Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: 0qje3T18mZ8K7JoxnuJZ6+RZyoRWjiELQsy4Y2BgWmI=
Subject key identifier: 52:AA:9E:2B:B3:00:61:51:44:C5:11:FE:D9:9C:7C:F6:21:F8:F0:9C
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 01A17ADF842A2E5B63289C681009AD085FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 01:00:30 +0000
Manifest this update: Tue 27 Oct 2026 01:00:30 +0000
Manifest next update: Wed 28 Oct 2026 01:00:30 +0000
Files and hashes: 1: C_8ZJTyNvSRdSrcMB1h6NMWurAU.roa (hash: ZLk+V2N06Qw0Noo/WtokMKF+p0Gjo1uyGxURWhRlXwY=)
2: XAYcuxsajA5hLrmscRs4oynzyUg.roa (hash: AvPY1r1vk0ST8v3sz0+K9LIFAxv9kmWL/J2CaIlXu0s=)
3: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: DiI47q3TNHLrhDSMJaKpJy4scU2b2qzBUa1Tx6KYtcs=)
4: b_b8FgUBWx7o4mrGSWETF1x68gQ.roa (hash: YqVNmCVOzW8nbc96cPhMeB/DqemnZKobEb9c09pjCAo=)
5: mjMQEKksicvgZzYu86cOaUikq_o.roa (hash: 7g64PoLicqxVLeKtHUopkjJGRzw3GYF64nr8YZ5vEEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:84:2a:2e:5b:63:28:9c:68:10:09:ad:08:5f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Oct 27 01:00:30 2026 GMT
Not After : Oct 28 01:00:30 2026 GMT
Subject: CN=52aa9e2bb300615144c511fed99c7cf621f8f09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1f:05:77:cf:e7:b1:dc:19:f2:0d:74:3c:b8:
cd:06:92:6d:d0:52:d7:05:d3:27:89:f0:aa:43:39:
ad:4a:73:be:12:ce:23:6c:05:b6:52:78:61:4d:25:
69:74:58:e5:0b:16:82:10:82:20:9d:2e:60:4a:e3:
ee:ed:e5:39:4b:0f:7e:62:e3:0a:07:e2:9a:20:ea:
59:4c:4a:1c:99:7c:85:f7:1c:fa:95:d1:b6:fb:91:
25:56:07:e9:f3:73:e0:1d:dd:4d:0e:84:30:b8:18:
eb:a1:45:10:b0:a9:39:e4:62:eb:f0:87:a0:96:e8:
d3:22:e7:b2:b9:dd:8f:99:65:eb:96:dd:ff:50:de:
bf:ef:0c:69:dc:d5:6c:0a:f4:9e:9c:67:4e:2d:27:
35:b5:a4:0a:2a:b6:a7:2b:4a:df:c6:81:e5:5f:99:
63:df:e8:33:9b:36:80:6d:43:0d:d2:2b:44:fd:c6:
2d:32:c2:1c:87:92:46:0f:be:de:b7:30:be:e3:51:
f4:f0:97:b9:df:bf:ef:4f:c3:3b:df:c1:64:7e:49:
4b:9f:31:cd:98:65:09:de:86:76:0c:0f:40:45:45:
24:fa:3c:da:99:74:ac:69:17:1f:4b:c1:18:f1:b7:
19:53:1f:8c:b5:1b:5a:86:9d:01:fa:18:f5:37:68:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AA:9E:2B:B3:00:61:51:44:C5:11:FE:D9:9C:7C:F6:21:F8:F0:9C
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:45:2c:de:15:eb:ca:dd:6e:e9:9f:67:22:8e:e5:1d:06:b5:
34:bd:4d:29:e8:b8:e9:23:8d:50:06:4f:47:66:a9:22:b6:c3:
06:f1:0b:be:e0:a0:f3:eb:38:63:b6:bc:d8:c6:04:04:af:bb:
63:2a:76:57:ee:10:ef:61:25:58:d3:bd:ed:90:22:06:09:39:
da:8b:d0:f2:a4:d5:df:74:60:f6:18:4a:57:14:93:dc:50:b9:
f8:04:3f:59:04:e2:7e:aa:f7:3b:a7:6a:69:e1:00:37:3e:d4:
20:e5:8d:45:28:61:00:40:c6:5c:4d:11:88:46:d0:e8:89:b9:
45:46:6d:0f:06:cf:48:6e:1e:8b:f3:6a:b6:8a:4d:37:77:75:
f4:ee:45:ea:64:8d:cd:23:55:54:b1:2c:cd:7c:98:e4:55:53:
53:2a:a7:86:5d:a2:d0:91:64:81:33:08:ab:38:a1:33:6d:7c:
3b:3d:81:b0:39:ee:68:96:df:b7:9b:9c:2a:aa:6c:92:85:c3:
0f:2b:90:b4:c9:4c:be:87:f0:d6:57:f9:00:8a:16:6e:a1:d9:
2b:04:37:ae:38:27:ab:13:94:d9:54:8f:9d:45:44:cf:d2:03:
cf:07:65:d1:05:69:6a:09:cc:05:49:fc:9f:43:5e:f0:f9:ba:
2f:a6:86:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:36:45 2026 by rpki-client