Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: 7m96nxAuna+nvdqLopJPqApDh5sTbQapSOnv+A8fbl8=
Subject key identifier: 98:B1:2A:88:C8:3E:F6:91:9D:52:47:CC:C0:18:3D:90:4F:F7:3D:50
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 01A17F619329BD18542FB8176C48693DF5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 0B1A
Signing time: Tue 27 Oct 2026 22:01:03 +0000
Manifest this update: Tue 27 Oct 2026 22:01:03 +0000
Manifest next update: Wed 28 Oct 2026 22:01:03 +0000
Files and hashes: 1: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: A06/5ZPSac3Y581eRRxGY1qB7S6GM99y960t5v2cFjA=)
2: fEX8gqUG1LVB_0Itz6jjy8BylCM.roa (hash: bClbr4BM1B8au7SouGGHSbu2r3IvtTxx8cZlmVhtATA=)
3: icQ0AcEvu_-qE7TgC7krMOgnJZw.roa (hash: TT85iwxVDL43p5rxPlJ2c7AZR544/dDmq5mbe/7Jn68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:93:29:bd:18:54:2f:b8:17:6c:48:69:3d:f5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Oct 27 22:01:03 2026 GMT
Not After : Oct 28 22:01:03 2026 GMT
Subject: CN=98b12a88c83ef6919d5247ccc0183d904ff73d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:4c:da:5d:a7:8f:e7:01:b5:04:be:8c:72:
9f:a5:52:0a:c9:c7:94:da:b7:6d:e8:6f:91:62:a5:
c2:be:86:d9:f4:61:0d:12:f3:06:1b:de:ce:0b:70:
61:40:b9:92:99:04:46:b4:c9:55:77:3e:3f:e2:ea:
41:e7:63:c9:69:30:e2:ac:3c:a3:d6:03:23:93:de:
9d:e1:26:bf:e4:0a:dd:61:e3:4e:f0:cb:6b:45:ae:
4c:bc:66:4b:02:70:47:c5:36:2a:14:13:c8:13:50:
97:11:9a:14:71:1c:12:55:63:f7:a4:b6:08:eb:f1:
e0:97:90:61:52:71:3d:30:5e:14:f4:e1:64:b2:b1:
c9:32:1a:bc:77:0e:55:2e:18:b3:02:11:f5:65:c2:
97:84:0e:92:38:4d:45:c8:2e:23:6c:03:12:39:8f:
2f:23:b1:65:d0:fa:cc:7f:a6:02:de:4e:fd:2e:7c:
0b:b5:fe:fa:d7:68:ae:87:13:a2:f1:f5:e0:75:cf:
40:2e:6a:1e:95:47:d2:2f:44:1b:b5:ed:a2:d5:c3:
f8:82:9e:fc:e3:8d:82:c8:77:bd:57:4e:8f:4f:64:
e7:19:5a:5a:81:af:85:29:8d:ce:43:10:97:1d:c9:
a5:09:ee:39:0a:05:b1:eb:87:48:95:31:a4:e9:61:
09:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B1:2A:88:C8:3E:F6:91:9D:52:47:CC:C0:18:3D:90:4F:F7:3D:50
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:de:4d:95:c0:de:83:88:35:f8:bb:4c:4a:86:80:b4:55:45:
9e:14:2e:7f:35:8d:1c:b9:6a:64:68:e2:94:e5:0b:a7:72:f5:
4c:1a:30:8e:ff:b3:bf:39:24:09:ab:a8:cc:13:f8:c4:e1:fa:
7e:75:bd:6f:15:d1:79:8e:eb:3f:e5:3c:f6:f3:5b:07:38:d3:
6f:8c:4b:cb:b9:c6:58:34:18:ea:06:43:56:5d:2b:14:95:4f:
16:ab:9b:d1:13:72:1a:ed:e0:95:1f:bc:ff:e2:3f:3e:79:10:
6e:5a:59:87:8c:a0:df:75:13:90:2c:4c:35:12:24:94:5e:76:
1f:8a:2b:c7:6a:6f:b2:04:d5:96:bc:b3:02:12:8c:26:b3:92:
97:73:09:df:0a:83:a6:8d:c3:8a:4b:a5:2b:39:8e:92:ec:f4:
6a:02:b7:bc:f5:12:8b:67:32:9d:24:c0:71:c2:31:28:30:14:
67:91:76:5b:92:bc:48:72:61:43:6a:00:01:4b:b7:ea:58:af:
b4:b3:d4:da:53:10:37:23:ba:65:5a:89:ae:05:a3:48:fa:44:
be:be:f2:53:88:27:6c:5b:ab:b0:77:fc:2a:88:e4:82:1f:5e:
a2:bb:3d:4f:de:4b:aa:43:0b:70:f5:af:12:b4:9d:29:70:0c:
a5:12:63:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:33:20 2026 by rpki-client