Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: ExEtv5BW4k7FJUKwIxN/g+HyCAW36Md5zsj0bCmR5Ug=
Subject key identifier: 30:04:AE:1D:A9:B2:A1:39:43:66:0F:53:F9:27:5B:3C:77:D8:72:17
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 01A139371234197A68ADB2A55E9D0D174E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 1AA2
Signing time: Wed 14 Oct 2026 07:01:12 +0000
Manifest this update: Wed 14 Oct 2026 07:01:12 +0000
Manifest next update: Thu 15 Oct 2026 07:01:12 +0000
Files and hashes: 1: NKg93JWQUnBu80RX13MwmqJxvVc.roa (hash: nG4jnHVVr/B/zg5snhsHaHEVH2wq5BQYMoc/wJLZKCM=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: 3i4Nfw70QneTDDoDB0Bij4hTQn1VFzGIc4z1fm+gaVk=)
3: wGoncIYhxzrOvpFggApuVrKV4Vk.asa (hash: S/6luEA1foPNyWEYWaj/UsXwLkgTP/ejkSFX9YYjOE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:37:12:34:19:7a:68:ad:b2:a5:5e:9d:0d:17:4e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Oct 14 07:01:12 2026 GMT
Not After : Oct 15 07:01:12 2026 GMT
Subject: CN=3004ae1da9b2a13943660f53f9275b3c77d87217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:9c:12:73:a9:da:df:19:e1:3b:21:ac:d7:
86:07:5d:e1:d7:bc:eb:d5:7b:3a:dc:33:61:19:57:
27:8f:89:3a:43:25:d8:66:52:06:1c:da:b9:ef:6a:
02:b4:06:76:6f:f6:02:18:13:df:42:b0:7e:9e:71:
75:55:f6:b8:84:4b:07:f8:e0:2b:6e:31:0d:44:c9:
cd:47:cc:59:9a:68:d1:66:bd:ab:ba:db:0f:e6:24:
4c:b4:a8:2f:be:ce:10:75:a6:d3:08:1d:2f:03:98:
ab:2f:16:17:9f:21:84:85:77:88:d4:2c:93:b4:96:
57:b2:78:31:d5:78:89:3a:5c:c6:d1:b9:47:22:fa:
ba:8c:af:63:47:c0:71:bc:c9:32:c2:5c:a3:61:63:
68:4f:8d:6a:d7:79:74:96:20:2c:98:9c:40:7c:b2:
2d:48:5f:1f:ba:cf:05:26:a5:ec:b9:3c:5f:36:86:
fa:0a:17:04:5a:a8:09:9c:8a:f1:9f:ae:db:1e:a1:
48:c4:c8:3b:c4:f3:14:9f:e1:40:e1:af:8e:93:e2:
c5:85:60:5c:7a:4b:7a:94:4e:c2:97:e8:44:8d:04:
b0:af:46:a3:5c:7f:c2:4e:8b:59:97:64:e1:1e:ed:
b4:20:73:7c:78:28:ab:76:87:60:9e:da:30:08:fa:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:04:AE:1D:A9:B2:A1:39:43:66:0F:53:F9:27:5B:3C:77:D8:72:17
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:36:f8:59:4f:b2:71:5e:20:20:a9:50:46:6d:48:a7:00:52:
d7:c2:4b:b0:32:48:d1:02:7d:92:bf:83:ec:9b:dc:79:9d:10:
fa:dc:79:f3:a9:1d:a8:d5:27:c4:65:58:0a:ec:f4:76:3d:3c:
27:f9:f6:12:eb:15:26:7a:3a:0c:5b:09:27:7d:0b:d7:07:f2:
49:f3:25:40:88:fa:68:29:bc:54:a7:82:4c:ab:ff:0f:84:c7:
60:d1:0b:9c:c9:5f:81:3f:d8:49:b4:ed:80:5f:67:9c:26:34:
4f:57:4d:12:61:1d:2a:c3:77:a5:d5:79:d7:58:0c:30:d7:e9:
d3:92:f3:3b:82:c7:8f:4a:f3:6d:02:3f:38:e4:0a:90:f4:91:
f5:c3:0a:59:83:af:dc:9b:2c:34:ec:e4:9c:cb:d1:a2:78:4d:
39:26:09:a6:cd:25:b9:27:9f:3c:84:df:2e:98:67:c9:6d:d0:
50:5c:d4:6c:c7:e0:b0:f9:9a:55:93:5b:22:e0:c4:00:3a:4c:
1f:e5:d2:dd:45:28:28:65:3c:27:34:67:f9:d1:87:ac:d4:ae:
a8:3f:1f:6b:87:79:97:e5:3f:97:70:fc:b1:d3:f8:0d:c3:ce:
65:a8:7d:05:2b:1b:ba:10:8f:c8:8b:23:7e:8d:2c:34:a2:18:
76:69:65:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:48:31 2026 by rpki-client