Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: V/+zkAz8WKGLadD7Xlbi9/G3sj5uEcfahn+zcuZj6KI=
Subject key identifier: 49:CD:48:7A:E2:89:4E:37:BE:0C:9C:07:39:F1:2D:9E:69:51:15:81
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 01A1833E1072F8977063329EA5CFECEF96F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 1ACC
Signing time: Wed 28 Oct 2026 16:00:44 +0000
Manifest this update: Wed 28 Oct 2026 16:00:44 +0000
Manifest next update: Thu 29 Oct 2026 16:00:44 +0000
Files and hashes: 1: MsnqFaljx-vLs6R1klCk-k4mqbE.roa (hash: 9w5Fj/ix8Y1oWU+nhqJcIUFjp29qAgz5fs3U3GbWExc=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: tg5Qm5MeNkwT4gLTa7267yKgHa9e69V9cHAcaFAIJ7w=)
3: Y-0LFW4QQXme0gq1FoIF-wZ-SQc.roa (hash: wu/R/xhocC/i/LlV9UK65CdEa6/Nxe99KI2JumwUKlc=)
4: a_XjHLHQF6uE4SSOtjsOa8f4-2Q.roa (hash: m3nX1Uyzi87lTewY/HPBoiE0m8iVkIMnK/iQX/3hwYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:10:72:f8:97:70:63:32:9e:a5:cf:ec:ef:96:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Oct 28 16:00:44 2026 GMT
Not After : Oct 29 16:00:44 2026 GMT
Subject: CN=49cd487ae2894e37be0c9c0739f12d9e69511581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:17:6c:e1:2b:3a:ae:32:4b:cc:86:6d:d7:81:
7d:59:ea:d4:99:f7:2c:be:2f:4b:9b:a5:e2:23:35:
d5:6c:5a:34:c9:69:61:8c:77:bb:95:e6:94:c7:1c:
33:83:48:4c:80:71:59:b8:e3:dd:a7:0c:50:db:0b:
ba:36:1e:66:0c:ad:85:6e:08:5c:ed:0d:84:3b:cd:
f4:f0:83:54:64:81:05:30:1b:38:f8:07:f9:00:63:
29:ea:39:a9:e1:4e:66:b9:ae:13:e2:61:57:80:de:
13:ae:91:b7:c7:21:c5:f3:7c:a3:35:b5:6e:12:6b:
da:4d:33:a5:69:40:fa:e0:f2:b2:5e:de:35:6c:d1:
8e:7f:06:a8:b0:d9:50:6a:f7:93:7c:4c:07:0d:96:
02:6c:7c:d2:03:ec:f2:3a:bb:51:15:50:03:96:31:
58:c6:6f:b5:df:43:25:20:c1:72:57:94:94:7f:6c:
3d:e9:a5:25:d0:91:fe:70:e8:9f:f2:02:99:f6:a7:
24:30:0c:4b:01:dc:aa:19:c1:d6:70:56:78:0a:36:
47:72:27:85:ab:87:64:7d:e5:92:15:c3:82:c2:49:
24:42:ad:48:cd:31:c2:6d:db:90:f1:ee:dd:d8:c1:
ab:7f:db:a0:c9:52:59:91:01:6a:70:c4:42:a6:12:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CD:48:7A:E2:89:4E:37:BE:0C:9C:07:39:F1:2D:9E:69:51:15:81
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cf:7b:7c:9c:0a:70:68:ac:85:f3:a3:ab:02:39:c3:80:58:
f1:0e:fc:c0:12:b1:b9:6f:e1:58:bc:de:7b:a3:07:e7:7d:80:
99:49:e4:11:6d:9f:ce:25:5e:62:73:6a:ea:0f:95:48:5c:3e:
db:32:91:5c:d4:19:cb:34:ac:81:65:57:51:3b:cb:ea:1e:1e:
08:12:bf:90:e2:dd:a6:66:f4:8f:53:70:12:72:88:bd:e0:b6:
89:44:9e:cf:e9:bf:b4:25:8a:8e:a6:0e:1d:8f:22:10:05:08:
e2:c2:43:47:13:f7:aa:59:d9:c3:d0:11:c5:e6:4e:af:e1:48:
c4:b8:f1:ec:af:ab:7c:71:2e:a4:f5:de:24:0e:c5:3d:66:b4:
ac:4d:0b:26:59:39:e0:78:ec:50:2e:23:10:3a:cc:29:7a:f9:
10:34:96:c9:d4:ce:b5:8a:81:e8:e8:93:9d:35:9d:a1:23:10:
1f:e1:b0:08:23:10:26:bb:61:8e:48:9b:d8:89:60:55:fc:df:
de:0b:d6:4d:de:3b:d4:99:fc:7b:14:e8:5f:24:ad:a9:7f:26:
aa:98:0c:45:db:7c:cc:b6:dd:c2:f9:4d:d3:cf:47:de:df:3c:
32:63:f4:31:39:8d:6f:23:b8:99:c0:88:31:16:4f:b5:cd:30:
39:ea:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:46:32 2026 by rpki-client