Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: S89++VfGr5vVm9vfsXT0uKY+5pCOkf/sCeCUJKYcKoo=
Subject key identifier: 69:17:C0:78:83:5C:99:CF:C8:AE:26:7C:CA:5C:6B:91:F0:1D:5B:FF
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 01A18B9C2935ACF91D219EA801B3D5052588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 1AD0
Signing time: Fri 30 Oct 2026 07:00:29 +0000
Manifest this update: Fri 30 Oct 2026 07:00:29 +0000
Manifest next update: Sat 31 Oct 2026 07:00:29 +0000
Files and hashes: 1: 80ddEu08r1uFh6uix50N7d9F0o8.roa (hash: DtyowyLw2dVPCBg0r3cdDO/1HWaqkm/fNKE6IcB/i2Y=)
2: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: WWqAIm2sVLAfqHPnbv8+wHmTlFnPqOLyce2xe7uWxMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:9c:29:35:ac:f9:1d:21:9e:a8:01:b3:d5:05:25:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Oct 30 07:00:29 2026 GMT
Not After : Oct 31 07:00:29 2026 GMT
Subject: CN=6917c078835c99cfc8ae267cca5c6b91f01d5bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:df:2a:f4:5d:7e:b1:1c:03:d0:d4:bd:e7:
82:df:6e:92:3e:78:6c:1e:5c:e3:70:21:0a:03:b3:
b0:31:87:94:9c:5f:71:bd:bc:cc:bb:7f:36:2b:be:
2b:90:42:2c:f3:a6:61:61:46:92:cc:48:90:86:66:
55:58:fa:1d:53:8a:8f:20:e0:f1:b2:22:4c:5f:87:
2c:42:40:d2:65:fd:3f:c8:26:c4:d8:75:2a:1d:2e:
d8:9b:30:48:56:0b:05:ed:86:00:42:df:bc:7e:e1:
d2:55:5b:67:71:69:fd:cf:db:4e:74:0d:0d:55:d0:
52:89:33:c9:42:e7:f6:64:82:11:2c:8d:8f:0a:10:
ed:23:2b:55:3c:4d:bd:75:c7:a3:3c:d8:9a:23:a3:
1b:65:37:ee:1c:bc:53:ea:ca:5c:38:1d:59:fc:e1:
47:75:f3:87:8e:3d:ae:75:a7:45:16:de:b5:c2:97:
49:91:23:bb:40:9e:98:93:63:00:7e:1f:54:69:62:
5b:1d:bc:31:ab:67:d7:25:d8:a7:c5:b7:cc:b1:35:
32:8d:94:05:1e:4c:b7:1f:bc:1d:13:e5:f1:4c:d7:
3f:24:b0:9b:38:7d:02:e6:a9:af:86:00:c1:8f:33:
85:98:7e:ed:d2:7d:c5:44:70:58:ce:e0:5f:b1:84:
65:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:17:C0:78:83:5C:99:CF:C8:AE:26:7C:CA:5C:6B:91:F0:1D:5B:FF
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:74:09:9f:05:c6:10:5a:19:00:4e:30:ed:76:4a:18:34:ff:
f3:5c:03:88:c6:06:8e:f6:d4:97:23:63:34:e8:d9:1c:a1:7c:
c5:4a:64:8b:7d:d0:dc:76:79:5f:45:9b:71:71:24:3a:f7:af:
5a:58:62:c9:e0:30:96:49:c5:56:74:36:41:72:e4:ab:77:06:
07:2c:9e:b2:5b:b3:b8:09:84:8d:32:24:c9:1d:3e:60:39:f8:
89:5d:2d:3b:cb:2b:e5:74:db:78:4f:a3:32:ed:e8:9d:9f:3b:
e0:c1:ed:47:85:a7:9d:16:2f:e5:eb:8f:7f:9f:41:fc:9e:bb:
9e:c9:24:1a:70:1c:c6:f4:03:b9:62:4f:8d:23:f3:d7:a4:16:
11:45:9c:52:9d:cb:be:17:2e:9c:ea:c7:74:eb:46:e3:68:d1:
4b:0b:e9:b3:7f:2d:8d:55:bd:20:d3:66:9b:8e:86:f7:20:0e:
4a:23:bd:c0:f0:4e:e8:80:a4:17:f6:fe:a1:0c:99:d1:b2:c9:
4a:ac:4f:10:f6:6e:73:27:c8:c7:7d:c3:09:9e:79:fa:34:e0:
91:35:55:f1:00:52:11:e3:b1:85:c2:81:c1:c3:d1:b1:57:8e:
14:99:aa:16:0b:68:18:66:1d:68:1a:80:76:68:a2:e0:13:d1:
32:ad:38:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 17:15:36 2026 by rpki-client