Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
File: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft (raw, json)
Hash identifier: pE3WEMRyRYQE0KVzVCh0Wsdyn66Fi2V+ylBSB3obNNM=
Subject key identifier: E5:08:E4:DA:B0:52:0E:44:3C:F2:DD:3A:5D:A1:C1:6C:97:E9:D2:5D
Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f
Certificate serial: 01A189E547B15459A47698039841DE76CB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
Manifest number: 06E0
Signing time: Thu 29 Oct 2026 23:01:07 +0000
Manifest this update: Thu 29 Oct 2026 23:01:07 +0000
Manifest next update: Fri 30 Oct 2026 23:01:07 +0000
Files and hashes: 1: je_dZ3uZwgn_oNlxsf8-FTUq220.roa (hash: ypEWzWUb+UjYyAsZX+8LRu9EB7C2RkmFTCbcPYB408Y=)
2: pt1RHK2niClvZGTwHDZ-ZsdvbEk.roa (hash: /6TgV1nZB5u4zUl3iLf85GJmzgWJev9Zymtz9O1XUPc=)
3: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl (hash: 5pCrOopqvcRXjea1VFScGRaNY6F4eLX+ZHdI0+UDnqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:e5:47:b1:54:59:a4:76:98:03:98:41:de:76:cb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f
Validity
Not Before: Oct 29 23:01:07 2026 GMT
Not After : Oct 30 23:01:07 2026 GMT
Subject: CN=e508e4dab0520e443cf2dd3a5da1c16c97e9d25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:99:34:24:74:bd:c8:22:a8:e4:99:dc:aa:
97:73:53:6f:1e:d2:e1:82:9c:b5:30:8d:04:9a:85:
54:b9:d7:4f:26:f9:d6:61:d1:44:1f:d5:77:6d:e9:
6b:a2:9c:e1:3a:d3:45:35:53:d3:4f:c9:93:b5:45:
7f:06:60:bb:f2:f4:05:6c:23:3c:3a:a7:c8:97:95:
d7:a6:18:60:cf:91:ec:51:ff:53:bf:ee:35:ad:46:
2b:bb:11:d7:32:d4:07:75:82:81:07:26:7e:29:6e:
da:76:d1:4f:a0:eb:81:1b:83:5c:8b:96:6f:69:78:
cd:0b:5a:4a:5f:4c:61:cd:f6:78:7a:bf:7d:5d:22:
2d:f1:e0:e0:7f:e0:f6:4b:dd:08:ec:91:24:2b:df:
72:7d:8c:19:ac:bc:c2:8b:ce:0b:90:d3:fc:40:2f:
b9:b9:dc:92:ba:56:a2:79:c8:24:6b:fd:cb:56:34:
b9:cd:c6:e6:75:98:70:a5:4f:90:06:c7:3c:fa:b8:
b8:43:c2:7b:9a:7f:69:cc:d0:b7:eb:79:a5:62:f5:
89:11:96:f2:a3:cb:84:0c:e2:37:c0:52:d0:ee:59:
e3:25:af:2a:64:15:4e:81:55:95:da:e3:0d:55:a4:
d7:c0:8a:ab:47:f5:0a:3b:41:c7:1a:ce:95:08:25:
e0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:08:E4:DA:B0:52:0E:44:3C:F2:DD:3A:5D:A1:C1:6C:97:E9:D2:5D
X509v3 Authority Key Identifier:
keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:43:f0:ba:8f:1a:1e:e4:78:13:63:41:67:05:e8:44:44:c3:
94:e5:05:00:aa:39:f0:7a:5f:10:dc:0e:db:a9:49:04:2f:88:
0e:98:da:1a:14:33:3e:d8:53:20:b7:2c:77:e7:71:8e:b6:e1:
5e:54:2d:bd:0a:c7:55:37:de:5c:0c:94:60:0f:c0:3f:84:30:
49:0c:66:0b:e1:38:6e:3b:32:08:06:9d:0b:f3:91:9f:03:65:
52:28:3e:0c:f1:e4:e0:a3:0e:1e:e4:3e:36:bc:9c:57:98:e5:
28:c6:84:eb:c8:ed:95:8e:b9:d6:dc:94:f9:ba:c8:2e:ed:25:
4a:57:4d:cb:ed:9a:2a:4d:c1:0f:ba:9d:5b:15:71:53:f9:5a:
b7:69:b7:f6:61:bc:68:9b:09:ac:fc:9b:9f:be:b0:bc:6d:e8:
be:84:16:ac:3b:8b:4c:ec:8b:56:98:c3:3c:2b:23:a3:d6:72:
30:f7:1c:ad:c5:a7:4e:14:88:41:05:9d:38:e3:09:ce:84:27:
30:fd:33:e4:c8:4a:79:bf:bf:10:72:7f:e0:ac:03:9e:5f:a8:
28:6d:98:c5:a6:1b:df:b1:6d:b2:f7:33:69:b7:22:55:52:a5:
2a:21:a5:f2:f3:8d:76:47:00:fb:72:ea:c8:32:a7:c3:24:5c:
e0:b8:fd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 06:43:28 2026 by rpki-client