Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: 4nmDe4OAYw8ut+AY8T42OELjuBQ4kwllbJyYY6rZDPY=
Subject key identifier: AD:1C:F2:91:BD:84:A3:B6:77:52:E7:18:7D:FE:B9:A6:A2:71:AA:12
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 01A18450B1550D65746ABA0C5A3B52708C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 21:00:43 +0000
Manifest this update: Wed 28 Oct 2026 21:00:43 +0000
Manifest next update: Thu 29 Oct 2026 21:00:43 +0000
Files and hashes: 1: 017yR2AH3nhtreOuYgsNpqkrBt0.roa (hash: jH8rFvA13JhY4szX2F6JGpx37/sl3RxTDMuhAZiU224=)
2: OOfgMgyirAjAQpzlSeWvWZ7kZIQ.roa (hash: wpPBvbubRrWqOyJudWgmsWq2Hw2lni+AI3RKu2B28mg=)
3: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: QiUd5FWkeusl5fdyMyZfITOI0ViUJLHSXnEcvfBH26I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:50:b1:55:0d:65:74:6a:ba:0c:5a:3b:52:70:8c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Oct 28 21:00:43 2026 GMT
Not After : Oct 29 21:00:43 2026 GMT
Subject: CN=ad1cf291bd84a3b67752e7187dfeb9a6a271aa12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:19:3b:ae:4a:f5:9f:b0:45:b9:27:8f:c8:b0:
2b:81:94:5f:1f:8e:0d:64:03:af:49:bd:b9:43:57:
91:68:3d:b4:11:19:73:d1:da:c5:7c:d7:4d:9a:3d:
25:c5:1f:fb:c8:84:82:8c:c0:54:59:5b:40:c5:d9:
94:fa:44:68:4b:69:84:e2:ed:1c:c8:fb:3a:15:17:
b7:c1:7e:c2:db:7f:fd:80:ba:bb:81:63:a0:6b:39:
53:22:28:8c:83:f0:da:c6:d1:1f:86:06:c8:bb:09:
fd:c9:fb:6d:b3:03:17:5c:83:b3:56:65:2a:d2:6f:
66:44:f6:40:05:dc:f7:db:1d:71:8b:62:00:52:bb:
88:1b:be:f4:23:8e:f1:73:c7:65:69:ab:c4:cc:8f:
ef:f8:39:af:dd:d2:d2:70:07:f1:45:6d:99:45:66:
c6:c0:18:ae:c2:8b:16:3a:ff:c7:6a:99:b1:e5:ee:
c6:e7:7f:0c:ab:42:83:8e:ff:85:c1:b2:72:69:0a:
6d:87:1f:90:0b:f7:c0:21:97:ba:6c:f2:3f:ca:d4:
7d:6f:54:97:a7:45:07:36:d3:fe:88:73:b5:a5:04:
37:3c:30:e2:43:f0:a1:52:33:e8:7b:7a:de:42:59:
41:05:a0:a1:52:03:42:f4:1b:65:14:ec:c5:ba:2b:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1C:F2:91:BD:84:A3:B6:77:52:E7:18:7D:FE:B9:A6:A2:71:AA:12
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:65:43:44:cc:b8:1d:b3:2c:5d:87:5d:ca:88:3a:7b:63:f9:
2a:f0:6b:98:5c:06:2a:8e:79:a5:56:40:56:67:d8:bd:80:94:
68:4a:47:fe:9c:ad:5c:35:1b:d4:52:90:2b:8a:5e:cc:50:62:
7d:cb:3b:af:a8:ba:18:fe:c9:58:72:8c:60:9c:5d:53:32:ab:
e6:16:99:52:e8:b2:2e:ae:fb:75:79:a5:69:df:1c:74:ee:dc:
22:94:bf:40:d0:ff:3b:42:9f:41:4c:db:c9:e1:28:0b:ad:57:
82:c1:d7:82:f8:fa:c8:41:5b:b4:67:da:5e:fb:18:d1:0a:88:
a5:9f:11:2f:d7:17:2c:c3:c3:8c:a2:42:21:1b:2f:c3:a9:32:
6b:f9:c2:3c:33:99:59:3f:e5:ee:1a:a7:66:93:48:04:5e:68:
09:2e:6b:d2:ab:29:32:fe:bf:42:be:55:9c:bf:6d:a7:8a:4e:
55:1f:88:81:9b:5b:76:7c:09:9b:c4:69:8e:f5:fb:98:2a:75:
ff:07:0c:5c:0f:75:63:4a:a0:2b:69:7f:7a:c0:f4:63:9d:6e:
19:00:ca:84:ce:22:aa:99:a0:52:c0:50:17:43:f7:ec:7e:bc:
7a:a1:53:a5:74:c2:68:65:49:9a:20:0a:37:94:4d:85:6f:d5:
c7:e7:9a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:49:03 2026 by rpki-client