Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
File: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft (raw, json)
Hash identifier: zx4lu/urFJZBV7Yf1ynz2i2/ar7vAnPAuF3ezu/KS7E=
Subject key identifier: 98:93:5B:20:44:8E:D8:D0:C8:15:5C:B5:54:B6:0D:B7:A3:7F:57:FF
Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
Certificate issuer: /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Certificate serial: 01A1800666883B72464A310AFAEA8958D244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
Manifest number: 10CA
Signing time: Wed 28 Oct 2026 01:01:05 +0000
Manifest this update: Wed 28 Oct 2026 01:01:05 +0000
Manifest next update: Thu 29 Oct 2026 01:01:05 +0000
Files and hashes: 1: RO-P37ZaJBhYTx2bPXE9-XaK6mc.roa (hash: qyOlC1NYVIRV04UnpCxjxHKBjKTFjIWJJFf105WAhVM=)
2: YKi780qn6FW-vZj0d6XHQOHrqbQ.roa (hash: rMq2q15Snxkciksk+EVkOAWKgQLfpaX7NQt2oMI5MCA=)
3: ieAH2GAdM25ypMYzPHz7HAjF8k8.roa (hash: qDhC0OHMg4VVe7cqbWIjTimnpwIwAeQISg7rF/taRDE=)
4: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl (hash: 7sWkp5X30q2NYsX7yph9+baUmh361RjaYrh6Lyz4zZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:66:88:3b:72:46:4a:31:0a:fa:ea:89:58:d2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Validity
Not Before: Oct 28 01:01:05 2026 GMT
Not After : Oct 29 01:01:05 2026 GMT
Subject: CN=98935b20448ed8d0c8155cb554b60db7a37f57ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:17:97:b6:47:33:98:d0:f3:f2:d6:f6:64:
bd:fe:bc:17:d2:9e:0a:ef:40:66:52:26:3d:dd:7f:
69:51:58:9f:7f:5d:ad:72:49:8a:78:41:6d:34:18:
a9:04:e5:5a:e3:e4:95:3c:39:76:6a:9e:1b:12:70:
4d:cf:97:c8:44:f8:f0:87:9f:80:cd:c9:22:eb:b9:
03:89:fc:38:b8:6d:43:aa:94:10:d5:88:c4:0a:86:
8a:6d:be:cc:95:46:3f:2b:fa:52:e9:c2:c6:93:58:
53:1c:6f:68:e0:cb:47:d6:64:b1:ee:80:35:e7:e6:
14:e5:0f:4d:41:0a:c5:db:02:49:a2:4d:a1:d5:49:
05:3a:7f:e3:09:14:2b:ea:9e:f1:24:44:bd:86:32:
f1:0c:d9:a5:df:81:05:43:79:43:bf:4e:a7:d3:35:
42:78:c1:59:42:79:23:79:06:aa:0c:b5:91:4c:cf:
05:5f:34:1b:3c:8e:ec:0c:c0:4b:a3:c5:23:89:e2:
ac:57:92:eb:ed:1a:a3:5c:4f:93:43:e4:28:76:e7:
f2:38:2a:18:92:b5:84:5a:8a:8f:c8:10:35:88:31:
a1:2e:6c:c2:66:b4:d6:a1:c3:4c:ff:d3:80:53:2d:
d1:68:c6:6f:07:70:6a:70:81:02:04:82:63:4e:7c:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:93:5B:20:44:8E:D8:D0:C8:15:5C:B5:54:B6:0D:B7:A3:7F:57:FF
X509v3 Authority Key Identifier:
keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e2:21:42:0f:9b:fc:d4:ec:16:39:3c:2f:60:09:88:30:e4:
67:8b:a4:1f:b9:66:13:cf:f0:f4:bd:8a:c8:77:ad:0c:95:e4:
48:e8:ff:be:62:9a:0e:ec:7d:4e:25:31:21:93:4d:2e:10:d1:
66:fd:3e:6d:65:01:7b:32:83:f4:38:99:55:bf:17:0b:ce:1d:
57:fe:8f:65:b8:39:cd:a9:7a:75:a7:b5:2f:5e:bc:c6:68:da:
8c:7b:99:13:df:e6:d5:4f:cc:51:73:be:32:75:4f:5f:c0:18:
46:c2:20:21:56:20:74:67:38:f4:87:14:4c:8c:5a:fc:3b:62:
b1:b2:1f:cd:ae:27:dd:88:d6:2b:1b:77:20:db:64:09:fc:ff:
95:7b:af:c1:a3:7f:d6:9c:6a:da:59:dd:0f:16:3a:a8:da:94:
71:55:49:37:4e:ef:54:eb:42:bd:a0:28:60:a2:53:8f:78:c2:
15:2b:b9:dd:78:65:b5:78:bf:f4:7e:8d:6e:e3:2d:38:dd:65:
d5:99:c0:9d:e0:78:85:08:fb:6f:ec:cc:90:cc:f5:09:ba:b2:
53:9e:e8:b4:be:3b:11:73:a1:82:c4:f1:57:8e:87:9d:58:2d:
40:e3:cd:d9:67:61:77:11:f4:d0:ae:27:16:d8:5e:56:1b:c3:
4e:26:62:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:38:36 2026 by rpki-client