:6f:6b:1e:04:
b3:e7:65:d9:8f:56:95:11:34:87:8a:77:20:60:00:44:34:e6:
e9:9b:a7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:56:37 2026 by rpki-client