Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: npJtEgime899f9ZsoRk7QWAQ+RjbSxuaSeHbIBoa9ec=
Subject key identifier: F1:1D:2E:43:34:CC:C8:E7:E4:FD:C5:88:BD:4B:FF:C1:76:49:E9:E1
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 01A17BF2C67A49BC75C8E113141682898353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 0A85
Signing time: Tue 27 Oct 2026 06:01:10 +0000
Manifest this update: Tue 27 Oct 2026 06:01:10 +0000
Manifest next update: Wed 28 Oct 2026 06:01:10 +0000
Files and hashes: 1: 1-N-Z3cPVFu_Om0GHK2AgOkgXdoM.roa (hash: fr16WHaKP/dmz7kwPH4GVwwXFVV/SyIEEVY49/wQV+U=)
2: 1aw8Nv97xOelgCP3-YnwnaxEm5Y.roa (hash: jy29WIgwdNl8op/0r93ONPzqQSdB42DU8p3Gs7efZY0=)
3: 2PxDuTNSWd2nVBQOyZp7w-a3G48.roa (hash: nuRMk74zjQwmTzVhehj6QjrkhW4+qo+fGCHLFEBJBC0=)
4: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: tsF9IyR+Su86bdYAncc2y1UZK4DgKxq2TU0KdyavFF4=)
5: c9R4pyYEgXuth8LibhVlQrijaqw.roa (hash: GjJoF2AKi6roB+eJMggN2owFvnp/FEnfdBtdPLGnDgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:c6:7a:49:bc:75:c8:e1:13:14:16:82:89:83:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Oct 27 06:01:10 2026 GMT
Not After : Oct 28 06:01:10 2026 GMT
Subject: CN=f11d2e4334ccc8e7e4fdc588bd4bffc17649e9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:53:19:b7:9b:eb:62:d5:cd:0e:14:39:1c:
e5:e4:12:2b:e0:68:7e:df:8c:f0:2e:2b:04:6d:e0:
f3:22:b5:e4:68:35:4a:d5:1b:80:ef:33:3a:2c:c5:
79:55:97:78:38:8b:6d:48:30:1f:74:e1:85:e3:d5:
f8:cf:9a:a6:3c:0f:cd:9f:7b:8a:fa:4f:67:04:bc:
b5:bb:de:d5:34:70:05:b4:50:57:5e:32:a2:53:52:
c3:3b:0d:c3:f0:f3:4e:d7:2d:1e:2f:c7:a4:8b:41:
30:6b:50:6d:4d:7c:c8:e1:ea:a6:4e:83:69:1e:ed:
4d:e5:d5:d9:a2:e7:24:a9:ae:8e:77:1e:ec:9b:aa:
05:59:96:7b:f1:d1:d0:5f:04:6a:4d:2d:35:77:10:
ff:a3:8e:f9:de:fc:36:11:b6:f7:34:fa:f0:87:42:
33:38:a1:24:1f:0a:7c:69:fe:aa:e2:1a:7f:22:3e:
77:1c:6a:7f:97:16:f8:a0:5c:e5:2f:bf:7d:29:18:
dc:72:ad:ca:42:5e:6b:3d:5a:08:d0:a2:44:9a:05:
10:a6:d0:77:70:37:98:8e:4d:52:c2:06:e3:2b:93:
6d:f7:82:55:38:e4:eb:22:70:0d:78:18:28:86:ac:
7f:cf:15:93:4c:eb:04:b8:a3:43:9a:18:42:43:f6:
c6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1D:2E:43:34:CC:C8:E7:E4:FD:C5:88:BD:4B:FF:C1:76:49:E9:E1
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8e:ba:29:a9:7a:48:32:22:b8:90:a0:07:01:41:3a:fb:be:
fd:c4:cf:cf:8e:c0:3d:c5:b9:35:dc:a3:cd:bb:dd:81:ec:25:
6a:29:0c:66:1c:c0:92:57:c4:b7:21:ec:54:63:b4:bc:5e:ba:
28:78:29:3d:56:e9:47:fe:6f:f6:59:20:2f:92:98:b3:8e:3b:
c2:32:5e:41:be:7c:7a:8f:2b:63:87:72:c2:48:87:49:1b:8e:
a7:5d:9e:92:0e:be:f7:86:01:ba:32:c8:11:f4:f7:08:83:9c:
44:60:27:89:f0:92:06:cf:9b:87:0f:4e:43:a8:4a:ab:66:f4:
7e:ac:5e:29:7a:0d:31:52:5e:7d:36:e2:df:9f:21:0b:03:27:
c4:5a:f6:70:71:94:82:30:8f:c0:ba:49:2f:1f:f1:c7:03:84:
dd:f3:2d:52:53:74:e1:4d:a4:ba:6e:88:2c:2b:9f:fa:84:77:
eb:f5:a7:a7:48:52:ba:d3:78:9e:63:95:0f:5c:5d:c6:a4:24:
85:77:fa:0a:30:ad:8a:d7:19:e1:40:cb:3e:08:91:19:0e:0d:
00:71:99:d2:7a:a9:73:40:41:df:ef:f0:6b:f0:78:67:1b:22:
81:97:d7:84:60:f6:76:aa:94:69:b8:6b:1b:87:86:75:d4:1e:
14:27:88:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:32:18 2026 by rpki-client