Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: SvCuiPbDI8ADmSCvU35GDWqXSnb91UMUCEWUUG5xsak=
Subject key identifier: 89:52:C5:E1:DE:A8:5C:63:0F:39:17:D4:5F:4E:04:BF:0A:82:F7:6C
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 01A153659B2C1BBE13498406684172660DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 1AB0
Signing time: Mon 19 Oct 2026 09:02:10 +0000
Manifest this update: Mon 19 Oct 2026 09:02:10 +0000
Manifest next update: Tue 20 Oct 2026 09:02:10 +0000
Files and hashes: 1: 0m0w4NNU4NOo-8_y3zxSZs-Hcdw.roa (hash: d/QLJQ6M0z3RViK7W5MP6w1Y/VAa68ow0nmGzD8+98w=)
2: HKYjGRXbhcsbgj-zO-lhhp8iHf4.roa (hash: r0qRRb9G05Y3zjQIakuz14pzZ5PruwE51RJizxy5NMg=)
3: OXzsf9355x_Po1YlBAMmXxH7YfM.roa (hash: HyUx0AM/t82HDbhNTlK93mKwtwtfVGbEby4qtiM7vwI=)
4: SD-pJr4ttUBaZ1S20Tz4AuB6P1I.asa (hash: +ZZUrq34lcu1uY7HrOMrXNxK/Du8JITTl9RrFi410RY=)
5: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: GL8L0stTaFoG3IbtuAUVR77Qlt/gVaGD/s/acC7i9Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:65:9b:2c:1b:be:13:49:84:06:68:41:72:66:0d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Oct 19 09:02:10 2026 GMT
Not After : Oct 20 09:02:10 2026 GMT
Subject: CN=8952c5e1dea85c630f3917d45f4e04bf0a82f76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:1d:b9:0c:a7:14:f5:71:38:e1:4c:85:91:
4a:0a:40:95:0f:a2:e1:e7:a9:4c:24:2d:50:53:88:
47:02:c9:02:95:29:65:c7:05:9d:72:83:4c:9f:49:
7f:29:1b:b8:d3:d1:b0:f7:0f:d0:83:cb:8f:df:63:
d9:bf:e8:4b:4d:38:52:a9:61:93:2f:62:0e:9f:4a:
6f:2d:7e:57:c5:5b:5c:eb:4e:88:8b:9c:7b:68:47:
af:c6:1b:c0:5d:f1:52:59:75:ea:df:91:a6:ac:ba:
4f:28:4b:4a:34:97:94:fb:18:11:24:57:e8:37:06:
28:2b:5b:97:11:6d:19:aa:b9:0f:54:5f:89:ae:9a:
89:4a:0a:5a:02:1a:cc:96:e2:72:aa:8b:1a:9b:bb:
df:dc:e6:8f:25:37:06:b4:70:81:21:02:a8:56:4b:
de:97:c6:3f:70:41:39:7d:10:84:1a:df:0c:f8:a0:
80:2a:86:fe:42:0d:3c:f3:d0:8d:ac:1c:05:7f:7d:
64:e3:12:69:26:db:78:12:12:41:81:3c:94:31:26:
33:a0:b7:9b:7b:2b:bc:b9:34:71:17:a3:07:6e:e7:
3d:f4:3f:5d:b0:c4:fe:05:3b:ca:bf:e6:1f:ed:10:
bf:11:14:fe:49:29:5e:82:05:40:a0:6c:25:84:1f:
3a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:52:C5:E1:DE:A8:5C:63:0F:39:17:D4:5F:4E:04:BF:0A:82:F7:6C
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4d:cc:5f:77:0b:90:9d:b1:1c:f0:e1:6f:50:fe:03:48:83:
c1:7c:ab:54:0d:d1:a3:6a:f6:ee:94:55:0f:0e:30:1e:4e:88:
8b:39:2d:79:6d:95:f9:91:9d:6f:da:10:99:2a:d5:36:8f:74:
7c:e7:a5:de:c6:a9:26:4b:a9:2c:4e:12:8b:c0:18:01:28:bd:
cf:2b:34:8b:47:5d:5a:22:d6:5c:d1:03:47:58:a0:26:6c:f6:
4d:e4:c6:a3:a8:0e:ae:21:3d:52:20:f8:f1:a5:0e:06:da:fc:
63:36:3a:2d:16:62:43:cf:01:c2:a1:91:f8:9d:ea:d2:c7:d5:
c5:12:5e:ae:94:11:df:3b:18:63:ab:93:5d:f0:41:29:26:61:
7a:eb:84:26:e0:f2:e7:d6:d9:a6:89:0d:72:f3:c6:8d:97:ac:
48:07:c1:51:4f:f7:e2:d9:48:df:fe:7c:ad:70:6f:29:b0:8f:
82:1e:40:8e:c6:bb:f7:51:53:c9:a8:de:8f:ee:41:48:3d:91:
b3:7d:f7:c6:7b:7f:2b:fc:8e:12:f8:ab:0b:8a:f6:ce:0c:fc:
2e:d8:57:97:13:3a:fb:07:e4:d1:3f:d5:8e:fc:31:6b:53:7f:
b7:21:fe:e8:0e:87:80:66:0e:e7:04:8e:c5:bd:13:77:77:59:
54:ca:f1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:21:19 2026 by rpki-client