
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier: /yAb5K+tSQiILTDeM4b1uu2dE3OOt7meM8jz3BNynzc=
Subject key identifier: 0E:60:C9:AC:80:CE:C7:36:86:04:F6:06:DC:00:24:A7:7D:E5:51:D9
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 01A18186E024F8FA355FD4FD547C1DEC9577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number: 1298
Signing time: Wed 28 Oct 2026 08:01:02 +0000
Manifest this update: Wed 28 Oct 2026 08:01:02 +0000
Manifest next update: Thu 29 Oct 2026 08:01:02 +0000
Files and hashes: 1: 3iYvgJ_eTlUQ-O3G1juF5EdX47M.roa (hash: cQV4nw2YNAHZleBjiJhNysmR6KlbphemL85k3lR/q4I=)
2: IRKwCUFzai38fr65-FRH_xYS0jI.roa (hash: oO+4buqTDLcCJZOc7fvRD7YLk4AQs3LNbZe5FzwGorY=)
3: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: q3Mj7I7IQeZLgZgZ/Y8Pi+PR/UaPcScLR8XpflSjVWs=)
4: egWOQdMCICFVY-fSqkSUyufqt9w.asa (hash: KLL7Z4S+Cwpn2TeUDxPx/ngJ0cRsd9rXvcGeQB6iLDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:86:e0:24:f8:fa:35:5f:d4:fd:54:7c:1d:ec:95:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Oct 28 08:01:02 2026 GMT
Not After : Oct 29 08:01:02 2026 GMT
Subject: CN=0e60c9ac80cec7368604f606dc0024a77de551d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:17:d1:e5:76:1e:99:7e:ab:01:3f:6d:45:7d:
1e:1a:63:7c:97:44:44:7f:f4:be:9c:c9:a5:6b:66:
02:69:a1:14:d3:44:29:a5:43:d4:a3:0b:a8:41:30:
04:17:6a:df:ae:ba:45:ac:24:75:d0:08:dc:b8:e3:
c7:7c:42:59:92:d0:8a:2a:0b:6f:47:19:92:2d:32:
90:1e:a6:dc:a3:ab:ce:ab:58:e5:c5:d0:28:18:2f:
cd:86:3e:37:a1:71:73:17:5e:62:98:8f:43:9b:16:
5c:5f:55:33:ae:68:d0:71:17:b5:10:fe:5f:95:17:
94:9e:41:e4:40:2b:46:55:0c:5b:b2:ba:38:5d:3e:
2e:e4:c9:ec:62:9e:df:b6:9d:65:f3:33:bb:73:c7:
08:b3:ca:ec:12:d3:cc:f0:c1:fa:ee:9f:eb:c4:c9:
99:21:8a:37:84:93:2d:87:45:54:85:5d:12:a1:79:
8a:e1:e8:29:69:81:f3:1a:95:1a:49:fc:dd:7d:85:
fc:f0:f4:56:20:27:a3:26:f2:86:b3:4b:71:4d:01:
05:00:82:2c:56:35:e9:2d:0d:62:0f:b4:56:ca:ee:
91:86:0f:0e:ed:33:b9:93:7c:e2:a1:eb:a9:98:a4:
36:62:fa:7a:d2:b3:80:4d:fc:07:3e:f8:3c:f5:55:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:60:C9:AC:80:CE:C7:36:86:04:F6:06:DC:00:24:A7:7D:E5:51:D9
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:59:5b:5a:35:c0:1c:86:d4:81:27:2a:1f:77:1f:c0:e5:8d:
2a:13:d5:fc:d6:d0:42:cb:89:a8:2d:09:63:5b:ba:35:3a:ba:
6d:16:c6:c3:bb:92:75:f4:32:ea:e8:eb:b9:f2:0c:25:78:5c:
11:9c:88:00:dc:2b:5d:2a:48:38:d8:f2:0d:f8:a7:21:a7:3f:
93:6a:fd:5d:81:6c:54:7f:59:82:1b:82:37:6a:55:81:f6:d1:
71:d1:b5:b8:41:cd:a3:1f:fd:14:da:0b:fb:b4:90:cd:8a:72:
41:60:70:8c:a2:93:51:7c:9b:5a:89:c0:fa:f4:e5:dc:75:92:
b9:78:37:ff:ec:13:d1:45:4b:fc:1f:74:fe:a2:89:ed:50:f2:
4d:7e:3b:85:24:c8:4c:f1:91:2b:7f:77:bb:17:66:f4:f9:65:
73:72:14:ca:27:0e:e0:a0:f9:2f:b4:d8:97:af:e7:cd:db:94:
c7:ee:1f:0b:3b:9a:7b:de:d6:62:b8:0a:16:05:80:c0:db:04:
ae:1f:de:1e:31:91:48:2c:52:c1:90:ef:bb:3b:b8:39:7b:8b:
af:ca:30:c4:22:44:63:86:4b:3a:59:e4:80:3a:e0:02:5c:15:
b3:24:e1:26:aa:10:a4:11:8b:b3:e0:96:db:c8:71:74:a5:54:
50:25:7a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:41 2026 by rpki-client