Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: SPkHrR8E/uis2KMqbTr/c3qk9kux0AWf24lvMwRq2Ck=
Subject key identifier: CE:34:5C:5A:AE:19:6A:95:8B:B1:A1:29:98:FF:0C:E3:FF:F9:06:84
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 01A19431E9969E6AD2E2B7D551E2E19C3970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 1B0F
Signing time: Sat 31 Oct 2026 23:01:01 +0000
Manifest this update: Sat 31 Oct 2026 23:01:01 +0000
Manifest next update: Sun 01 Nov 2026 23:01:01 +0000
Files and hashes: 1: A68FGxDlgvGi2ExLVyu1Rtus6jY.roa (hash: OAq7I962/haIw/8uA0XXyCPjF4pVghhaZk8tZjEL3zU=)
2: VKOQ1y_Uw5fzQd8b1Hdd3EKQAlM.roa (hash: 32JiiJLEtTayhYhvmHeuz5r0x6saNvGEu+svv9Ba2PA=)
3: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: /DxKCSYKVAiiCQZFtvEQY8ctbupV4ELrq2NSYvwBFgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:31:e9:96:9e:6a:d2:e2:b7:d5:51:e2:e1:9c:39:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Oct 31 23:01:01 2026 GMT
Not After : Nov 1 23:01:01 2026 GMT
Subject: CN=ce345c5aae196a958bb1a12998ff0ce3fff90684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:73:78:46:13:51:fd:7e:dd:e6:a4:cc:64:
64:80:15:3f:50:dc:5e:3a:44:b9:84:e6:32:a9:c8:
13:c4:85:3b:90:4e:4f:cd:5d:64:f1:23:56:bd:f0:
8f:3a:2e:ad:57:13:06:59:12:5b:03:85:4b:26:30:
38:07:c2:50:a5:71:ee:58:73:25:9a:82:27:eb:0f:
8c:68:f2:a4:19:f5:f9:e9:1a:59:c1:9e:ba:90:73:
6d:77:8d:7b:22:9f:c4:cb:4d:cd:ed:cf:bf:88:42:
ef:36:17:96:49:ce:3d:bd:03:e2:6d:29:6c:29:a4:
63:57:b2:3d:36:8b:d7:8e:45:11:6c:12:50:b3:c6:
1a:2d:35:64:98:73:37:42:7a:6c:ed:57:3d:67:38:
41:a7:3a:74:bb:40:70:fa:e5:7b:35:af:81:90:f1:
79:31:11:ff:3b:34:23:47:5e:13:01:f2:2c:1c:b3:
12:2b:d5:0f:84:42:9f:6c:81:38:ae:9a:b8:91:62:
78:c9:98:52:71:a1:a4:a7:f4:05:a2:ed:2e:9b:87:
41:32:b8:ba:f5:cf:3b:5e:66:ac:a5:d5:c0:09:04:
9c:18:45:60:f2:71:3d:66:67:2d:21:b7:2c:6e:9b:
22:0f:f2:3d:7e:14:c9:0d:1b:e5:5e:44:80:5b:ef:
83:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:34:5C:5A:AE:19:6A:95:8B:B1:A1:29:98:FF:0C:E3:FF:F9:06:84
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d4:1e:3b:5e:44:3f:7c:05:eb:74:79:70:0b:a9:df:6f:aa:
f8:b7:b1:56:0c:5f:d7:4a:50:fb:08:34:58:f2:32:e5:0c:98:
6b:90:3c:a1:f0:0d:e9:3b:84:0c:c6:a8:9d:c1:dc:d2:05:61:
f6:a0:f8:77:d4:5d:cf:e9:62:90:21:e4:65:0b:85:32:46:52:
2d:f2:b7:0d:51:05:a0:4e:7b:79:0c:89:2b:91:68:ee:9b:9f:
cd:0e:bc:33:92:d9:96:db:52:8d:7c:a3:51:9d:6c:d8:d6:f0:
6e:7b:93:06:65:21:83:26:08:ad:52:28:e7:44:de:df:d2:5a:
d8:90:dc:11:99:93:3c:1a:22:d3:9e:59:1f:a3:03:5b:2a:fb:
4b:a5:c6:90:e0:94:b1:b3:3a:65:b1:1b:dc:bb:40:f8:c8:81:
8e:3c:cb:4d:72:85:03:d3:ff:a0:38:e7:e1:da:98:42:5b:1b:
6f:7b:e5:f7:ff:94:0a:e3:a2:d8:12:5a:62:b6:29:0e:bf:de:
ff:23:af:ea:d6:60:24:a2:fb:51:9a:b8:f3:f6:ad:06:db:99:
e5:3d:e5:b0:ca:d2:f2:43:b7:b3:92:fa:71:93:ef:36:50:1f:
97:6e:a5:ad:8b:40:56:ce:ab:37:36:f3:0e:5d:4b:32:0f:98:
e1:9e:2f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:21:58 2026 by rpki-client