Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: CY8GdeKjQOaWzmz87OUBeyH4OZwWdccVG4/h2ub/W1E=
Subject key identifier: 46:89:1E:D7:6F:15:F8:FC:76:20:6A:88:07:EA:E1:AB:08:35:98:B4
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 01A180E2572F8B6C48E3D2AA0FC824C87151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 0A4E
Signing time: Wed 28 Oct 2026 05:01:19 +0000
Manifest this update: Wed 28 Oct 2026 05:01:19 +0000
Manifest next update: Thu 29 Oct 2026 05:01:19 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: YxivtuCxwSOcubqWCRP/Iz2uR+o4JlewNW3CejvyBKo=)
2: xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa (hash: 4Tr8pcApL7OMPNYK6DHiqFf/BMOwe5lvOFY1rUx8z6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:57:2f:8b:6c:48:e3:d2:aa:0f:c8:24:c8:71:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Oct 28 05:01:19 2026 GMT
Not After : Oct 29 05:01:19 2026 GMT
Subject: CN=46891ed76f15f8fc76206a8807eae1ab083598b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:c5:6b:03:75:89:24:f6:99:c5:19:1d:7b:
1e:a3:0c:85:48:8c:d1:cf:12:eb:c0:45:02:90:72:
53:1f:a0:84:3d:22:c5:a7:24:b4:6a:69:50:0b:3d:
5d:3f:ed:c4:a2:55:f9:9f:63:c5:a4:73:7b:5b:60:
b3:c5:3b:f1:eb:b9:ce:3c:56:82:bb:b2:9a:84:53:
3f:42:2a:74:16:32:27:10:97:59:85:54:b7:b1:19:
33:78:36:4a:88:36:03:a1:d2:a7:a2:ab:d1:9c:54:
d4:e0:26:2d:38:49:d5:02:1d:b8:4e:75:4b:7e:4e:
ae:30:83:88:f9:12:df:97:41:25:8d:9b:31:24:1c:
9d:42:c8:c2:8b:72:15:32:55:70:9b:ce:a7:d2:02:
49:2e:fe:9d:1d:b8:0e:1f:70:b1:2d:af:7d:04:0a:
2e:c6:af:c9:f0:df:c3:ad:5b:19:f6:7b:cc:72:c8:
7b:08:ae:91:7d:42:39:55:a4:24:5b:83:42:c6:cf:
9d:a1:58:a6:03:4b:05:5f:9b:70:ac:32:3a:f1:dd:
49:f8:0b:07:03:b8:95:f0:70:75:94:8d:51:b9:49:
f1:7b:f4:43:b2:6f:9b:28:19:63:33:22:da:bc:da:
33:96:23:b5:c0:ab:45:69:d9:4f:8f:d0:b8:1e:00:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:89:1E:D7:6F:15:F8:FC:76:20:6A:88:07:EA:E1:AB:08:35:98:B4
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5c:13:da:d4:65:99:ec:53:3a:2f:cd:0c:a3:bd:ce:66:8f:
59:4d:64:39:b7:3f:c2:84:3c:2f:ae:cc:72:70:02:cb:d7:61:
eb:10:e5:68:6a:df:28:3a:23:e5:7c:1a:8a:ca:25:f9:75:2a:
97:ec:4e:27:f0:0e:a3:9e:d5:17:f1:99:ac:91:86:be:d5:ea:
28:3c:78:37:09:d5:6f:3c:f8:50:74:53:d5:75:33:b2:e3:89:
50:48:5d:62:29:52:f1:0e:d0:d7:ea:07:c1:58:85:d6:bc:14:
c3:81:04:64:50:08:d8:7b:a7:67:1c:a8:82:fc:6c:fc:28:24:
49:60:76:d1:5b:61:0e:58:f9:0a:ab:ad:f6:72:b6:1a:65:45:
52:f1:b0:6d:10:5d:f3:57:60:64:02:3e:b2:ce:93:ea:23:f9:
aa:4a:a5:e9:81:39:36:8a:6e:76:32:d7:51:72:30:7c:4a:07:
67:a5:08:4e:b8:b0:ee:1c:c7:3d:8d:98:67:22:18:0b:80:a2:
50:c9:36:e0:e7:d2:74:11:33:3c:23:b5:56:23:e9:66:44:89:
c8:0e:86:e4:71:dd:60:1b:f5:f5:f5:46:0a:75:86:1a:5f:5b:
ab:20:f6:22:7e:e7:b8:22:5a:55:55:cc:40:7d:54:77:a7:b2:
b4:08:04:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:32:47 2026 by rpki-client